Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FPi60eAQ9eI5hvLs7KYd5EyBtTg.roa
File: FPi60eAQ9eI5hvLs7KYd5EyBtTg.roa (raw, json)
Hash identifier: AT0fOBcB1ohlQWIB7WZzbEQayM9DbUGbVIb4ox7qNJw=
Subject key identifier: 14:F8:BA:D1:E0:10:F5:E2:39:86:F2:EC:EC:A6:1D:E4:4C:81:B5:38
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAF0B54C62DAC2083F232859129DE8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FPi60eAQ9eI5hvLs7KYd5EyBtTg.roa
Signing time: Sun 01 Jan 2023 10:05:17 +0000
ROA not before: Sun 01 Jan 2023 10:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49862
IP address blocks: 194.103.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f0:b5:4c:62:da:c2:08:3f:23:28:59:12:9d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f8bad1e010f5e23986f2ececa61de44c81b538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:df:4f:fc:e4:19:3b:95:07:58:9f:cf:58:
b1:fa:c0:cb:70:0a:59:cc:14:0a:fc:5c:87:48:dd:
2c:6d:72:cf:22:64:5a:eb:52:ec:5f:50:33:74:64:
aa:8f:98:3a:5d:8f:c2:52:5b:16:8a:de:2c:4b:67:
54:31:af:39:a3:a2:b0:41:bb:9e:cf:b4:a4:b7:8a:
8c:8f:22:7e:01:7d:3e:2d:8e:4d:f2:2b:32:65:36:
49:64:57:80:f8:f7:2a:e5:0d:c2:cb:cb:e7:64:7f:
80:1a:78:8b:f8:21:08:69:5f:da:87:91:26:b0:b7:
d7:7b:4f:b9:51:bb:39:e6:d2:aa:b7:57:fc:ed:cf:
12:75:0b:20:2c:ae:b7:d5:a0:fd:e2:e6:b5:fe:63:
87:5f:b1:6e:36:b4:2a:66:66:3c:40:38:99:a9:95:
a0:58:b4:e3:f5:53:2b:a8:d4:a0:21:76:b0:d5:13:
ee:7f:f4:36:48:84:58:0d:59:03:e6:e8:81:d7:4a:
2f:e0:2f:66:62:e9:c7:4f:d6:ca:8d:a1:55:c2:d3:
37:ba:74:26:ef:31:29:10:3f:0e:20:9d:d2:49:38:
8a:eb:3a:f3:51:5c:57:fe:1f:7f:3d:0c:79:bf:55:
b6:d0:fc:18:0b:7b:a3:15:4e:a5:d0:c0:28:1b:2d:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F8:BA:D1:E0:10:F5:E2:39:86:F2:EC:EC:A6:1D:E4:4C:81:B5:38
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FPi60eAQ9eI5hvLs7KYd5EyBtTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.21.0/24
Signature Algorithm: sha256WithRSAEncryption
70:31:24:f4:40:9b:0d:f1:5b:86:da:f9:2b:2d:5f:77:09:cd:
23:0e:dd:90:cb:6b:15:68:9a:0f:0b:b1:60:52:61:ae:ce:9e:
d7:33:14:5a:a6:fb:0f:4f:a1:81:26:c0:10:cd:85:17:33:07:
99:0a:89:b3:4c:36:cd:67:ec:4f:7e:7a:d2:7a:2b:6d:f5:65:
10:69:3b:5a:87:7a:fc:3d:5a:11:7d:2b:ec:d7:5b:49:60:27:
9d:15:0e:88:76:8a:45:a9:a4:a7:25:ee:04:ad:86:e1:21:e9:
ee:20:23:34:90:63:5e:e7:1e:89:1b:74:8c:2e:24:bd:25:ad:
c0:69:7b:a2:86:28:a5:94:a8:78:a1:7b:f1:28:a9:62:95:cc:
42:c9:b9:1b:6b:4a:cc:8e:48:8c:97:5e:2e:8f:90:e7:69:2f:
74:8d:ed:30:50:6f:c0:53:d1:95:f6:b8:69:a2:eb:09:8e:72:
f4:aa:3c:a4:7b:d1:cc:1d:ef:cd:fc:d5:21:53:d5:d6:48:3c:
38:44:42:ca:5b:73:a5:f8:c9:1f:90:e8:0a:2b:24:26:80:bc:
c2:73:8e:30:66:8f:b8:f4:4c:48:b1:23:38:22:9d:a0:56:e6:
85:a9:dd:26:d8:76:a8:06:51:d1:e8:1d:6c:35:1b:9b:88:d4:
39:0d:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:27 2025 by rpki-client