Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/FusiByyxgXGntBK_9sENA2-2G1s.roa
File: FusiByyxgXGntBK_9sENA2-2G1s.roa (raw, json)
Hash identifier: K/qUFFTjePEzni6gSFE9hSEkdo7OoAdkURQpTd0XBZc=
Subject key identifier: 16:EB:22:07:2C:B1:81:71:A7:B4:12:BF:F6:C1:0D:03:6F:B6:1B:5B
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 05FE164E
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/FusiByyxgXGntBK_9sENA2-2G1s.roa
Signing time: Sat 01 Jan 2022 01:54:44 +0000
ROA not before: Sat 01 Jan 2022 01:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206863
IP address blocks: 86.62.40.0/22 maxlen: 24
185.169.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100537934 (0x5fe164e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Jan 1 01:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16eb22072cb18171a7b412bff6c10d036fb61b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:f2:35:d8:a8:06:ad:00:c3:b7:c1:01:cc:
4e:f6:d1:7d:80:f2:ff:a6:e2:a2:30:13:7d:97:54:
30:70:27:1c:31:78:fc:2c:d7:b2:b5:7a:b7:fe:60:
02:27:15:b9:cd:0e:f3:4b:68:40:d1:15:15:b3:c3:
f6:4f:e7:46:5e:51:97:3c:e6:57:3c:77:6a:63:c6:
ed:83:ac:2a:44:ae:58:73:17:8f:10:bf:99:a4:b9:
b4:9b:da:ce:7f:bd:70:c5:2f:62:8c:6d:02:9d:dc:
76:42:ca:19:fe:da:06:57:6a:7e:3b:a0:eb:46:3b:
b5:7a:75:66:19:ba:9f:3d:ef:82:45:ac:6a:45:2a:
ac:75:da:ca:49:9d:17:e3:0e:c3:95:f8:e7:7c:4e:
d3:46:6d:16:ea:ad:98:6d:78:1e:40:6d:08:e2:6c:
84:64:c8:47:df:d1:03:80:83:8b:03:88:fd:b4:44:
28:21:34:bc:2b:84:26:6b:f6:b3:3d:eb:53:f6:61:
b1:44:61:3f:c2:9c:ba:cd:c4:64:e5:5c:f6:70:4c:
a6:bb:c6:b3:75:51:dd:a1:77:6c:02:eb:36:36:45:
c6:29:e7:93:ac:4c:da:ce:17:75:aa:40:c1:94:1b:
98:90:6e:cd:36:3f:3c:ba:3a:47:2e:f5:25:08:e8:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:22:07:2C:B1:81:71:A7:B4:12:BF:F6:C1:0D:03:6F:B6:1B:5B
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/FusiByyxgXGntBK_9sENA2-2G1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.40.0/22
185.169.136.0/22
Signature Algorithm: sha256WithRSAEncryption
97:69:ba:9e:92:9e:16:7b:8f:f6:5a:9f:78:39:8a:cc:ea:de:
85:40:20:9c:c5:b7:0d:93:2a:ac:51:f2:af:63:94:21:2f:b8:
e4:27:9e:6c:47:0d:aa:1b:ed:22:d8:c0:bb:e1:79:fd:f8:db:
f2:65:a2:14:6e:9e:3f:6a:ca:f3:e3:0b:5b:cd:08:4b:94:18:
9f:05:21:04:de:ca:a2:ef:52:51:1f:73:71:b6:7b:ce:90:0e:
d0:98:19:b2:08:60:30:f9:22:d6:2b:0d:cc:ad:3b:fa:8f:35:
8f:86:f3:81:7b:10:81:43:8d:da:96:1a:ee:0c:b4:ef:7c:6c:
04:a3:01:1c:d1:87:dd:a3:48:05:5b:ef:c0:25:4f:6a:9d:16:
f3:9a:3b:44:3a:41:18:38:ff:7d:64:a4:12:cf:fc:49:4d:e4:
58:10:b1:62:1b:e4:1a:43:bf:2c:d7:72:95:a9:05:0f:92:d0:
0f:3e:d6:9d:0c:f5:f6:79:2d:09:20:a6:20:f4:98:cf:d5:b4:
a3:ac:7c:74:d5:b6:73:fb:9f:a4:cd:c0:7b:41:5b:6f:c0:8e:
5c:5f:c9:54:37:10:3f:74:ab:52:e0:3f:dc:24:26:85:0a:73:
15:db:4e:36:43:b5:ca:65:73:c5:66:34:3c:62:f8:a2:31:ff:
7b:b4:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:30 2025 by rpki-client