Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/FS48l_kp-MUUF3BG_xj3kXvu9uA.roa
File: FS48l_kp-MUUF3BG_xj3kXvu9uA.roa (raw, json)
Hash identifier: GPi6zLupxHR6kLsB4xmsFaMrLTPb4hVK/QiTIyP50sU=
Subject key identifier: 15:2E:3C:97:F9:29:F8:C5:14:17:70:46:FF:18:F7:91:7B:EE:F6:E0
Certificate issuer: /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial: 018B38DBBBD719FA228565412E8D564A4CC5
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/FS48l_kp-MUUF3BG_xj3kXvu9uA.roa
Signing time: Mon 16 Oct 2023 14:20:06 +0000
ROA not before: Mon 16 Oct 2023 14:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 45.150.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:db:bb:d7:19:fa:22:85:65:41:2e:8d:56:4a:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Validity
Not Before: Oct 16 14:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=152e3c97f929f8c514177046ff18f7917beef6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:86:d9:af:a0:7a:ef:ef:8b:c5:28:b2:56:94:
6d:f3:76:bd:eb:39:30:77:f9:5d:a5:93:d4:66:75:
f7:a8:96:2f:2e:d1:ba:52:5f:df:fa:38:95:6f:3c:
f5:3b:3d:ec:64:cc:f4:f6:42:d0:42:44:77:c2:b8:
ab:4b:b2:be:f7:8e:12:e9:f3:b3:4b:1e:31:8f:d3:
28:d7:d7:04:c2:4d:e2:59:ca:c2:02:c3:cb:8e:09:
6e:52:06:00:63:4a:05:38:54:66:1b:81:8b:0a:ac:
da:15:43:12:f5:d4:aa:3b:d9:63:ee:a0:22:8f:32:
01:2e:72:21:ca:19:e9:d3:20:28:31:65:98:2f:dd:
87:d0:c1:cb:c1:ec:4a:00:a9:97:d3:db:0f:e5:f6:
bc:21:a8:fc:bc:b9:e7:7f:57:48:1f:28:5d:6b:0d:
49:60:3a:a1:c8:02:df:53:c7:c7:7d:61:c7:b4:35:
65:d6:4b:bc:8d:c0:7b:8a:ec:aa:0c:e1:f8:3e:dd:
c9:95:4e:9e:9c:00:07:be:03:e2:f8:d6:c4:34:f4:
04:7e:3d:ad:29:d8:48:18:63:a0:ba:ba:c2:78:eb:
cd:c3:38:72:cb:93:aa:49:f3:2a:c5:e6:c9:61:2e:
38:e3:45:f8:bb:04:67:16:84:60:ee:b0:46:f7:63:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2E:3C:97:F9:29:F8:C5:14:17:70:46:FF:18:F7:91:7B:EE:F6:E0
X509v3 Authority Key Identifier:
keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/FS48l_kp-MUUF3BG_xj3kXvu9uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:d2:84:e6:58:3e:c3:ed:41:de:5a:f9:30:69:78:b6:4c:7f:
be:3d:63:f2:a4:46:c2:d0:c6:8e:ca:a1:4d:02:bd:e2:2e:98:
9f:21:92:70:be:88:fb:01:de:a8:d8:5d:a3:c7:b1:34:d3:76:
dc:89:2f:5e:70:45:08:8d:0c:3e:da:d3:a9:2a:06:79:e6:b0:
7c:3f:12:d0:10:54:01:81:b2:23:71:ec:fe:4b:31:13:7a:af:
c7:25:4d:ca:1f:c6:e2:ad:f2:53:01:7c:9f:00:0f:e1:38:ff:
5d:37:69:b4:b2:4d:bd:0d:4a:3b:8f:34:fb:e3:93:03:bc:d5:
51:5e:81:ec:1d:14:cc:fb:6a:20:bc:0f:94:77:d7:a7:b8:9b:
ad:e6:74:97:9e:5d:eb:a8:e2:86:8c:d7:df:5d:9b:f8:55:a5:
17:ca:64:f6:87:3e:56:61:a1:1d:52:1d:b8:0e:39:a6:f4:52:
36:4d:01:f5:a7:bc:95:11:f8:76:5c:c0:23:2a:08:34:31:78:
45:48:5b:8d:fc:81:6f:8b:55:64:cd:a5:73:e6:29:b1:07:21:
e8:00:b6:40:5b:23:0e:3a:2f:c7:6b:35:ea:f8:f6:3a:d9:13:
0a:24:c5:1c:35:26:a7:fc:08:5f:50:2f:69:07:ee:b7:a2:9b:
9e:95:2d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:35 2025 by rpki-client