Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/FL0EMORf5gmnDRzauQ9wUHc97VI.roa
File: FL0EMORf5gmnDRzauQ9wUHc97VI.roa (raw, json)
Hash identifier: hWKyo84ULRBkCdk3AjCugWGeRLKZ/xbbf+WRVaJ3D1U=
Subject key identifier: 14:BD:04:30:E4:5F:E6:09:A7:0D:1C:DA:B9:0F:70:50:77:3D:ED:52
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01856F0B5A2F3AA69DFC42A15C799841983B
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/FL0EMORf5gmnDRzauQ9wUHc97VI.roa
Signing time: Sun 01 Jan 2023 20:34:52 +0000
ROA not before: Sun 01 Jan 2023 20:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202015
IP address blocks: 79.141.173.0/24 maxlen: 24
91.193.19.0/24 maxlen: 24
194.124.229.0/24 maxlen: 24
77.83.199.0/24 maxlen: 24
193.42.38.0/24 maxlen: 24
79.141.162.0/23 maxlen: 23
79.141.160.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
185.33.84.0/23 maxlen: 23
185.33.86.0/23 maxlen: 23
2a01:8640:b::/48 maxlen: 48
2a01:8640:5::/48 maxlen: 48
2a01:8640:e::/48 maxlen: 48
2a01:8640:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:5a:2f:3a:a6:9d:fc:42:a1:5c:79:98:41:98:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 20:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14bd0430e45fe609a70d1cdab90f7050773ded52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:fe:68:5f:11:f8:56:8c:35:31:00:bc:e3:
3f:45:3f:3d:bb:78:be:ee:d7:90:90:4b:2c:4c:9d:
d0:42:16:89:a9:d4:22:e9:fd:3c:69:66:92:8f:c8:
1a:19:fe:dd:0a:d2:20:e9:f1:55:67:83:c9:13:f8:
b4:f8:a3:f7:4b:d7:17:54:84:17:95:e2:dc:13:df:
c4:58:e0:9d:10:a1:c3:79:30:a1:1a:d0:d2:44:0d:
db:df:ae:50:af:3e:b6:70:65:fa:47:d9:3c:ef:7a:
69:eb:c1:56:87:a8:06:64:96:a0:54:b4:d6:11:bd:
2e:14:28:c0:06:e8:bf:5b:40:d3:33:8b:27:03:c5:
3b:b9:1f:bd:57:47:0d:4b:e0:b1:79:8f:85:94:ee:
5b:9b:a5:53:90:18:d2:33:a1:6d:cc:4a:ad:da:e4:
d2:79:cb:c8:ef:45:93:f3:97:d9:b7:5c:6e:e7:25:
fd:23:94:2c:a5:5e:d8:e7:02:2f:39:46:0d:93:61:
bf:a7:4c:7f:72:17:51:0f:1b:cf:0b:20:6f:3e:7b:
6c:4c:20:ff:39:91:8f:73:45:70:f8:b5:ea:45:82:
d9:d8:70:9e:13:42:fa:4a:4e:54:44:a9:ef:df:12:
01:e8:60:c6:e8:21:f5:46:c6:fe:89:3d:09:5f:1f:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BD:04:30:E4:5F:E6:09:A7:0D:1C:DA:B9:0F:70:50:77:3D:ED:52
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/FL0EMORf5gmnDRzauQ9wUHc97VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.199.0/24
79.141.160.0/22
79.141.172.0/23
91.193.19.0/24
185.33.84.0/22
193.42.38.0/24
194.124.229.0/24
IPv6:
2a01:8640:4::/47
2a01:8640:b::/48
2a01:8640:e::/48
Signature Algorithm: sha256WithRSAEncryption
69:eb:a7:1e:a7:b4:34:8f:e8:5b:24:7e:4a:e9:fa:a1:4b:ef:
ba:98:0b:cc:d2:17:16:f0:61:08:65:33:d4:55:af:fa:3f:15:
63:66:99:91:68:39:fc:07:17:24:6e:29:82:71:2c:2c:e0:35:
fa:1f:86:ab:ed:d1:6e:cc:69:38:be:49:b4:73:96:d0:85:33:
bd:52:d4:ac:6e:42:59:7e:0a:2e:a3:e4:bb:8c:e6:b3:65:f2:
13:a6:cc:82:ed:32:ec:72:2b:0a:de:b5:c8:a5:e8:da:a1:06:
63:5b:6d:3b:a8:d7:58:37:7b:7c:09:32:1c:fd:d9:4c:9a:1e:
8b:fc:ca:4f:eb:49:55:0f:2a:1b:36:db:bc:c1:94:2a:75:63:
88:1f:0f:10:a9:04:c6:0a:35:71:60:f4:b0:aa:cc:e9:56:38:
4a:57:d1:bb:06:74:32:2b:d4:42:a9:58:04:a8:44:08:ea:c4:
a7:43:5a:44:42:14:2c:37:f4:af:47:34:b2:df:ba:13:0c:83:
35:a5:e8:98:f6:1e:82:74:57:c0:cb:38:52:94:58:f6:46:de:
4e:d3:fb:26:33:7c:d1:c5:15:fb:41:f0:b0:19:b8:ab:ba:45:
f5:b3:ce:1a:e1:b2:80:f4:55:8f:77:22:27:63:35:29:de:6d:
0c:1a:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:01 2025 by rpki-client