Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/Fgj1AQyxbnHGXu9vZGG1d_nBmNE.roa
File: Fgj1AQyxbnHGXu9vZGG1d_nBmNE.roa (raw, json)
Hash identifier: KVf+RxmRsMMNrKW2iyMqj6QpGupLvEg51j4o2m4oavw=
Subject key identifier: 16:08:F5:01:0C:B1:6E:71:C6:5E:EF:6F:64:61:B5:77:F9:C1:98:D1
Certificate issuer: /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial: 018948D3DE3DCCD10E0DF4DE2295CAEC7CEB
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/Fgj1AQyxbnHGXu9vZGG1d_nBmNE.roa
Signing time: Wed 12 Jul 2023 06:39:51 +0000
ROA not before: Wed 12 Jul 2023 06:39:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211612
IP address blocks: 94.76.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:d3:de:3d:cc:d1:0e:0d:f4:de:22:95:ca:ec:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Validity
Not Before: Jul 12 06:39:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1608f5010cb16e71c65eef6f6461b577f9c198d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:bc:b6:f1:6f:6d:bd:a1:59:3b:2c:24:cb:
cf:ba:73:07:1f:93:44:14:a5:50:1f:bd:0d:44:9d:
3d:42:98:4b:d8:58:f2:f9:91:80:73:f4:03:cc:41:
86:35:6e:a9:88:72:ae:b7:fd:99:ac:cf:cc:88:15:
4f:44:ff:f3:cb:71:09:ae:c5:44:8f:9a:48:28:aa:
04:6d:e0:54:8f:a9:b7:54:3c:2f:d1:88:3b:75:dd:
7b:df:3d:52:01:24:d1:5b:eb:66:68:f6:d1:5c:a9:
7a:e9:45:30:ea:9a:9f:61:f6:59:90:79:06:f9:5d:
de:e0:e7:9e:95:1e:d0:3f:e3:a9:d5:d3:63:e3:f2:
a8:4a:df:f0:54:a2:8b:ef:ab:ed:e1:e4:3f:ad:6c:
e1:1b:8f:e5:bb:4b:c1:91:e4:23:cb:7e:09:50:84:
70:10:0f:81:66:9b:01:59:db:13:71:47:70:59:19:
0e:bd:63:8e:c9:04:aa:ce:1f:9d:ac:80:2c:b0:00:
b5:41:ac:da:72:75:4c:34:1c:8f:4b:7d:c5:64:ac:
bd:bf:7e:cb:23:72:d6:09:e8:35:a0:3c:b9:2d:1f:
56:2c:0d:c8:e9:63:39:5d:14:94:dd:f6:bc:54:9f:
6a:fb:c7:e8:1e:8d:37:90:0d:b6:f8:98:f7:03:2e:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:F5:01:0C:B1:6E:71:C6:5E:EF:6F:64:61:B5:77:F9:C1:98:D1
X509v3 Authority Key Identifier:
keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/Fgj1AQyxbnHGXu9vZGG1d_nBmNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.76.40.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b6:db:da:c1:b7:f1:c4:9b:7b:14:d5:e2:d2:0c:a8:37:d7:
c1:05:bf:cb:bb:c5:10:dc:80:db:79:ac:c1:07:db:ae:5c:fa:
42:ed:2f:bd:b8:a5:91:a9:b4:8f:73:b0:c1:e9:f5:47:a2:10:
d3:ab:6a:1e:ed:c8:ff:0c:9b:97:47:c4:0a:7d:51:42:cb:d7:
a2:a8:66:33:9a:d9:7f:7a:80:81:3b:59:bd:44:c5:0c:85:15:
a9:14:68:90:ab:fb:21:e2:bd:ee:57:5c:1b:c0:78:80:48:32:
b1:71:e2:61:67:29:4f:b0:11:95:a8:d5:a3:b7:4d:78:3c:97:
ba:e2:3b:9f:89:64:be:49:d6:64:0d:49:da:52:e5:5b:50:91:
eb:4f:80:a0:8a:67:a3:10:53:3b:4e:d5:27:c3:44:9f:9a:40:
27:f0:91:ef:fa:b8:85:db:fe:64:58:cd:7d:d1:26:1e:58:95:
ba:3c:b5:82:85:bd:43:c1:80:ae:1b:c0:98:fd:09:9d:2f:f9:
20:23:8f:5b:b2:c8:26:7f:c3:1c:f4:45:da:26:3d:0b:b5:6b:
5d:94:e3:0b:40:64:e2:82:75:2d:a0:1b:c1:69:8f:89:ac:28:
b5:d7:fc:a0:3e:6c:99:8c:a8:75:67:d9:54:14:0b:63:ee:33:
0f:a8:0d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:37:07 2025 by rpki-client