Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/FBzZn8RiXpCgwLf5zYWULqQ5B5g.roa
File: FBzZn8RiXpCgwLf5zYWULqQ5B5g.roa (raw, json)
Hash identifier: qVSo+f+K+Qy1zW/vgTxF68IHx7nRv6N9ZvFOG6dLjwU=
Subject key identifier: 14:1C:D9:9F:C4:62:5E:90:A0:C0:B7:F9:CD:85:94:2E:A4:39:07:98
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 0185714C39A97E13C4BA49626456A144B152
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/FBzZn8RiXpCgwLf5zYWULqQ5B5g.roa
Signing time: Mon 02 Jan 2023 07:04:58 +0000
ROA not before: Mon 02 Jan 2023 07:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211401
IP address blocks: 185.46.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:39:a9:7e:13:c4:ba:49:62:64:56:a1:44:b1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Jan 2 07:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=141cd99fc4625e90a0c0b7f9cd85942ea4390798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:80:0b:bf:e8:18:af:12:94:1d:60:22:aa:cc:
22:b0:31:64:09:5c:bd:c4:e3:83:9d:7f:61:76:57:
e1:c5:9a:dc:25:02:7a:1f:f9:3b:d1:f4:cb:cb:25:
c1:19:10:02:af:5e:ad:5e:a5:c6:3d:01:2d:70:d2:
fd:9a:e5:61:b3:e4:fa:e5:94:ed:f2:96:6c:af:a0:
60:40:5d:28:b5:ad:da:54:ae:1f:1f:ea:31:f1:aa:
13:4e:7e:69:fb:9b:2d:7a:55:1d:e4:4a:9c:d1:ea:
e4:ab:0c:71:06:05:c9:2a:96:1f:1a:d9:df:a6:c3:
b3:a4:ea:27:d6:19:9b:d3:9f:b2:8d:66:34:80:60:
5d:ac:21:05:f9:19:39:b1:dc:c3:8f:1e:5c:59:aa:
b9:bf:cc:f8:bc:e1:0d:71:f9:31:e4:a1:0f:99:71:
0d:85:3a:2f:5c:0f:79:d9:b1:9b:e0:66:28:34:39:
71:27:03:35:6d:4d:8a:28:e1:a6:60:12:00:8e:fc:
f5:ab:37:3d:86:fb:1d:ef:8f:3a:e7:5a:52:95:0f:
c9:78:bb:d8:6f:fe:99:89:dc:d3:9d:a3:ab:31:a8:
73:87:9c:16:72:d3:fc:8c:39:44:ad:45:c4:75:cf:
66:ee:7a:89:2f:b2:79:db:06:9f:d5:5c:6a:b3:91:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:D9:9F:C4:62:5E:90:A0:C0:B7:F9:CD:85:94:2E:A4:39:07:98
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/FBzZn8RiXpCgwLf5zYWULqQ5B5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.40.0/22
Signature Algorithm: sha256WithRSAEncryption
35:64:30:09:85:2f:25:aa:91:ed:8d:18:3b:d3:36:0e:dc:4c:
b7:00:3f:c0:15:20:3e:8b:c9:3b:3f:12:85:19:c6:39:dc:27:
a4:1b:7a:d8:2a:f3:0e:5a:cc:63:24:4a:32:cb:9d:ab:85:e9:
8a:f6:9f:ff:ed:4a:64:63:ec:af:6f:0f:c9:e2:11:dc:02:09:
b0:05:c8:b9:46:bb:1a:d3:97:53:f7:67:89:a5:78:c6:9e:3e:
27:48:79:1f:d5:2c:9b:73:c5:7d:ee:8e:3c:21:93:8f:2f:ff:
b3:47:ec:23:8f:eb:4e:65:eb:ec:82:1a:e4:72:51:84:3c:a5:
cc:85:af:ad:89:8e:44:f2:3e:e6:20:95:c5:29:7c:39:b8:42:
b8:34:f3:99:dc:c6:7d:dc:5f:1e:73:75:16:de:4c:d3:c8:20:
b3:47:ef:05:88:52:6a:67:7f:3d:fc:d7:29:44:22:40:a9:6c:
5c:3c:db:dc:ba:47:8f:98:08:f0:10:4e:40:24:f1:43:31:4a:
a3:c0:51:d5:41:13:71:81:94:d7:d9:04:83:b0:53:15:e1:56:
8f:a0:f1:eb:a4:02:ec:f1:a2:9b:a6:ba:5d:32:5d:ed:61:60:
da:07:d4:ba:c6:81:fd:c6:63:d3:1f:c0:ce:b7:d9:ec:e1:6e:
0b:27:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:43 2025 by rpki-client