Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/FDkjFgVEGA49M6QajNSVF5rkQOM.roa
File: FDkjFgVEGA49M6QajNSVF5rkQOM.roa (raw, json)
Hash identifier: SaHJca5CY7wz2Hy/8uVO5ArL8s0YaSZQPlOk55P1Wt8=
Subject key identifier: 14:39:23:16:05:44:18:0E:3D:33:A4:1A:8C:D4:95:17:9A:E4:40:E3
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF9704DA78713433AF62914D3109BA5
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/FDkjFgVEGA49M6QajNSVF5rkQOM.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57045
IP address blocks: 80.76.41.0/24 maxlen: 24
185.177.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:70:4d:a7:87:13:43:3a:f6:29:14:d3:10:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=143923160544180e3d33a41a8cd495179ae440e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:89:e8:df:ec:dd:74:53:d4:d4:f7:1d:71:
30:c7:84:2b:d9:b8:27:38:ca:24:62:7a:42:4a:a3:
6a:b6:47:d2:e1:f5:77:16:a8:e4:25:0b:03:f2:bc:
34:b3:70:f5:d1:00:5d:13:dd:40:13:82:79:bf:82:
88:e1:d2:24:4b:8f:62:ec:1b:51:47:cf:97:3f:00:
86:e0:6e:ab:72:b5:9c:89:0d:5e:66:8c:77:db:b5:
ce:8f:c7:5d:84:e7:0c:dd:3c:a1:4f:23:b3:88:6f:
4c:58:95:1e:9d:34:34:53:0e:bf:4f:5d:a0:c8:d4:
ef:f5:cb:55:e0:8b:2b:74:dd:0e:a6:ba:25:5d:41:
b2:cd:62:91:94:7d:08:6b:d6:22:2a:bc:c1:fb:63:
da:44:a1:9d:67:87:6e:40:ae:5b:4d:47:92:14:b7:
37:d1:8e:3e:4a:50:6c:e2:07:d3:cd:72:f0:57:1e:
c6:52:5c:99:f3:cf:15:cb:1d:6d:7a:fc:37:0b:12:
ec:6a:17:37:56:91:e9:9e:31:95:1d:6c:f8:88:70:
0a:7a:7c:65:1f:f8:aa:70:db:12:dc:a9:f5:b6:e1:
f2:d1:34:2f:83:fa:d6:a1:c4:cf:c3:f8:a6:ed:ce:
71:3b:5a:b9:5a:1a:73:fc:a9:88:cb:dd:15:f5:0d:
8a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:39:23:16:05:44:18:0E:3D:33:A4:1A:8C:D4:95:17:9A:E4:40:E3
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/FDkjFgVEGA49M6QajNSVF5rkQOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.41.0/24
185.177.114.0/24
Signature Algorithm: sha256WithRSAEncryption
32:64:f3:97:a4:1b:e7:59:36:8a:fe:4e:67:8c:8e:64:c8:b1:
ec:a0:e1:48:1d:e7:23:cb:2c:1f:f0:d2:9e:14:83:ba:f3:62:
ac:95:13:00:ca:6a:95:ae:44:1d:67:6d:56:45:90:2a:cb:33:
a2:45:42:fd:1b:60:52:99:4f:d4:63:72:c1:18:21:c8:6f:b2:
91:ec:70:32:96:03:02:f3:74:03:09:30:82:fa:ac:6e:60:db:
e7:06:82:d5:f3:2a:e4:0e:d1:f5:c1:07:69:74:7f:80:70:af:
ed:d6:72:90:0a:0e:a9:6b:4d:2c:b9:ce:2e:c7:cb:09:48:e8:
64:f3:18:33:01:d8:ca:ad:19:66:82:25:e4:33:53:c5:12:e6:
1f:fb:f7:22:0d:fa:21:4a:26:e2:d6:98:1d:3e:d7:69:b8:e8:
7c:ac:07:c3:dc:ee:16:1d:54:bc:9c:be:00:5e:c4:81:4e:86:
b3:f9:72:ca:99:db:83:4f:8b:75:37:23:33:7b:a5:6d:67:30:
28:6a:30:7f:2a:86:bd:28:4f:98:3f:7f:b8:e4:30:86:40:85:
76:d4:83:49:ee:2b:7c:03:2b:67:73:7f:4b:87:51:1d:fd:b5:
56:ff:2e:be:6e:86:27:ce:b0:a5:12:42:67:ff:ef:c6:5c:cb:
8b:57:5f:7e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVv+XBNp4cTQzr2KRTTEJulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjMwMTAyMDA1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDM5MjMxNjA1NDQxODBlM2QzM2E0MWE4Y2Q0OTUxNzlhZTQ0MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAiJ6N/s3XRT1NT3HXEwx4Qr2bgn
OMokYnpCSqNqtkfS4fV3FqjkJQsD8rw0s3D10QBdE91AE4J5v4KI4dIkS49i7BtR
R8+XPwCG4G6rcrWciQ1eZox327XOj8ddhOcM3TyhTyOziG9MWJUenTQ0Uw6/T12g
yNTv9ctV4IsrdN0OprolXUGyzWKRlH0Ia9YiKrzB+2PaRKGdZ4duQK5bTUeSFLc3
0Y4+SlBs4gfTzXLwVx7GUlyZ888Vyx1tevw3CxLsahc3VpHpnjGVHWz4iHAKenxl
H/iqcNsS3Kn1tuHy0TQvg/rWocTPw/im7c5xO1q5Whpz/KmIy90V9Q2KIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBQ5IxYFRBgOPTOkGozUlRea5EDjMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvRkRrakZnVkVHQTQ5TTZRYWpOU1ZGNXJrUU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEwpAwQA
ubFyMA0GCSqGSIb3DQEBCwUAA4IBAQAyZPOXpBvnWTaK/k5njI5kyLHsoOFIHecj
yywf8NKeFIO682KslRMAymqVrkQdZ21WRZAqyzOiRUL9G2BSmU/UY3LBGCHIb7KR
7HAylgMC83QDCTCC+qxuYNvnBoLV8yrkDtH1wQdpdH+AcK/t1nKQCg6pa00suc4u
x8sJSOhk8xgzAdjKrRlmgiXkM1PFEuYf+/ciDfohSibi1pgdPtdpuOh8rAfD3O4W
HVS8nL4AXsSBToaz+XLKmduDT4t1NyMze6VtZzAoajB/Koa9KE+YP3+45DCGQIV2
1INJ7it8Aytnc39Lh1Ed/bVW/y6+boYnzrClEkJn/+/GXMuLV19+
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:34 2025 by rpki-client