Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FVcevFSTj-Mf08cUFvUY6cddvqY.roa
File: FVcevFSTj-Mf08cUFvUY6cddvqY.roa (raw, json)
Hash identifier: H1tQzwzUYTKN+vQHN1NCQOWkn+BUEsPbY7ecEfhDSro=
Subject key identifier: 15:57:1E:BC:54:93:8F:E3:1F:D3:C7:14:16:F5:18:E9:C7:5D:BE:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01888FA36C9F03043BD22C7F7CBB80826C04
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FVcevFSTj-Mf08cUFvUY6cddvqY.roa
Signing time: Tue 06 Jun 2023 07:37:12 +0000
ROA not before: Tue 06 Jun 2023 07:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.141.178.0/24 maxlen: 24
93.190.246.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:a3:6c:9f:03:04:3b:d2:2c:7f:7c:bb:80:82:6c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 6 07:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15571ebc54938fe31fd3c71416f518e9c75dbea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:f5:29:b2:37:8a:79:35:87:5b:43:67:08:
f6:e6:fb:b7:e4:94:7e:7a:4b:05:fc:1a:92:05:f6:
ab:a2:2d:21:f2:90:6d:1f:70:3d:68:45:dd:eb:bc:
2d:d9:b2:d2:77:3c:83:0f:eb:1f:3b:4e:9c:55:5d:
4d:40:74:e9:c5:8b:80:1a:72:49:bc:1f:e5:8c:96:
34:eb:3d:47:ff:90:50:78:32:d8:76:2d:f9:7a:5c:
9e:41:5d:b7:83:ce:60:2f:f6:b3:cb:bc:dc:0d:86:
9c:6e:6b:ae:3c:65:3c:7e:87:9e:0b:13:bf:34:86:
dd:7a:b7:c0:51:b5:e8:97:d4:9e:88:1e:3d:5d:09:
16:27:d2:66:ce:7d:89:a4:10:20:33:9b:e3:34:fa:
91:70:e8:dd:f9:45:a8:a7:79:0d:52:3c:5c:05:58:
a2:90:8c:7d:94:13:0d:aa:bd:06:7c:63:22:27:81:
f6:f5:b7:c7:e0:e1:a6:aa:f1:d8:11:dc:79:51:3b:
91:a3:85:6b:e5:6c:b0:54:87:43:fb:2e:59:7a:97:
50:eb:a3:a3:93:7e:47:3b:0c:35:f7:4f:76:2d:59:
ee:1b:2d:74:c6:21:7b:63:65:2f:a8:c8:a0:7d:ac:
dd:63:ea:33:21:2b:d3:d8:15:61:2c:a3:86:d6:e1:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:57:1E:BC:54:93:8F:E3:1F:D3:C7:14:16:F5:18:E9:C7:5D:BE:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FVcevFSTj-Mf08cUFvUY6cddvqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.79.0/24
45.141.178.0/24
93.190.246.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fe:a1:e0:c8:bd:31:a5:be:21:36:64:52:19:d7:f7:d9:3b:
b8:89:69:14:58:0d:25:5f:4d:23:d7:56:25:56:e8:5d:7d:c9:
f7:60:bb:6a:3e:d7:fb:e1:c1:88:c9:4f:7a:19:8b:f4:7f:21:
a8:81:b3:12:cf:dc:d9:b4:4b:79:7d:58:bf:ce:3b:3b:2b:d0:
24:2d:eb:0e:f2:0f:46:a8:d6:5c:f2:d5:6b:55:3a:da:db:db:
6a:b2:72:05:85:9d:2d:bf:a1:85:75:87:fe:38:fb:d8:0c:37:
c6:30:79:80:a7:c7:4d:78:93:da:65:dc:b1:50:5e:17:b8:49:
4f:a6:b3:21:c8:21:b7:a2:6b:16:fc:18:59:2a:ad:ea:ac:51:
bb:81:54:25:ea:bb:c5:72:f0:78:0c:82:4a:12:f1:f8:36:3a:
e2:07:91:92:17:dd:55:f8:3c:f2:54:f4:c9:1e:d0:ae:87:ed:
dc:67:9f:53:b0:b2:e7:05:2e:ae:f5:58:c7:5a:ac:71:8a:f1:
57:67:88:37:45:bd:92:9f:95:d7:39:62:b4:c6:a7:ad:b1:d0:
22:c0:f4:7b:49:82:6b:2a:98:79:39:4e:1a:4e:c2:ab:63:28:
bb:c7:c4:15:de:cc:cf:9e:6f:10:e4:6f:e0:24:0a:ba:0e:fb:
80:d2:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:15 2025 by rpki-client