Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/FK8sLppAGB8MvVuiyP2si7IH82Y.roa
File: FK8sLppAGB8MvVuiyP2si7IH82Y.roa (raw, json)
Hash identifier: TY5DAuNZ/LkekD2PqRE8AjqEwXqLPJ4MPWH+4S6r7zM=
Subject key identifier: 14:AF:2C:2E:9A:40:18:1F:0C:BD:5B:A2:C8:FD:AC:8B:B2:07:F3:66
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 8F46E5
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/FK8sLppAGB8MvVuiyP2si7IH82Y.roa
Signing time: Fri 08 Apr 2022 09:21:48 +0000
ROA not before: Fri 08 Apr 2022 09:21:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.187.46.0/23 maxlen: 23
92.42.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9389797 (0x8f46e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Apr 8 09:21:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14af2c2e9a40181f0cbd5ba2c8fdac8bb207f366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:46:14:39:22:72:0d:fc:64:09:e7:da:75:
96:68:08:46:69:b8:e8:47:23:43:7e:94:58:4e:91:
c3:1e:a2:0f:d6:cb:f6:57:1b:93:90:3d:a2:7d:a4:
7d:c6:cb:4d:50:09:79:57:b1:0a:af:9b:f5:dd:74:
f3:b5:a9:48:1d:57:16:f7:08:5d:e8:38:a2:8c:4f:
64:b5:b5:39:c0:36:b4:34:9c:67:b1:f0:51:3a:0c:
8e:3b:83:47:06:a6:46:2d:77:80:0f:69:ad:80:03:
9c:07:41:ea:fb:66:44:96:ab:ed:ac:b0:f3:39:9c:
72:4b:d8:04:34:a4:3d:3c:28:d8:bd:a7:84:c7:0c:
33:c3:4a:89:97:45:58:f3:41:34:0e:ef:89:94:26:
77:6e:05:5f:14:60:66:1d:73:94:6f:8f:d1:93:9b:
77:2e:d0:1e:8c:f2:f5:58:27:1b:e5:0b:35:a1:96:
d5:fd:b8:9a:fd:d8:bc:a9:d1:13:87:d7:7e:38:b6:
e7:49:ef:7a:3d:bd:17:8b:ab:79:61:f7:2e:79:20:
92:1c:c8:a0:f9:ee:c3:47:2e:3e:23:1b:87:ee:9e:
0f:3a:e0:39:eb:fa:bc:2c:78:ae:30:a6:ae:54:b4:
12:d7:a6:56:46:b7:0d:9b:11:90:34:06:a0:52:7a:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AF:2C:2E:9A:40:18:1F:0C:BD:5B:A2:C8:FD:AC:8B:B2:07:F3:66
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/FK8sLppAGB8MvVuiyP2si7IH82Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.20.0/22
185.187.46.0/23
Signature Algorithm: sha256WithRSAEncryption
67:e8:75:25:37:17:4e:11:82:0a:5c:ab:3c:e0:27:72:0f:bf:
37:87:93:7d:47:1f:83:9f:41:fe:43:a6:c2:90:b1:12:1e:3f:
73:e8:30:e0:41:dd:86:cf:80:a7:1f:8e:ed:3f:e0:f9:e0:e2:
a5:fd:c0:80:72:ab:d8:e4:81:ed:29:2e:e1:50:ca:e7:25:24:
82:31:81:48:8f:c4:44:e1:35:9f:55:fd:8d:78:b2:56:99:2b:
c9:06:2c:63:04:1c:19:13:15:07:0b:9f:f6:ab:2c:69:9a:b8:
6b:66:8f:22:93:75:bc:78:96:4c:87:62:e0:e2:4d:67:0b:86:
ec:e0:52:de:e0:82:79:92:05:59:f0:91:e8:2f:5e:54:47:99:
18:ac:9d:fd:0d:ba:47:63:b3:c7:45:87:c9:67:7e:86:b3:9a:
c0:1a:da:47:eb:c8:73:42:7c:b5:90:0a:3f:2b:7a:bb:f4:62:
18:45:e8:6f:55:ea:de:ce:16:1c:69:c7:19:a0:09:76:06:3f:
71:23:25:3a:64:74:57:83:c2:5a:4f:c7:7c:2c:4a:1b:27:7a:
c3:f7:11:1f:91:e5:09:56:2f:9d:83:01:2c:ef:a9:d1:5a:bf:
7b:c5:aa:3f:51:80:8f:af:ce:85:96:bc:a6:66:2d:aa:21:fb:
78:fc:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:26 2025 by rpki-client