Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/Fw56atsOtdfEYo1twsbiJ0lFNis.roa
File: Fw56atsOtdfEYo1twsbiJ0lFNis.roa (raw, json)
Hash identifier: ygLmFd+Oku5izep8v8hzo1z0z83PlzzclDKabb/t/zQ=
Subject key identifier: 17:0E:7A:6A:DB:0E:B5:D7:C4:62:8D:6D:C2:C6:E2:27:49:45:36:2B
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 092F39A8
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/Fw56atsOtdfEYo1twsbiJ0lFNis.roa
Signing time: Sat 01 Jan 2022 08:05:56 +0000
ROA not before: Sat 01 Jan 2022 08:05:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2848
IP address blocks: 93.180.0.0/18 maxlen: 18
188.44.32.0/19 maxlen: 19
89.249.160.0/20 maxlen: 20
2a00:f480::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154089896 (0x92f39a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Jan 1 08:05:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=170e7a6adb0eb5d7c4628d6dc2c6e2274945362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:10:87:ff:1d:bb:0f:2e:34:27:85:5a:48:6d:
67:57:f6:49:0c:50:61:da:49:76:8d:5a:f9:a8:b6:
18:ec:b1:3a:2a:92:d6:d2:26:32:4b:88:02:6c:c6:
bf:23:47:a3:10:8d:50:0a:07:50:8d:f7:a6:fc:3b:
ae:15:bc:b9:d1:9f:86:47:cf:ff:dd:1a:c7:41:bc:
dd:d6:1e:1f:69:c5:3b:be:8f:41:50:3f:bb:12:fb:
c4:a7:6a:d3:08:c8:6a:a2:fa:e2:92:33:75:5b:1c:
39:78:06:54:9f:a3:87:b3:07:10:c1:24:88:fb:aa:
28:5b:d0:e1:c1:b1:ba:36:fa:ab:28:9b:44:4c:0b:
0e:45:f2:c3:9b:03:1f:0c:17:0b:8b:64:b3:85:1d:
57:2a:5f:b7:1d:3b:35:54:ef:1d:52:ff:0a:9d:fc:
3b:7b:aa:2e:b7:1c:18:0c:b5:33:11:c0:e2:42:ff:
82:3d:3c:f5:77:a3:55:cd:4a:d6:95:3b:a1:01:07:
f0:c4:dc:21:b3:79:6e:4c:af:ee:6b:25:c9:f8:99:
19:f1:c8:1c:3f:7a:44:2d:61:b8:b6:68:fd:4b:78:
01:ff:0e:2a:8b:6c:bd:9d:0f:93:01:d6:9e:ff:28:
6c:c5:a2:bb:5a:a3:a7:7c:5e:87:39:3d:96:fd:1a:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:7A:6A:DB:0E:B5:D7:C4:62:8D:6D:C2:C6:E2:27:49:45:36:2B
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/Fw56atsOtdfEYo1twsbiJ0lFNis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.160.0/20
93.180.0.0/18
188.44.32.0/19
IPv6:
2a00:f480::/32
Signature Algorithm: sha256WithRSAEncryption
38:5d:53:40:26:e9:b1:f0:c0:24:ef:ed:ff:e7:f1:82:0d:87:
3e:5b:16:20:fb:11:dc:d4:4d:77:e2:b9:51:5f:be:05:da:55:
c1:43:53:93:22:51:01:a5:e4:98:9b:61:ff:ad:f1:fb:7a:44:
78:4e:72:b8:17:e5:09:10:a6:f9:2d:e1:a9:2b:d0:fd:e9:9c:
98:20:85:e3:48:6c:df:fc:06:de:2d:6b:be:77:3a:64:e9:f3:
47:10:2a:af:ff:d9:1d:58:fa:c1:7a:19:11:75:d7:d1:a6:24:
23:4a:5a:6d:62:4b:5e:6f:7b:33:0b:cf:99:4a:a9:d3:64:a3:
15:0e:93:b4:5d:37:49:4b:95:09:e0:dd:b0:4d:d2:3e:29:dc:
c1:4b:1e:e1:c5:27:68:3b:b3:43:fe:98:d8:3f:ee:96:a0:bd:
b0:8b:cb:ff:f9:53:27:c9:29:17:1d:77:9f:a5:7f:b7:31:4f:
f4:af:c3:27:2d:69:bf:17:ce:25:37:0f:1b:87:71:4d:0c:62:
20:e8:9c:d5:65:d0:a3:94:c9:b1:22:c2:3c:b5:78:d3:3b:90:
4e:a1:85:58:f6:23:44:1d:4e:1d:26:d4:5b:71:59:ee:1a:e7:
e1:f0:22:77:b4:d1:f0:cf:8f:12:17:98:2d:3c:80:69:50:01:
84:3c:11:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:11 2025 by rpki-client