Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/ftLKzKVv03m-7s4BdzTvC7eWA4Q.roa
File: ftLKzKVv03m-7s4BdzTvC7eWA4Q.roa (raw, json)
Hash identifier: TUKgujEY8MSWjYiiTnFiOX3fIfrICy4xwTLl4WVxzXY=
Subject key identifier: 7E:D2:CA:CC:A5:6F:D3:79:BE:EE:CE:01:77:34:EF:0B:B7:96:03:84
Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial: 01856F548F2FE58F40DC41834E61E119199F
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/ftLKzKVv03m-7s4BdzTvC7eWA4Q.roa
Signing time: Sun 01 Jan 2023 21:54:50 +0000
ROA not before: Sun 01 Jan 2023 21:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.218.166.0/24 maxlen: 24
185.218.165.0/24 maxlen: 24
185.218.164.0/24 maxlen: 24
2a0b:d9c0:165::/48 maxlen: 48
2a0b:d9c0:166::/48 maxlen: 48
2a0b:d9c0:164::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:8f:2f:e5:8f:40:dc:41:83:4e:61:e1:19:19:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Validity
Not Before: Jan 1 21:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ed2cacca56fd379beeece017734ef0bb7960384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:92:18:f4:30:54:a2:e8:7f:cb:92:ee:af:06:
8b:15:ac:e2:76:49:ca:cc:80:c6:89:f0:04:a2:2a:
d1:6b:c1:1b:c3:2f:a2:44:e7:74:f5:a7:73:65:af:
4a:4b:73:cc:3f:ae:06:94:5e:7b:d0:8c:15:d4:f0:
3a:59:df:32:de:a7:12:f1:40:1d:b9:3b:6d:e7:97:
c6:b5:0e:39:29:8e:b5:2a:38:94:4a:eb:fe:2c:b8:
1f:13:67:dc:29:75:94:c9:81:81:22:22:4f:fb:31:
25:51:13:53:28:80:39:ea:f7:78:eb:20:2d:f6:8b:
26:cc:8c:4f:b3:88:27:8a:0e:d0:e6:4e:09:47:98:
7c:eb:90:f8:14:b1:da:ba:5b:52:9c:88:1d:51:2f:
3f:73:7f:98:f2:0d:d7:a3:8b:8b:04:36:95:7c:0b:
a1:34:e9:67:1e:b4:f9:9b:dd:f2:76:8d:96:2a:6a:
1c:c3:e8:c1:44:fd:75:de:0d:89:33:68:2c:af:25:
17:c1:c9:15:e5:1f:a1:1c:4e:c5:c2:84:06:cc:91:
81:d6:a4:86:78:fa:7e:08:0d:bc:0b:ad:75:b8:78:
07:aa:22:c5:e5:75:cd:2d:df:34:98:de:6a:9f:1b:
b9:c5:b6:83:87:5c:e0:9c:9f:3f:95:51:6d:ce:9d:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:CA:CC:A5:6F:D3:79:BE:EE:CE:01:77:34:EF:0B:B7:96:03:84
X509v3 Authority Key Identifier:
keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/ftLKzKVv03m-7s4BdzTvC7eWA4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.164.0-185.218.166.255
IPv6:
2a0b:d9c0:164::-2a0b:d9c0:166:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
e0:86:89:3a:ae:96:3c:a4:40:ab:8e:c2:b8:0c:30:81:35:14:
77:05:43:aa:5e:43:70:16:a1:01:12:d5:9e:6c:0f:fb:7d:96:
70:78:e0:7a:e2:91:bc:5d:ca:9f:51:ed:2d:65:cd:11:8a:c3:
82:63:6e:37:c3:1c:1a:82:f5:36:2d:32:01:4d:57:80:d7:a5:
e1:19:2f:00:47:7d:9c:1f:88:8e:4f:d4:f1:b3:42:3c:b0:36:
13:86:d4:f8:fc:47:38:7b:a8:c0:52:d1:82:eb:c6:8a:15:71:
33:c7:58:19:ca:f3:90:f2:13:18:39:08:23:2a:82:f2:8f:88:
95:5f:d2:e4:87:75:58:4e:fd:96:0e:51:22:7e:4c:30:52:38:
30:c5:db:c7:b0:eb:9e:33:81:5e:ff:c2:74:9e:b1:fd:b9:42:
ab:ee:e0:47:ad:3f:e6:d4:78:c7:39:e6:24:5e:6d:e9:96:5e:
07:90:08:d8:85:f2:14:59:e8:cb:d7:ef:35:bc:04:b5:52:38:
f7:6e:73:92:19:1f:4c:cc:cf:b9:e6:f2:20:a9:8c:99:e6:8f:
b2:8d:e0:a8:52:9a:6a:a2:d1:3f:63:22:f6:9e:4b:63:5b:03:
d5:a1:7c:59:4e:de:37:48:68:50:4b:f3:bf:2c:0b:e2:d0:13:
ea:37:0d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:15 2025 by rpki-client