Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FZTn2kDpIHAeEvofa61n2eW9rAs.roa
File: FZTn2kDpIHAeEvofa61n2eW9rAs.roa (raw, json)
Hash identifier: 28pX9h8xFHY0gZ46qH0Lcyb2qwfQqL0jjIv40bhydws=
Subject key identifier: 15:94:E7:DA:40:E9:20:70:1E:12:FA:1F:6B:AD:67:D9:E5:BD:AC:0B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4264BBCE
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FZTn2kDpIHAeEvofa61n2eW9rAs.roa
Signing time: Sat 01 Jan 2022 14:03:07 +0000
ROA not before: Sat 01 Jan 2022 14:03:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35073
IP address blocks: 194.71.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113897934 (0x4264bbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1594e7da40e920701e12fa1f6bad67d9e5bdac0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:eb:9f:86:66:55:45:e0:33:64:30:a2:ec:6c:
b7:fa:b3:d5:a8:66:ef:b1:52:80:90:38:71:de:d3:
30:9b:1f:95:e4:b5:30:40:d7:44:b3:1f:9c:9f:49:
92:16:36:f9:30:1e:99:dc:30:44:42:27:b3:c3:a0:
a4:67:52:cc:b8:22:87:62:80:8c:18:e3:94:27:2a:
3f:86:c7:94:26:17:58:d5:4e:26:af:10:09:19:f9:
5e:b0:ed:81:02:4b:f9:19:14:3c:fe:a2:59:af:69:
20:f0:36:1d:bf:af:1e:af:c7:0a:2d:05:d9:ee:d4:
99:f9:a2:2b:85:9f:1e:a0:1e:a8:de:8d:d1:a1:05:
89:9b:ec:2d:da:70:42:03:59:15:11:cf:66:3d:2b:
7b:0e:16:56:5c:8e:1a:0b:ea:54:38:99:0a:c9:04:
44:99:ad:d2:4c:c6:6f:ab:6f:33:76:ed:d5:4f:c6:
db:f8:65:31:0d:bf:90:bd:3a:9c:fd:f5:53:41:11:
a2:8a:93:e9:6e:20:b0:e1:e7:2c:f2:ae:92:10:24:
e4:00:86:e9:a7:c9:a6:0b:06:a4:b0:d4:c4:f5:97:
6e:ee:59:31:ef:ed:06:70:72:19:ca:5f:9a:e9:5d:
1c:ff:c7:59:8e:a5:75:ce:5e:b1:53:4d:3a:4d:d3:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:94:E7:DA:40:E9:20:70:1E:12:FA:1F:6B:AD:67:D9:E5:BD:AC:0B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FZTn2kDpIHAeEvofa61n2eW9rAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.97.0/24
Signature Algorithm: sha256WithRSAEncryption
27:35:76:94:a8:c5:97:ee:b1:2d:f2:4d:c4:47:7e:47:67:7a:
1d:29:55:c3:3d:37:22:0d:81:73:f9:2c:cf:08:61:c5:fe:38:
bd:9d:4e:1d:c6:cd:b4:bb:29:d8:fa:6e:31:b6:0f:df:d8:1a:
44:5b:2a:e6:45:c9:8b:9a:2b:1c:5e:a6:b4:48:98:e7:ab:6e:
4c:18:06:74:a7:3d:72:68:30:c1:74:cf:e6:d6:35:81:f0:6b:
7b:c3:c5:35:e4:77:d2:8a:00:d8:a3:55:a6:8e:36:65:44:98:
29:da:32:03:90:80:c4:28:af:8a:c2:d0:2a:84:f6:dc:6f:a4:
af:39:79:f2:b0:09:7c:9a:5b:46:10:7c:af:10:34:6c:6d:c0:
ed:fe:c4:d2:8d:01:1a:3e:d1:fa:c6:c1:8a:0c:7c:74:73:ca:
a6:e2:7d:60:ef:8e:13:5b:c5:cd:24:08:2d:a1:0c:fa:29:38:
44:96:7c:aa:ec:c0:c9:97:e3:6f:66:3f:33:f9:e4:7b:23:0c:
99:24:41:22:1c:54:53:8d:aa:01:07:8c:46:48:38:42:7b:bf:
d5:7f:a1:7a:4d:56:7b:d0:d9:ea:f5:e8:0c:f7:73:b3:1f:55:
6a:8a:f3:7f:42:b3:78:45:50:ad:32:77:cb:62:f0:91:5d:fe:
c5:e9:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:39 2025 by rpki-client