Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/flbceEftjdeXPSc8DA8YflGU1Uc.roa
File: flbceEftjdeXPSc8DA8YflGU1Uc.roa (raw, json)
Hash identifier: U/mCxSSH6KlchxAQbFVS74OMfe/UvXn9SokFij6At7k=
Subject key identifier: 7E:56:DC:78:47:ED:8D:D7:97:3D:27:3C:0C:0F:18:7E:51:94:D5:47
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0185F359ADF951FD26ABDC81CA95C6748068
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/flbceEftjdeXPSc8DA8YflGU1Uc.roa
Signing time: Fri 27 Jan 2023 13:10:18 +0000
ROA not before: Fri 27 Jan 2023 13:10:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 217.212.224.0/19 maxlen: 19
193.45.0.0/22 maxlen: 22
193.45.6.0/24 maxlen: 24
193.45.10.0/23 maxlen: 24
193.45.14.0/23 maxlen: 23
193.45.142.0/24 maxlen: 24
193.45.142.0/23 maxlen: 23
193.45.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:59:ad:f9:51:fd:26:ab:dc:81:ca:95:c6:74:80:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 27 13:10:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e56dc7847ed8dd7973d273c0c0f187e5194d547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6a:b2:86:6c:09:81:b8:83:61:ac:d6:e4:6e:
d8:cf:25:2a:24:e2:87:81:e4:77:c7:7b:34:42:66:
8a:15:15:c5:27:c4:cf:3c:af:f4:2b:02:b5:d6:63:
d7:ed:fe:b8:e8:86:d4:38:f6:9e:e2:69:fd:65:8c:
f0:0b:a3:85:2f:56:fe:ae:dc:d3:f4:cc:bd:eb:24:
66:7c:38:2f:f2:5e:6c:7d:99:42:db:8a:cd:9b:53:
b7:41:92:5c:26:bf:af:21:bb:52:bf:a7:32:a1:83:
bc:d8:73:07:3d:31:6f:6c:b3:9b:3a:a6:41:f3:68:
17:4d:3e:24:da:3f:69:24:aa:3f:5e:41:25:f5:2d:
1d:47:1e:12:f4:ac:68:d8:35:71:6f:e8:39:e0:38:
73:63:2c:c5:e2:7b:77:8c:db:c3:81:2a:5d:6b:2c:
7d:67:c5:b5:a5:17:7c:d6:d7:e5:9d:5d:5f:91:34:
67:32:23:8f:1e:2b:c5:dc:96:b5:ff:5d:45:02:51:
6b:7e:37:d8:29:e7:0c:2a:82:ae:f7:b0:85:ae:05:
de:9c:ca:20:34:1d:c1:f0:95:70:04:24:ae:5a:e6:
f4:f7:12:63:bc:22:05:0b:5a:de:b8:67:7b:57:2f:
70:d1:64:66:b9:d8:61:2e:03:c2:49:6d:24:74:50:
da:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:DC:78:47:ED:8D:D7:97:3D:27:3C:0C:0F:18:7E:51:94:D5:47
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/flbceEftjdeXPSc8DA8YflGU1Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.45.0.0/22
193.45.6.0/24
193.45.10.0/23
193.45.14.0/23
193.45.142.0/23
193.45.254.0/24
217.212.224.0/19
Signature Algorithm: sha256WithRSAEncryption
38:df:12:6a:08:33:0e:bb:74:f6:21:fc:56:69:f1:d6:6f:27:
82:c6:57:4b:57:fd:a0:03:69:37:5f:90:5f:c6:2e:4c:5d:b0:
9f:49:d8:15:3a:4a:ec:f9:1b:99:41:d0:61:5c:95:7a:5b:7b:
67:df:8d:61:90:76:83:98:be:c6:af:b7:76:99:71:bd:38:e1:
f7:46:c0:37:37:18:f2:cf:6e:32:22:81:47:29:60:5d:51:39:
2a:85:8c:ca:5f:02:85:5f:fc:a9:4d:63:d1:06:25:dc:24:df:
e5:79:a6:75:32:6c:0b:32:2b:e6:88:22:78:94:8b:ad:dc:99:
b9:b0:19:6d:ad:9d:1b:5d:ac:f0:a2:fc:a9:19:32:d2:80:aa:
de:74:ff:05:f8:3c:d2:9d:85:4c:79:58:12:4f:60:48:38:31:
17:35:7b:7c:19:c4:f8:5f:4d:fc:9f:3f:af:23:a6:59:d3:5a:
84:e1:f7:1c:98:32:89:f6:30:32:bf:4b:69:2d:ac:56:09:d2:
81:bf:72:b4:67:ab:fa:28:8a:58:25:dc:85:07:8e:0c:ac:5a:
f5:6f:02:f8:9e:d5:45:78:03:a3:cd:98:6c:9d:7a:f6:29:80:
7b:90:07:cf:92:ee:f5:7e:49:e1:95:82:ce:63:13:2b:f1:be:
97:38:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:44 2025 by rpki-client