Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/FRD3-dA5BddZbtFR-RieFBiCPEY.roa
File: FRD3-dA5BddZbtFR-RieFBiCPEY.roa (raw, json)
Hash identifier: RyC/dX+JtiljH8MfJEDCkX3LDi+mQG5mxOnVsxGnmlU=
Subject key identifier: 15:10:F7:F9:D0:39:05:D7:59:6E:D1:51:F9:18:9E:14:18:82:3C:46
Certificate issuer: /CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Certificate serial: 01856C65BF5222679C2BE339109DDDB62FFF
Authority key identifier: 91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/FRD3-dA5BddZbtFR-RieFBiCPEY.roa
Signing time: Sun 01 Jan 2023 08:14:45 +0000
ROA not before: Sun 01 Jan 2023 08:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6908
IP address blocks: 185.4.116.0/22 maxlen: 24
185.4.116.0/24 maxlen: 24
185.4.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:bf:52:22:67:9c:2b:e3:39:10:9d:dd:b6:2f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918ef823bb041ea3ac7c8936c750b6018137e2cd
Validity
Not Before: Jan 1 08:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1510f7f9d03905d7596ed151f9189e1418823c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:b6:8f:e9:2a:1f:b2:21:d4:83:e3:79:2d:
62:d1:a3:7e:4f:15:41:a8:7e:9d:e1:46:0f:fb:f4:
1c:65:12:42:24:82:c4:0a:60:14:53:48:06:9b:83:
99:55:ad:2b:f6:e1:df:48:b5:d2:38:cc:e3:e8:af:
62:6a:4b:1a:ff:c5:74:09:b7:4d:aa:33:56:25:fd:
67:aa:b6:80:e4:36:86:4c:6f:20:f2:2b:43:9a:1e:
92:1a:58:bf:c8:e3:25:b6:b8:8c:96:05:76:db:b7:
24:43:0f:40:54:5a:97:79:c3:1a:09:09:52:d6:96:
e2:8b:f8:5a:88:cd:35:e0:e6:a7:b0:03:5e:2d:42:
32:d9:2c:df:3f:83:e1:db:e4:78:2c:2c:36:1b:ea:
8c:6e:15:b4:ac:2c:0a:e0:b7:1c:ce:19:86:60:52:
4a:41:20:cf:c2:6c:d6:1a:60:35:57:fc:f5:04:9f:
99:8e:8c:08:2c:f7:ad:b8:9a:78:a5:b3:f9:86:1a:
4f:42:73:e5:5b:6b:43:91:e9:36:1f:4e:6a:5d:e4:
90:3b:40:7c:ac:03:02:f2:35:98:bd:99:1b:f1:cb:
0a:bc:48:94:1f:f7:0d:cf:f0:e9:50:f0:4d:02:95:
a8:3f:d0:12:01:c9:b9:a4:75:fd:de:8a:8e:47:be:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:F7:F9:D0:39:05:D7:59:6E:D1:51:F9:18:9E:14:18:82:3C:46
X509v3 Authority Key Identifier:
keyid:91:8E:F8:23:BB:04:1E:A3:AC:7C:89:36:C7:50:B6:01:81:37:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY74I7sEHqOsfIk2x1C2AYE34s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/FRD3-dA5BddZbtFR-RieFBiCPEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65420c-f5e2-4d29-b503-6529751b2b01/1/kY74I7sEHqOsfIk2x1C2AYE34s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.116.0/22
Signature Algorithm: sha256WithRSAEncryption
03:05:65:d9:87:41:05:09:1e:93:c9:42:77:ad:d4:ff:6c:42:
f6:35:9b:60:8d:d6:d1:a2:7f:79:3e:db:b8:b4:8b:ef:4e:bd:
29:da:aa:41:51:40:95:12:c3:05:6e:0d:82:c1:fa:9b:4e:11:
8b:12:c9:32:14:27:82:1e:d3:09:74:c5:ac:b4:19:c9:6e:34:
b9:eb:e2:e2:e9:f9:a2:f8:98:8b:13:b8:cd:46:4b:1d:bc:cf:
95:6e:a1:ff:a5:36:ce:e5:ae:88:dc:88:1a:6a:67:9e:af:cc:
3b:fd:2f:8a:ed:7b:bd:3e:d4:48:0f:e2:ca:12:9b:f6:a5:ac:
be:e1:b7:05:f9:5a:10:37:cc:38:f9:4b:57:f0:86:9d:34:93:
bd:f6:e3:21:5e:b2:9b:4b:68:f6:bd:d5:61:3d:7e:4c:fc:08:
b5:b1:34:a5:c4:79:31:47:4f:cf:57:17:7e:10:5f:f8:a8:fe:
82:c1:a8:0b:68:33:a0:46:33:04:66:cf:b9:58:53:c8:8f:25:
dc:0f:66:d0:1d:ba:0c:4f:9f:65:f2:a9:5e:7b:3b:7e:3b:6f:
7e:90:d6:13:23:2b:3b:cf:bf:d4:06:0b:be:85:d3:bc:fc:71:
5f:1b:e5:d1:59:a7:69:a6:aa:57:3f:e0:88:6e:03:81:3e:47:
09:b8:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:41:20 2025 by rpki-client