Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/FmQC49tM_I-mJvLPlAkOpVK4PKE.roa
File: FmQC49tM_I-mJvLPlAkOpVK4PKE.roa (raw, json)
Hash identifier: 55ltA3gFv8LpMF57ww1DpkjQW8VKWlnSNz2GPjajn/U=
Subject key identifier: 16:64:02:E3:DB:4C:FC:8F:A6:26:F2:CF:94:09:0E:A5:52:B8:3C:A1
Certificate issuer: /CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Certificate serial: 01849B64F6FE9559045FDABC96EB3CD487E4
Authority key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/FmQC49tM_I-mJvLPlAkOpVK4PKE.roa
Signing time: Mon 21 Nov 2022 18:13:16 +0000
ROA not before: Mon 21 Nov 2022 18:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51301
IP address blocks: 185.135.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:64:f6:fe:95:59:04:5f:da:bc:96:eb:3c:d4:87:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Validity
Not Before: Nov 21 18:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=166402e3db4cfc8fa626f2cf94090ea552b83ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c8:60:38:0f:bf:61:4e:93:e9:cb:76:9a:1e:
c4:a2:d6:5e:ad:8e:ef:f1:79:70:76:03:95:d6:9e:
7c:04:c8:c8:94:11:69:54:08:fb:ef:39:de:46:ef:
55:6f:99:59:bc:93:12:18:e8:ee:a0:cf:05:6b:20:
7a:90:e3:ef:c5:c4:ee:90:76:9c:65:45:cf:45:61:
76:66:16:8b:6b:9b:04:25:59:03:19:8b:41:d5:dd:
b5:01:39:4b:ad:25:b3:e2:68:b1:b0:ff:f1:f5:38:
aa:3b:68:b0:1d:84:b9:8c:ab:1e:6c:88:45:d1:28:
6c:34:c9:dd:50:c8:ee:4b:da:b2:a0:84:1b:85:5a:
c0:91:21:49:aa:da:eb:9b:a2:fb:64:91:c2:11:a3:
29:99:2d:d7:ea:cf:56:26:e3:eb:9e:fa:0a:90:c9:
f2:64:ed:d4:bd:5b:e2:4f:48:63:bc:ab:bf:f1:8f:
0e:b0:a7:08:3b:bb:05:a8:2a:5d:3c:85:d1:6d:a5:
0b:73:f6:5a:76:60:21:d4:24:fd:5a:ed:6d:03:a9:
50:8a:7f:fe:68:34:ac:9c:84:f9:4c:a5:3a:01:38:
9c:8c:fa:28:5d:c2:ab:f2:3f:e5:f7:b1:13:c1:3f:
4f:de:d3:bc:ad:13:c9:9c:eb:d2:77:da:18:aa:6d:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:64:02:E3:DB:4C:FC:8F:A6:26:F2:CF:94:09:0E:A5:52:B8:3C:A1
X509v3 Authority Key Identifier:
keyid:7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/FmQC49tM_I-mJvLPlAkOpVK4PKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.188.0/24
Signature Algorithm: sha256WithRSAEncryption
03:93:f5:ed:ba:3d:3f:0b:63:2e:90:f5:bd:67:14:97:0f:9d:
90:ed:20:b6:09:f3:c0:56:0b:37:b0:47:45:da:16:d7:cd:b4:
65:91:e9:20:8f:56:17:06:69:61:fb:9f:59:69:06:81:f8:4a:
48:e7:93:fd:b1:5d:cf:c2:14:68:05:85:46:ed:bb:40:1d:a3:
5e:18:9d:7e:00:5c:59:e2:9f:03:ed:25:c9:db:46:5a:20:a3:
ef:55:7c:53:29:71:4a:b3:e1:55:43:64:6b:2a:c3:b9:19:34:
ce:06:55:50:95:83:7a:92:ff:ee:c5:3a:61:b8:af:7a:43:c6:
6e:01:e2:1a:01:82:26:b0:23:2d:bc:92:93:1d:4c:85:ef:64:
17:80:9b:24:37:65:97:7e:df:0a:9a:36:2a:c0:83:ff:ab:63:
63:d7:4d:da:bc:9d:e7:6a:c0:a1:40:c8:5e:7a:15:cf:9b:ef:
d4:55:14:3f:7e:fa:e0:58:b6:7f:4b:37:a5:62:79:d4:31:a5:
08:73:4d:d5:92:5d:ba:e9:3b:94:27:7c:66:5d:d4:01:03:28:
77:a6:e0:be:bd:e5:33:52:a8:db:9e:d6:a6:82:66:18:3f:b5:
eb:8c:d3:d6:22:21:36:b1:aa:88:65:ce:12:05:ad:a7:a5:f8:
79:14:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:19:59 2025 by rpki-client