Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/fw_5H-2IYv6N2nLc96h-I4N-O54.roa
File: fw_5H-2IYv6N2nLc96h-I4N-O54.roa (raw, json)
Hash identifier: 3pIQooRDQolBMFJcWHDRZL8owyQjf7K0ncpm3P5o5AY=
Subject key identifier: 7F:0F:F9:1F:ED:88:62:FE:8D:DA:72:DC:F7:A8:7E:23:83:7E:3B:9E
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 06EB6A51
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/fw_5H-2IYv6N2nLc96h-I4N-O54.roa
Signing time: Sat 01 Jan 2022 06:02:03 +0000
ROA not before: Sat 01 Jan 2022 06:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210161
IP address blocks: 87.101.84.0/22 maxlen: 22
87.101.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116091473 (0x6eb6a51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Jan 1 06:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f0ff91fed8862fe8dda72dcf7a87e23837e3b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:05:32:36:da:92:64:3a:46:10:d1:48:64:
36:0a:58:6f:23:f9:93:e1:02:18:c8:f8:eb:ce:29:
d2:81:b7:80:e4:0e:65:0b:02:6b:09:ff:1a:ba:f5:
0c:f6:c5:b3:e1:60:64:d3:b3:67:7f:d6:78:83:06:
ed:98:cf:7b:5c:75:ee:f4:20:55:39:47:62:12:bc:
9c:f3:a5:93:a4:4f:dc:da:ee:08:6c:28:bc:4c:cb:
7f:e4:07:f1:64:80:08:ee:bb:fd:ef:33:ba:0e:d3:
47:dc:a2:10:52:25:71:61:73:a8:04:e0:0e:76:ea:
9c:ad:fa:94:d7:a7:91:30:ff:9b:83:22:61:36:c8:
b4:ba:40:ae:71:cc:7b:53:86:f8:cd:66:af:59:31:
45:7c:be:cb:e5:27:79:2f:10:31:15:bb:f6:7c:a1:
6e:a0:35:40:cd:41:cf:a2:cc:2b:c3:a6:31:bd:69:
d4:24:e7:69:d5:37:8f:9a:f7:c8:b4:35:35:64:1c:
e3:85:cf:6c:68:35:ce:39:0d:b4:1d:a9:76:fb:a9:
2e:e4:05:03:d6:da:29:1a:87:ab:8c:be:e3:ae:ae:
04:3f:e6:1e:31:e5:5f:47:ae:21:5d:2a:92:6e:e8:
6d:3c:77:25:ff:30:ae:e0:67:87:72:95:1b:ad:fb:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0F:F9:1F:ED:88:62:FE:8D:DA:72:DC:F7:A8:7E:23:83:7E:3B:9E
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/fw_5H-2IYv6N2nLc96h-I4N-O54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.84.0/22
Signature Algorithm: sha256WithRSAEncryption
84:05:7c:93:c4:8b:ec:bd:e4:86:57:83:ab:b8:93:9b:d9:8e:
b4:0a:9d:74:27:f1:ab:a5:f0:57:9b:fc:9a:1a:3d:a4:20:3b:
e5:ae:fa:0f:f2:07:6b:fe:14:af:f0:ac:db:96:0b:42:11:79:
1b:83:3d:2e:91:a8:28:0e:e2:f8:09:c2:c4:3e:81:67:54:80:
5e:75:20:cc:49:78:c4:81:f1:1f:93:26:12:9d:d2:49:1e:31:
d6:55:19:16:2d:07:ce:87:10:8e:66:cd:7a:02:bd:79:8c:df:
9e:b9:f9:79:b9:03:54:0c:12:6c:bc:37:4e:b5:e4:e3:fe:23:
d9:02:72:cb:9a:9c:6d:9d:6b:cb:0e:e4:bd:ed:b3:da:70:21:
45:18:32:3c:9e:d9:ae:c7:a7:c3:eb:2f:f4:52:10:7c:cc:3b:
b7:6a:58:86:70:dc:b8:c0:45:4a:5d:0c:7b:7a:e9:bc:5e:9f:
39:70:38:85:27:48:e1:ba:8b:a2:5a:05:34:be:1b:48:4f:b3:
66:93:28:e4:60:50:db:63:2b:00:09:56:ee:1a:74:58:20:a7:
66:1a:a1:31:5a:7b:b1:fd:5e:c0:65:63:17:00:48:07:10:b0:
83:01:3c:3e:f5:e5:94:e9:7a:15:ae:18:cb:3f:1f:17:53:51:
a7:30:52:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:25:39 2025 by rpki-client