Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/FAAyjYTXf2nbjz8B0MhDLCaFlZM.roa
File: FAAyjYTXf2nbjz8B0MhDLCaFlZM.roa (raw, json)
Hash identifier: efaUgfU9ee5LmChNFI0005eXG9LzHQ2Nflmw+S/ffC4=
Subject key identifier: 14:00:32:8D:84:D7:7F:69:DB:8F:3F:01:D0:C8:43:2C:26:85:95:93
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 018572F11E79FB60EDAD241AC451F2F9459B
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/FAAyjYTXf2nbjz8B0MhDLCaFlZM.roa
Signing time: Mon 02 Jan 2023 14:44:42 +0000
ROA not before: Mon 02 Jan 2023 14:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212318
IP address blocks: 178.57.66.0/24 maxlen: 24
178.57.65.0/24 maxlen: 24
178.57.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:1e:79:fb:60:ed:ad:24:1a:c4:51:f2:f9:45:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Jan 2 14:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1400328d84d77f69db8f3f01d0c8432c26859593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:78:96:8e:9d:2f:51:cd:c1:79:2b:9d:a8:
78:58:a6:84:2c:f2:f1:fd:90:2e:48:84:cf:9c:0f:
9e:49:b8:4f:83:a8:55:17:49:0a:8e:0c:b7:69:06:
69:24:54:0f:1c:83:a9:a7:e9:7e:e8:f3:d9:a9:02:
25:72:bc:6b:8d:73:44:f5:44:b9:f3:77:80:b5:11:
72:a3:91:f7:36:bd:3c:7b:f5:f9:8d:94:f3:ad:06:
42:4d:8f:d3:1c:f7:af:32:7a:f4:6a:04:18:de:59:
74:5b:c4:f4:9f:ee:cd:48:a3:0c:73:68:f9:e8:b1:
de:fc:02:7e:e5:a0:de:75:70:20:7e:69:07:f0:d9:
dc:55:be:65:a0:fa:74:fb:2e:bd:cf:96:a6:90:7e:
03:51:3e:f2:65:5d:70:22:a4:34:18:31:b5:6e:0f:
e1:93:7c:bd:b1:94:f0:bf:1a:ef:25:84:cd:1b:51:
6b:ef:05:9c:69:34:be:65:e2:03:58:ed:04:5c:79:
1e:4e:17:5b:b5:f1:e6:8d:dc:13:57:c2:7f:e3:b9:
d2:54:ba:e8:c7:a2:66:03:96:e1:0d:5d:26:d6:c9:
08:50:1a:1f:d4:b6:d6:96:53:e8:3a:52:53:2e:8d:
e4:15:9d:86:18:f8:e7:5c:be:57:02:d0:f0:c8:11:
51:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:32:8D:84:D7:7F:69:DB:8F:3F:01:D0:C8:43:2C:26:85:95:93
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/FAAyjYTXf2nbjz8B0MhDLCaFlZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.57.65.0-178.57.67.255
Signature Algorithm: sha256WithRSAEncryption
6d:4c:c3:10:80:be:61:a4:06:8a:0e:10:54:92:9f:a6:01:92:
ec:8b:8c:ea:16:33:4f:e9:f2:6e:1a:a9:a2:33:99:8b:34:6a:
08:7c:ec:d9:61:21:cc:83:c4:9f:ba:a2:bd:f5:69:9e:d7:31:
2c:ff:d9:03:22:b2:19:7d:c4:83:b2:bf:c9:0e:f2:80:25:12:
39:f6:94:80:08:c2:be:55:05:c1:b0:14:ed:23:2f:09:10:f6:
d4:be:c9:4c:f5:4f:bc:b0:55:18:af:e5:f5:a8:d4:5e:05:bd:
7c:8c:2e:b2:68:63:78:2d:35:88:35:48:af:78:da:e0:20:18:
36:d5:7d:c0:05:b6:d6:80:62:4b:67:3d:15:4e:66:c8:0b:82:
42:ef:43:f5:53:3a:41:c1:9a:da:ff:22:90:cf:7a:64:98:62:
11:ce:01:5f:40:1c:fc:b0:25:d6:b4:20:99:33:7b:ce:7e:cf:
ec:cf:28:bd:a3:16:d6:fc:f5:0f:e5:47:3f:7b:48:63:83:de:
b7:c0:12:79:d7:96:3e:6c:09:b1:20:59:d6:8d:7f:b0:3f:88:
8a:7d:07:b1:4b:df:b9:94:94:cd:da:72:64:73:67:6e:a9:1c:
ba:a4:83:cd:c7:46:39:7b:16:4e:28:bd:d5:24:fe:96:a0:10:
64:3b:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:37:45 2025 by rpki-client