Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/FW1tZ_kV4yl5p7yS5fT5Ymm7LQE.roa
File: FW1tZ_kV4yl5p7yS5fT5Ymm7LQE.roa (raw, json)
Hash identifier: +sYt4o240/ssEkJ2Y0YRSkGjNrPCnnia1yfhRG0pHWM=
Subject key identifier: 15:6D:6D:67:F9:15:E3:29:79:A7:BC:92:E5:F4:F9:62:69:BB:2D:01
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41E5EB85FD21F0A1C045F3E4FAD1A2
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/FW1tZ_kV4yl5p7yS5fT5Ymm7LQE.roa
Signing time: Sun 01 Jan 2023 16:54:50 +0000
ROA not before: Sun 01 Jan 2023 16:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208179
IP address blocks: 31.14.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e5:eb:85:fd:21:f0:a1:c0:45:f3:e4:fa:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=156d6d67f915e32979a7bc92e5f4f96269bb2d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:2e:fa:89:71:11:5b:f3:95:82:0d:ad:9b:
43:52:1e:7a:cd:22:f7:77:a0:2a:c8:24:f9:10:da:
a6:5f:84:2d:31:a3:de:bf:fc:5b:43:72:a8:61:07:
d1:0f:b1:22:40:81:c7:79:b9:40:22:cc:23:5e:89:
a8:6c:7f:c4:e8:6f:9c:5d:3e:ce:4f:95:5f:ee:db:
8d:b2:f1:59:a0:73:03:c1:79:8b:47:ac:c5:4e:2c:
9e:48:9f:5d:50:18:48:13:17:12:f1:ba:99:7d:3e:
97:2c:d1:19:43:5b:cc:d1:1f:1b:82:81:a0:7f:61:
ae:62:c9:1f:f5:d9:54:77:f6:59:08:c0:02:1e:5e:
7f:f7:14:38:5b:6f:2c:bf:0b:ad:95:0c:ce:8c:46:
4b:6b:b1:e5:b7:94:e4:90:07:86:7f:79:3a:f1:a1:
23:d2:0b:2b:9d:7e:af:ab:e4:49:ff:85:9f:9f:8a:
27:3c:5e:be:3f:ee:ac:b6:5f:d2:84:64:da:df:fb:
03:10:19:b7:a2:bc:bc:24:28:bc:65:f0:68:0d:98:
2c:f9:6e:fc:be:96:1e:e6:15:02:8c:b2:b0:9d:24:
47:6b:4c:c7:c9:72:de:de:2f:65:63:da:a5:ec:1a:
87:13:4f:68:40:90:59:bd:a1:2b:d3:32:5b:16:86:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:6D:67:F9:15:E3:29:79:A7:BC:92:E5:F4:F9:62:69:BB:2D:01
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/FW1tZ_kV4yl5p7yS5fT5Ymm7LQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.55.0/24
Signature Algorithm: sha256WithRSAEncryption
28:47:27:22:18:f3:38:96:99:70:1a:84:e7:20:54:8f:4d:58:
4a:a3:58:0d:bc:bb:ac:62:a3:10:2d:b5:fa:82:68:19:33:b0:
6f:a6:de:59:f0:ae:a7:60:f0:fa:7d:e2:a5:f5:f0:f3:37:6d:
ff:1a:5b:5d:52:db:78:0d:0a:ea:7b:6f:b9:1f:2c:2c:3b:1c:
fa:e9:b6:2f:9f:97:3f:35:cf:e3:f4:8a:9a:1a:77:e8:a1:58:
1e:6e:02:b9:5c:49:1d:4e:41:89:d2:ac:61:2b:4a:95:72:45:
7d:17:99:80:c4:9e:a6:48:16:e8:3a:9a:98:f7:00:74:5e:51:
62:94:2e:72:e3:12:7a:48:24:8a:e4:b1:7d:be:40:4e:0b:02:
9f:8b:c9:04:a7:39:c2:59:ed:6d:0a:fc:c4:ec:70:ec:35:6c:
27:ca:e4:17:32:09:af:83:11:48:04:c3:e8:82:47:ec:15:dc:
52:dd:24:65:a5:54:71:a3:cd:f7:0f:a1:1b:f3:8c:c2:31:31:
5f:e3:86:27:2f:36:5a:f6:19:74:2e:35:2d:0b:40:4a:19:28:
a7:ee:9e:58:8b:42:0b:b3:c0:0b:58:a2:bd:0d:12:71:fe:5b:
64:2e:10:5c:7a:b5:ad:49:20:68:20:fb:39:a6:71:88:02:b5:
3d:ff:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:42 2025 by rpki-client