Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Fmz13Mf8hQpWXqIijNGZBpLbK78.roa
File: Fmz13Mf8hQpWXqIijNGZBpLbK78.roa (raw, json)
Hash identifier: rHTvkjjpZ8wseYkdSy7jOhGMPoWgQuvIPXSKLorojos=
Subject key identifier: 16:6C:F5:DC:C7:FC:85:0A:56:5E:A2:22:8C:D1:99:06:92:DB:2B:BF
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0182817E7AFAD4DF32CCE932A4928F25C1E8
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Fmz13Mf8hQpWXqIijNGZBpLbK78.roa
Signing time: Tue 09 Aug 2022 07:25:26 +0000
ROA not before: Tue 09 Aug 2022 07:25:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5089
IP address blocks: 45.86.156.0/22 maxlen: 24
185.255.114.0/24 maxlen: 24
85.117.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:7e:7a:fa:d4:df:32:cc:e9:32:a4:92:8f:25:c1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Aug 9 07:25:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=166cf5dcc7fc850a565ea2228cd1990692db2bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:a2:74:bd:03:1a:f9:ae:e4:7e:e2:88:d5:
d2:78:f2:c1:29:f7:00:44:a6:f5:b5:7a:52:ec:77:
62:60:2c:b2:12:41:95:84:e3:22:8f:d1:f3:f4:50:
38:61:ac:ed:6f:56:09:78:ac:c1:ed:b5:37:9e:75:
62:b9:8d:31:76:dc:f1:2e:ae:6d:6a:85:ce:ab:5c:
78:28:db:73:a4:f8:22:54:8e:15:8d:44:8a:ae:9a:
4d:c3:c9:cf:96:11:2e:40:d3:c9:e6:23:25:61:ab:
1b:1e:b4:84:01:c7:2e:c0:73:c4:4a:c9:df:39:c7:
ea:da:e2:af:cb:73:1c:dc:50:94:bd:a3:e2:3d:70:
db:ba:16:b0:12:b8:03:92:c1:d6:79:7c:c6:59:e1:
ae:b7:ab:0f:89:75:a6:3a:cb:bd:3a:c0:cd:dc:29:
ab:33:55:49:43:59:03:02:a5:df:c9:2e:d2:06:d6:
8f:1a:0b:e5:f8:e4:0f:51:93:34:0d:e2:72:f8:29:
d0:1a:fd:0d:f4:48:5f:07:77:53:f3:2a:28:f9:e7:
d1:ba:71:00:9d:2a:81:13:f2:6f:75:c8:42:34:d3:
07:3f:0f:53:d5:6a:51:a5:2e:91:6f:89:a4:db:68:
8e:78:87:b9:a0:49:a4:3f:31:00:80:de:e8:3f:5e:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:F5:DC:C7:FC:85:0A:56:5E:A2:22:8C:D1:99:06:92:DB:2B:BF
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Fmz13Mf8hQpWXqIijNGZBpLbK78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.156.0/22
85.117.242.0/24
185.255.114.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e6:f1:37:23:1e:0e:0f:a3:79:71:bf:c1:84:c3:c5:28:f5:
fd:14:9e:6c:b6:84:3e:24:f6:8a:35:d9:9f:d1:a7:87:ed:cd:
45:b5:e4:4f:80:4b:7e:be:ca:0a:df:37:23:44:8a:de:dc:76:
8d:73:80:b0:f9:2d:4d:d7:1a:ea:80:04:5d:93:e1:43:c1:2f:
fe:70:78:b6:95:17:44:57:72:18:9f:fa:1a:b7:bf:a9:04:b4:
cb:3f:9e:12:39:ff:fa:3a:94:e8:d9:5b:33:e6:ae:97:b6:93:
5b:95:a3:31:32:09:69:22:e8:09:29:27:16:be:0d:a0:23:56:
07:6b:00:04:40:01:da:31:ab:98:57:64:2e:94:bf:6f:cf:7a:
f5:dc:ef:ca:89:39:4f:20:dd:d4:df:b7:9c:53:86:2a:52:bd:
88:ec:52:7b:5d:11:57:40:f8:43:47:e1:e4:80:e6:d7:f7:63:
4e:16:77:1d:8c:cd:a2:56:08:5e:8e:55:f2:14:b5:28:3c:3e:
d5:b5:8d:56:9c:85:a7:e9:c6:69:72:36:9a:62:81:d5:bc:47:
db:16:54:08:46:98:f6:97:49:0e:fe:3c:a6:60:70:ed:e4:d2:
af:80:37:83:e4:8e:4c:85:4b:22:17:68:ef:41:29:43:6d:39:
9e:8a:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:18 2025 by rpki-client