Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ftX_vNDSyXYB7A8D7RUlse3ab28.roa
File: ftX_vNDSyXYB7A8D7RUlse3ab28.roa (raw, json)
Hash identifier: muFhwYIm+N0dev7kiestxv3DCkQ2EFt5amaHQN+LwDI=
Subject key identifier: 7E:D5:FF:BC:D0:D2:C9:76:01:EC:0F:03:ED:15:25:B1:ED:DA:6F:6F
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018BC854B8F13AD610522C3DC34FE31C7AE9
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ftX_vNDSyXYB7A8D7RUlse3ab28.roa
Signing time: Mon 13 Nov 2023 10:57:57 +0000
ROA not before: Mon 13 Nov 2023 10:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:54:b8:f1:3a:d6:10:52:2c:3d:c3:4f:e3:1c:7a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Nov 13 10:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ed5ffbcd0d2c97601ec0f03ed1525b1edda6f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:d2:a4:05:28:87:fd:ff:b7:81:e3:b1:2d:
06:5f:4c:44:1b:0f:50:52:28:19:eb:48:e8:e2:a0:
5e:5f:c8:0c:61:c4:7c:0d:fd:cd:43:a2:fd:98:be:
93:75:39:50:68:df:35:be:22:de:54:0d:a0:e9:4f:
4b:cd:d5:40:aa:93:bf:90:81:e0:9f:ab:08:70:95:
bc:7c:74:69:f4:40:f0:b0:1d:65:15:5c:7c:8a:1e:
51:29:23:a5:57:64:d8:3a:0c:13:e5:c6:b9:81:e2:
01:6c:b5:cf:8a:fd:b1:42:8f:12:bb:82:f4:82:b5:
11:98:d1:13:b8:b2:8b:85:b0:20:84:f5:cc:dd:91:
78:83:e7:6a:dc:5f:18:0c:32:cb:91:06:28:48:62:
00:7b:a8:1c:a6:4a:af:38:18:c1:86:45:03:b3:e2:
e2:92:6c:02:96:85:f6:c7:1c:3b:83:b1:bb:3b:6d:
53:da:b6:76:e2:99:1f:c9:6b:3b:f9:6f:5e:e9:95:
88:46:57:99:dd:73:16:a7:37:97:81:f8:27:63:ec:
10:df:73:f7:4e:04:6b:80:a2:80:fb:b4:8d:31:9c:
87:9c:0e:da:9f:c9:1e:ef:c4:5d:8b:57:88:1d:2c:
28:8c:2d:eb:3d:86:f9:72:6b:8a:2b:3a:45:b4:45:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D5:FF:BC:D0:D2:C9:76:01:EC:0F:03:ED:15:25:B1:ED:DA:6F:6F
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ftX_vNDSyXYB7A8D7RUlse3ab28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
19:4d:d4:52:15:66:db:a0:24:23:01:33:4d:82:0a:9d:8e:a1:
e7:09:b2:84:47:c5:73:ab:26:a6:25:a0:17:58:8f:71:6d:8b:
bf:55:f4:31:7e:54:bb:59:aa:b8:d0:47:7f:65:5e:5e:9d:6d:
e4:49:c2:de:69:9a:7c:74:c2:6c:1c:10:20:a3:7b:a9:05:fe:
c2:c5:70:94:fd:6e:2a:f6:b3:12:65:61:8b:99:fb:28:25:b6:
b5:58:a2:e8:8a:d1:72:0a:5b:87:65:6b:e2:59:18:7d:5f:c8:
90:66:fa:64:df:73:ca:40:97:63:36:10:93:f6:2d:cb:d1:81:
dc:1a:ad:8c:71:37:29:f0:72:3a:ef:d3:8f:44:bc:09:44:9a:
1b:d4:19:b9:35:23:f9:27:bb:59:82:e1:1d:cc:6b:78:e8:80:
bd:b3:ce:9e:c3:3a:ec:bf:ab:2e:7e:f8:66:7a:78:1f:6a:43:
1e:50:1b:0b:20:fb:49:c4:7e:6b:6e:ac:bb:65:ce:44:9b:85:
d2:c8:aa:97:c5:fd:4e:93:f2:2a:dc:e8:7d:5c:79:c5:83:66:
6a:1c:10:51:04:39:9d:b2:30:e2:b2:95:9f:be:a3:59:7c:94:
a6:5e:34:62:98:4b:5a:e7:77:d0:f5:51:47:34:79:b7:53:6c:
97:22:79:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvIVLjxOtYQUiw9w0/jHHrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjMxMTEzMTA1NzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWQ1ZmZiY2QwZDJjOTc2MDFlYzBmMDNlZDE1MjViMWVkZGE2ZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhHSpAUoh/3/t4HjsS0GX0xEGw9Q
UigZ60jo4qBeX8gMYcR8Df3NQ6L9mL6TdTlQaN81viLeVA2g6U9LzdVAqpO/kIHg
n6sIcJW8fHRp9EDwsB1lFVx8ih5RKSOlV2TYOgwT5ca5geIBbLXPiv2xQo8Su4L0
grURmNETuLKLhbAghPXM3ZF4g+dq3F8YDDLLkQYoSGIAe6gcpkqvOBjBhkUDs+Li
kmwCloX2xxw7g7G7O21T2rZ24pkfyWs7+W9e6ZWIRleZ3XMWpzeXgfgnY+wQ33P3
TgRrgKKA+7SNMZyHnA7an8ke78Rdi1eIHSwojC3rPYb5cmuKKzpFtEXOdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7V/7zQ0sl2AewPA+0VJbHt2m9vMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvZnRYX3ZORFN5WFlCN0E4RDdSVWxzZTNhYjI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWrEMA0G
CSqGSIb3DQEBCwUAA4IBAQAZTdRSFWbboCQjATNNggqdjqHnCbKER8VzqyamJaAX
WI9xbYu/VfQxflS7Waq40Ed/ZV5enW3kScLeaZp8dMJsHBAgo3upBf7CxXCU/W4q
9rMSZWGLmfsoJba1WKLoitFyCluHZWviWRh9X8iQZvpk33PKQJdjNhCT9i3L0YHc
Gq2McTcp8HI679OPRLwJRJob1Bm5NSP5J7tZguEdzGt46IC9s86ewzrsv6sufvhm
engfakMeUBsLIPtJxH5rbqy7Zc5Em4XSyKqXxf1Ok/Iq3Oh9XHnFg2ZqHBBRBDmd
sjDispWfvqNZfJSmXjRimEta53fQ9VFHNHm3U2yXInmT
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:54 2025 by rpki-client