Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/FUdsW-mAdQVvk7p91Tppi582h7I.roa
File: FUdsW-mAdQVvk7p91Tppi582h7I.roa (raw, json)
Hash identifier: q7r94qepINkEQHDmZnv08rHb4zCJzZekTTZpClYw4Ms=
Subject key identifier: 15:47:6C:5B:E9:80:75:05:6F:93:BA:7D:D5:3A:69:8B:9F:36:87:B2
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 01856F42E3B039CA851D891333E422A60573
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/FUdsW-mAdQVvk7p91Tppi582h7I.roa
Signing time: Sun 01 Jan 2023 21:35:32 +0000
ROA not before: Sun 01 Jan 2023 21:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29611
IP address blocks: 45.89.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e3:b0:39:ca:85:1d:89:13:33:e4:22:a6:05:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Jan 1 21:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15476c5be98075056f93ba7dd53a698b9f3687b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:e4:a5:78:02:b4:b8:d5:6e:37:43:42:b3:
32:9b:8f:56:e3:59:e2:f9:70:ad:37:52:d6:c3:8f:
73:e8:cf:84:36:6a:74:54:0b:a1:fd:93:96:a4:e8:
5a:8f:5b:ec:fa:bb:71:8a:89:17:3c:3f:fa:3e:d9:
14:39:6b:20:26:4a:ed:37:ab:10:e2:eb:4f:dd:65:
d6:1f:bd:c5:d8:3d:bf:e7:8a:40:92:a2:5e:38:46:
8c:59:b2:03:5c:a0:1a:56:13:f3:bd:17:0a:85:51:
bc:d2:70:78:3a:23:f9:63:c3:6c:a7:98:f0:fc:ca:
05:ff:09:57:8b:eb:2b:92:8f:fc:8f:90:67:60:ea:
de:00:a4:8f:3f:0a:4a:9b:22:05:23:8d:be:fc:44:
b3:6e:88:6f:bf:44:68:4e:50:2a:e5:fa:02:33:3f:
f9:40:9f:ff:27:6a:9d:af:5c:48:ee:fc:ef:26:09:
0e:c0:62:29:3d:fe:c5:9d:2d:46:9f:65:4b:08:83:
17:97:24:9c:b7:cc:54:1a:dc:98:2f:12:55:6f:68:
5c:94:96:8e:8f:94:66:a3:b6:73:71:b5:61:70:47:
3c:9a:39:18:df:c7:04:d3:21:b5:14:bd:ac:29:28:
0b:ce:56:d4:7a:3c:cb:83:ec:ae:e1:bf:1f:67:68:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:47:6C:5B:E9:80:75:05:6F:93:BA:7D:D5:3A:69:8B:9F:36:87:B2
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/FUdsW-mAdQVvk7p91Tppi582h7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.56.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f5:e2:9a:c6:0e:1d:ba:20:4c:03:b6:43:0c:a9:d8:56:24:
d1:a3:3f:38:c8:69:ff:d1:26:8d:72:4d:14:5b:1d:cb:07:9c:
4a:ea:6b:a4:04:19:d2:6d:77:21:74:48:42:19:10:1e:05:7f:
f2:c5:cb:c7:25:a4:6d:78:e1:a4:7c:3d:04:05:17:44:97:1f:
30:79:3a:4d:bf:1d:5a:5a:6a:cb:ef:8e:66:ca:47:f8:40:97:
2e:23:b9:45:9f:9b:5f:4a:72:1d:d4:43:36:f1:c3:d7:ec:91:
d4:4b:10:f5:26:c2:48:fd:c9:ae:9a:a0:1b:75:1f:e5:c2:0f:
51:46:ff:30:92:96:5f:59:b0:12:d0:6b:f4:84:46:41:bc:35:
65:ad:40:d0:dc:b7:ed:f6:e4:5e:73:40:38:23:88:84:05:1f:
39:52:f7:bf:6f:f2:5c:e9:fb:05:93:07:e6:57:01:3c:85:f4:
aa:d1:07:10:2c:33:c4:06:a0:d2:47:84:f6:55:ec:1b:b1:0a:
5d:67:df:52:63:5e:2a:60:16:03:59:ee:19:b1:1a:64:57:95:
a4:44:fe:43:7e:43:a1:9b:16:1d:cc:9a:4e:c9:10:7d:f4:2c:
f7:17:e1:3c:2d:8b:d6:af:af:43:25:cf:de:64:a1:a3:13:9f:
97:c7:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:55 2025 by rpki-client