Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/faMbPcWQ98uh9jeq_pgJATEZSHg.roa
File: faMbPcWQ98uh9jeq_pgJATEZSHg.roa (raw, json)
Hash identifier: mSHaq2yCHPWWA0sJnqCMZppa1xX+R4gG14yHQdk4VRo=
Subject key identifier: 7D:A3:1B:3D:C5:90:F7:CB:A1:F6:37:AA:FE:98:09:01:31:19:48:78
Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial: 018571830212A44F5638617B2330DBF20842
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/faMbPcWQ98uh9jeq_pgJATEZSHg.roa
Signing time: Mon 02 Jan 2023 08:04:49 +0000
ROA not before: Mon 02 Jan 2023 08:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41755
IP address blocks: 193.37.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:02:12:a4:4f:56:38:61:7b:23:30:db:f2:08:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Validity
Not Before: Jan 2 08:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7da31b3dc590f7cba1f637aafe98090131194878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e2:09:e0:25:86:19:c3:e2:3d:83:24:09:81:
af:11:fa:45:bf:c0:5b:00:f9:93:bd:d3:47:83:42:
69:18:7d:b4:09:01:7e:47:c5:17:c2:dd:97:94:22:
9a:a0:16:39:d5:63:d1:29:67:48:79:68:ac:f1:ea:
21:9c:71:ca:dd:72:75:95:31:b0:cf:5e:c0:8f:f9:
68:6e:90:e6:2b:0d:74:e4:07:e7:02:cc:36:da:04:
27:bc:2a:fa:f5:9d:40:6d:7b:de:ee:33:6f:fc:c4:
db:f9:e5:a4:56:e7:7f:0b:cb:4a:92:0d:8b:01:59:
8c:a6:34:61:81:84:bc:cb:7f:9e:1d:04:c3:e2:ce:
ac:e2:de:cb:51:b9:68:0d:9b:1b:69:5b:6b:68:ed:
a4:5f:c2:c9:f9:7b:02:26:3c:37:57:ff:5f:c6:64:
f3:1d:14:18:92:38:72:23:b1:50:9c:6b:b4:9d:0f:
a1:0b:f5:73:3c:ad:98:d0:71:04:19:a0:18:d9:c9:
ec:b6:7f:aa:83:c2:9e:4c:82:ca:26:72:9b:0b:be:
6e:64:61:5f:0d:f7:11:f2:32:ef:d2:39:eb:03:3c:
bf:c9:7d:b6:63:48:ec:4d:36:f3:40:0b:f0:44:84:
9f:b7:68:7e:02:e2:b8:7b:1c:eb:96:93:31:cc:89:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:1B:3D:C5:90:F7:CB:A1:F6:37:AA:FE:98:09:01:31:19:48:78
X509v3 Authority Key Identifier:
keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/faMbPcWQ98uh9jeq_pgJATEZSHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.154.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5a:e4:e1:f7:1e:d5:85:9c:09:65:17:0a:32:63:a0:b2:33:
d4:02:c7:2b:a9:c6:8f:c3:b6:d8:d5:f0:4e:fd:73:5c:41:91:
0b:d3:ad:21:06:11:a0:58:58:e1:3f:7b:b0:42:c0:cc:14:e0:
8e:5a:37:70:ae:02:08:56:57:bf:73:1f:71:5f:3d:2e:62:6f:
c3:f4:0d:ee:f2:9f:88:5c:31:17:cb:fb:49:e7:7e:4f:77:91:
38:f4:7a:c5:24:bb:5a:72:77:42:b0:79:1a:2e:7a:1e:40:fb:
10:c6:85:58:68:18:ea:03:d4:91:f0:92:6f:7d:13:d0:64:e7:
25:9f:3a:7e:54:0f:13:1e:5a:a0:17:aa:55:3e:66:2b:12:4b:
70:73:34:7e:1d:3a:b8:ae:d5:d0:ed:92:44:01:90:4f:22:87:
21:9a:a8:4c:25:bf:c9:85:d7:b1:eb:7b:fb:16:6c:4c:41:79:
0b:64:13:50:63:6a:7c:e1:a1:22:d5:bc:61:65:c0:98:04:c3:
e9:27:6e:1f:34:5a:a2:83:f0:1f:58:d0:c7:11:26:ae:1e:08:
d0:f1:9a:d8:06:5b:a4:95:35:24:bb:68:67:ff:b1:c8:96:8c:
0e:e4:82:15:81:1b:82:04:61:00:8d:b4:27:87:27:08:61:08:
ca:56:50:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:22 2025 by rpki-client