Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FNQW0AmB8KNC_MFRHBxaUCbQQrk.roa
File: FNQW0AmB8KNC_MFRHBxaUCbQQrk.roa (raw, json)
Hash identifier: Hh2zEnOUdalblv8KIVMKiELLI/QwPpekI5hkZz1+2o4=
Subject key identifier: 14:D4:16:D0:09:81:F0:A3:42:FC:C1:51:1C:1C:5A:50:26:D0:42:B9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018BEC3DE6C625EB987BF560B8EE48CF3AE8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FNQW0AmB8KNC_MFRHBxaUCbQQrk.roa
Signing time: Mon 20 Nov 2023 10:19:21 +0000
ROA not before: Mon 20 Nov 2023 10:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197992
IP address blocks: 194.33.32.0/24 maxlen: 24
2a0f:7f00::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a13:2b40::/29 maxlen: 29
2a13:d300::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:3d:e6:c6:25:eb:98:7b:f5:60:b8:ee:48:cf:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 20 10:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14d416d00981f0a342fcc1511c1c5a5026d042b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:f3:5d:c3:77:55:99:66:eb:f6:9f:ad:3a:
60:d3:50:64:f3:4a:90:72:19:6a:75:04:3b:f5:d9:
8a:ba:95:7e:ad:0b:03:f8:84:5e:43:0c:c9:ae:d8:
22:bf:3e:aa:3c:44:54:a7:d7:91:60:a2:9d:e9:77:
27:35:c9:7d:64:7a:8b:ea:d3:c4:49:54:2e:51:c4:
af:74:e4:7b:38:91:04:91:06:c7:ab:52:43:fe:7d:
a9:55:61:d8:d2:00:45:5b:66:2f:ad:08:65:b7:57:
e0:5a:71:c6:a8:2b:a3:ff:41:13:35:a8:46:6b:dd:
e3:78:7b:6c:a3:d9:04:7e:1f:0a:2d:b4:df:26:5e:
1a:70:c5:67:65:f7:3e:1d:28:3a:60:e0:d7:ab:86:
af:dc:ed:1e:91:3c:00:18:a3:8d:ce:de:76:72:da:
3a:d7:19:be:2e:b9:8f:bc:23:05:00:ee:d3:f9:e6:
2a:49:f2:7f:da:25:08:5d:4b:8d:b1:61:f8:0e:75:
24:f0:6c:98:c4:4b:dc:4f:ff:25:8e:78:a4:ed:9a:
dc:aa:54:40:83:c8:83:0f:dd:b9:7e:0a:c0:ee:1d:
32:69:64:18:20:e7:dc:04:b5:62:25:81:b8:30:54:
6d:1f:72:55:91:39:49:e7:b7:c9:95:7a:41:8e:7c:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:16:D0:09:81:F0:A3:42:FC:C1:51:1C:1C:5A:50:26:D0:42:B9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FNQW0AmB8KNC_MFRHBxaUCbQQrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.32.0/24
IPv6:
2a06:dfc0::/29
2a0e:5a80::/29
2a0f:7f00::/29
2a12:d540::/29
2a13:200::/29
2a13:2b40::/29
2a13:d300::/29
Signature Algorithm: sha256WithRSAEncryption
b9:4d:cf:c1:d2:2e:09:42:34:1d:ab:23:6d:90:0c:37:44:f5:
be:a2:56:a3:66:d8:54:6f:eb:95:9c:6c:ca:bc:4e:8e:38:55:
5d:4d:9a:d5:73:96:66:d5:76:54:61:ac:48:5d:b3:66:2c:b4:
9e:52:50:63:b0:bd:24:bb:27:21:d1:fb:e0:3b:a7:4b:12:16:
b6:93:e2:b3:27:9e:a2:23:4e:db:7b:1a:62:af:5b:89:bd:09:
5f:b6:4b:31:3f:1a:9a:8e:69:a0:33:19:0d:b2:49:73:8d:cd:
95:13:74:ce:11:fd:51:99:bd:5e:8a:38:6c:17:45:12:df:94:
3a:2a:2d:7b:60:e3:ca:9e:3b:e6:05:a8:2b:62:b9:82:d9:32:
43:de:e0:44:c3:d7:f5:1e:81:92:c5:40:95:83:ba:16:a4:85:
5d:a8:b5:d6:45:9f:2a:00:ba:09:9c:df:9a:2e:2a:25:d0:e1:
3b:14:14:5b:ed:04:0b:17:d0:f4:ba:67:7e:e3:c5:79:59:e9:
11:1c:ef:b8:d5:4d:e7:be:c7:12:3b:6e:5e:e4:22:b9:cc:9a:
c7:6d:c6:e4:c5:5b:1e:69:c9:59:f6:c0:0e:83:99:a5:76:7b:
fe:61:ef:5a:7d:7a:1e:98:de:0b:b1:4e:28:1e:90:53:25:71:
2c:5b:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:56:46 2025 by rpki-client