Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fwt7LcKYFiWXS4DBgZjsehuh8-M.roa
File: fwt7LcKYFiWXS4DBgZjsehuh8-M.roa (raw, json)
Hash identifier: 2Z5FTm1O6IOJWPHsF65+J/pRfTRkAaBmw6fPFNlJxys=
Subject key identifier: 7F:0B:7B:2D:C2:98:16:25:97:4B:80:C1:81:98:EC:7A:1B:A1:F3:E3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01867182B6DC2385BFAA233B78A690807C23
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fwt7LcKYFiWXS4DBgZjsehuh8-M.roa
Signing time: Tue 21 Feb 2023 01:07:17 +0000
ROA not before: Tue 21 Feb 2023 01:07:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 14.102.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:82:b6:dc:23:85:bf:aa:23:3b:78:a6:90:80:7c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 21 01:07:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f0b7b2dc2981625974b80c18198ec7a1ba1f3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:97:df:e6:af:b8:12:71:64:3d:ed:f8:7f:
70:7f:0e:c0:e1:e6:e9:87:92:f9:e5:85:f7:9a:0a:
99:db:b8:d9:1b:17:e0:40:14:a2:f0:18:20:42:62:
ae:aa:0b:98:e4:2b:2e:16:23:aa:49:85:4f:70:90:
46:98:fb:f1:20:85:76:54:35:4f:32:70:c4:73:47:
44:89:a7:8f:d3:d5:cf:ef:8c:22:dd:da:fc:57:09:
e7:fc:ac:1c:ea:95:eb:e4:48:36:7f:29:b9:8c:91:
26:43:0c:69:e7:bb:29:d5:60:cf:b3:d7:d4:9b:53:
a5:7d:19:79:d0:26:1d:73:eb:61:77:2a:12:a1:0a:
51:34:72:40:75:39:ad:09:0b:b4:c9:94:6e:75:c6:
0e:a6:ea:fc:b6:e3:1b:3f:89:a0:d2:dd:d5:22:c5:
b6:c6:06:02:4d:82:71:6e:81:48:a7:3a:9c:ae:57:
ce:41:de:f7:52:d3:62:0e:e8:8e:c5:1a:53:a7:e0:
35:60:c2:5d:61:0f:99:54:ee:37:99:25:5a:9f:86:
fa:0d:68:14:4e:56:4f:f0:62:f3:02:59:38:97:f4:
3e:00:f9:a9:91:3d:4f:59:05:ca:e3:1d:24:6f:08:
b7:7e:76:d2:5a:30:ad:cc:ce:a3:1c:4d:57:f7:c6:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0B:7B:2D:C2:98:16:25:97:4B:80:C1:81:98:EC:7A:1B:A1:F3:E3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fwt7LcKYFiWXS4DBgZjsehuh8-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:b2:1b:0e:02:e0:a5:5a:ac:0a:74:b9:eb:f3:eb:60:05:11:
9f:49:af:3a:0c:c4:d8:ef:63:f9:31:dd:72:b5:4c:2e:25:5e:
76:55:91:2d:5b:50:b9:6d:7c:19:22:9e:e7:c9:91:8d:be:65:
84:05:b8:5b:b0:90:4f:15:36:10:c7:fe:62:ad:c5:88:b2:5b:
21:69:b5:a0:54:c3:4b:e9:26:96:52:db:f1:fd:50:6f:5f:60:
e7:59:d4:4e:f3:d5:23:f6:50:2e:3b:f9:b2:5c:65:1c:f3:57:
d2:21:77:c3:e6:e2:0b:78:71:86:01:b0:17:17:6f:45:53:78:
15:2e:54:d8:cf:bc:58:7f:05:c5:31:e3:bc:c9:e5:08:a0:33:
cd:ea:f6:e2:59:ce:67:63:59:88:a0:72:31:25:e7:a8:a2:0b:
9f:c1:7a:70:14:81:f3:e0:9b:0e:42:3c:a7:2e:56:d7:11:0f:
cf:3b:d7:b4:21:a2:0d:09:70:a1:ef:ce:0b:5e:a1:bc:78:0b:
d8:66:33:49:49:1b:d1:13:b5:d9:a8:8d:6b:df:df:cb:4d:fc:
d6:35:69:38:75:6a:fb:d1:5d:f0:3f:e9:9f:0c:0d:80:22:8e:
e5:75:65:ec:c3:a0:95:dd:cc:e8:60:e7:91:5e:ce:a2:b2:09:
f9:a1:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 04:43:37 2025 by rpki-client