Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FT0E6F3EvZQ07TCa16DRFCm5zoo.roa
File: FT0E6F3EvZQ07TCa16DRFCm5zoo.roa (raw, json)
Hash identifier: BTT2kkRtG2uu/VNVLLwPJS2NhO1NC11NCzX2onJKV0s=
Subject key identifier: 15:3D:04:E8:5D:C4:BD:94:34:ED:30:9A:D7:A0:D1:14:29:B9:CE:8A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01880A3E3876ED704FC99308D1C0A1BCF36A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FT0E6F3EvZQ07TCa16DRFCm5zoo.roa
Signing time: Thu 11 May 2023 09:57:09 +0000
ROA not before: Thu 11 May 2023 09:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53745
IP address blocks: 194.14.248.0/24 maxlen: 24
193.235.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:3e:38:76:ed:70:4f:c9:93:08:d1:c0:a1:bc:f3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 11 09:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=153d04e85dc4bd9434ed309ad7a0d11429b9ce8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:38:9a:03:6d:42:70:88:43:67:71:5f:4d:
52:76:a6:95:0f:f5:db:86:ee:20:70:42:3c:a2:c1:
16:8e:8b:a5:a6:94:26:72:b3:ad:c4:8f:54:dc:39:
d1:3a:46:88:26:35:43:2e:ec:69:ae:15:6f:76:8a:
ad:46:2b:37:7c:be:87:fd:01:86:56:8c:12:a0:5c:
56:93:17:8d:a8:1f:6a:bb:09:d8:77:ee:4d:0a:c1:
be:3a:c9:c4:68:e6:f4:b4:dc:ed:d9:2e:60:fe:20:
8f:70:52:89:87:47:f4:c5:6e:53:6d:12:b3:87:98:
5b:89:b7:58:8a:4b:fa:c0:a1:f2:df:2f:80:69:75:
16:9f:89:fd:bf:94:e3:f1:cf:0d:49:74:a2:4a:56:
fa:b9:2a:97:41:52:19:24:d3:06:cb:7b:d4:e7:24:
a3:b5:bf:c6:be:c7:ed:16:27:32:1f:f4:62:54:e5:
eb:71:e6:ed:9e:e4:70:58:87:95:05:19:11:e3:4a:
5f:66:84:7b:11:3e:82:8c:c5:f4:43:a3:59:6f:87:
1a:8a:81:a5:5b:12:34:03:c6:dc:0e:7d:95:65:5b:
61:c6:74:ab:1f:a7:04:6c:a2:72:37:92:1e:a8:be:
c1:93:0b:e2:88:e4:6d:4d:ad:f6:e2:bf:0c:6c:eb:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3D:04:E8:5D:C4:BD:94:34:ED:30:9A:D7:A0:D1:14:29:B9:CE:8A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FT0E6F3EvZQ07TCa16DRFCm5zoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.66.0/24
194.14.248.0/24
Signature Algorithm: sha256WithRSAEncryption
66:29:23:bc:2c:5b:62:25:db:48:39:7a:d6:fd:c9:15:44:2a:
d0:8a:ef:b8:8d:1c:43:be:92:b5:b3:81:61:5e:7c:6c:43:cc:
7c:b1:fc:47:85:22:92:c3:b8:a1:c4:57:3e:19:65:5c:08:bc:
51:0c:f6:ed:73:5d:36:c1:a7:21:2d:5b:12:0c:47:db:77:b1:
cd:24:99:fb:ef:58:36:54:51:aa:f6:a6:bb:69:3e:b7:24:96:
08:af:6e:ee:42:8c:bc:3c:f9:29:53:12:d2:de:51:6f:7e:34:
e6:db:52:84:09:b1:fb:58:31:83:58:95:ab:9d:55:28:ba:6c:
f1:d6:c8:6b:1d:42:ec:b3:a0:e5:ec:b6:c8:2b:83:ca:49:d9:
cb:01:0c:25:e5:69:46:83:4e:fb:97:5a:04:a6:d5:94:69:6f:
87:2e:be:10:d6:81:4c:8c:6e:ab:52:5b:62:3e:9a:c3:34:1c:
52:00:b9:fc:6d:05:3e:eb:ff:4e:54:9d:c7:6b:2a:fb:b1:15:
26:74:44:5c:82:86:1e:cf:66:5c:15:fc:13:1b:0a:20:39:ca:
d2:92:81:e9:07:a0:a1:d7:bd:ba:21:94:30:dd:be:2d:0b:50:
07:be:d7:d3:0b:7a:3e:a3:2d:64:42:03:b8:71:fe:2c:8d:ec:
1c:95:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:18 2025 by rpki-client