Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/FWP-J0qjttVRpu0QzrVdKglRzJU.roa
File: FWP-J0qjttVRpu0QzrVdKglRzJU.roa (raw, json)
Hash identifier: +9PIPZHneEjQ4fkYDAgkgZdvmgbZKk+TUnGoZ4XfK+c=
Subject key identifier: 15:63:FE:27:4A:A3:B6:D5:51:A6:ED:10:CE:B5:5D:2A:09:51:CC:95
Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial: 01E065
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/FWP-J0qjttVRpu0QzrVdKglRzJU.roa
Signing time: Wed 23 Feb 2022 07:47:36 +0000
ROA not before: Wed 23 Feb 2022 07:47:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42184
IP address blocks: 194.49.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122981 (0x1e065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e505d93497f19d2563066b409200969711f28c67
Validity
Not Before: Feb 23 07:47:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1563fe274aa3b6d551a6ed10ceb55d2a0951cc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:ec:cd:fa:8b:71:eb:2e:72:de:95:0a:82:
4b:df:70:c2:3d:a1:1a:55:36:c6:48:3d:bd:01:f6:
47:3f:f7:de:01:0e:91:9a:6a:8e:46:32:42:ea:9c:
22:93:71:36:87:a8:51:57:21:8e:29:fa:d2:90:ab:
eb:d7:64:0e:b7:12:c2:fe:6a:96:b3:52:a5:05:8d:
53:c2:27:f7:e1:a7:2b:e2:c7:cf:b8:f4:d5:6b:6a:
1f:54:80:67:34:4d:bb:88:db:c1:2f:e7:4e:0d:7d:
24:ce:f1:66:a1:cf:0b:a2:6a:40:05:d2:fa:56:4d:
d8:f0:0a:74:fb:a3:c6:48:61:b9:a3:71:54:80:dd:
81:03:93:52:f0:84:25:db:f9:fe:1d:78:66:be:2c:
68:d2:b7:dd:61:93:c7:33:fc:0e:91:25:41:82:40:
53:f9:18:35:16:6d:d5:04:b2:2b:84:c6:24:10:2c:
92:16:16:1e:99:02:11:77:81:f8:e9:4e:f3:0a:a3:
69:d9:96:a3:e0:38:8d:6e:6f:36:70:f5:b5:28:17:
79:6c:75:f6:f4:ea:83:98:d1:e8:b5:9a:94:40:f7:
7b:9c:9a:f6:aa:0e:78:41:73:68:09:d6:83:82:f6:
6b:17:20:1d:9d:37:d7:36:84:07:7a:f3:5b:7a:8e:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:63:FE:27:4A:A3:B6:D5:51:A6:ED:10:CE:B5:5D:2A:09:51:CC:95
X509v3 Authority Key Identifier:
keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/FWP-J0qjttVRpu0QzrVdKglRzJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4f:81:94:de:a1:5b:c3:70:e7:0d:d5:5b:11:e0:e2:cc:d8:
40:94:0f:ef:ab:f3:a1:52:3a:80:0a:27:5c:a7:08:5a:2a:58:
a3:fb:72:4c:f5:8a:27:bb:b2:fa:2f:33:fa:9e:f1:8a:ce:a9:
19:be:d1:d7:07:9e:aa:47:b4:3f:ba:a3:2b:55:6d:b0:33:e6:
c2:a7:8d:90:35:e2:6b:1c:14:f6:97:e1:ca:b0:16:ce:27:e3:
63:73:b6:1b:f0:9f:b8:66:85:d3:58:77:ef:f3:6b:21:26:af:
f4:71:9d:fb:e9:36:70:0d:60:aa:43:94:bf:a3:05:71:f6:5d:
d7:45:08:1b:82:d6:ab:73:e9:3e:21:f2:a7:ad:f3:87:d4:64:
97:98:da:70:8f:20:7e:c7:37:f7:bd:5e:6e:cb:a6:ec:7f:f9:
a9:2d:89:1f:9d:53:29:6e:f4:9b:d4:4f:c3:df:a8:ae:42:7f:
82:04:f9:52:fa:ac:53:eb:1f:b1:63:04:47:9a:29:84:ae:cf:
bc:d6:4f:20:85:12:fa:37:86:c0:35:f0:b9:95:5e:cd:b8:20:
7d:27:e6:08:0f:ac:70:e9:ab:3e:46:e6:7f:cc:bd:25:1a:d0:
db:a4:b2:79:2f:8d:62:c0:ea:81:4b:4d:03:4d:5c:1d:ff:53:
d1:f5:ad:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:54 2025 by rpki-client