Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/8GhVtFfy6nAYGtpDFiy51opiE5Q.roa
File: 8GhVtFfy6nAYGtpDFiy51opiE5Q.roa (raw, json)
Hash identifier: RqV9w4xMGccaDbJKPCVD+guRT5gtH4sWASrV4O0ZEW8=
Subject key identifier: F0:68:55:B4:57:F2:EA:70:18:1A:DA:43:16:2C:B9:D6:8A:62:13:94
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0B9DA637
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/8GhVtFfy6nAYGtpDFiy51opiE5Q.roa
Signing time: Sat 01 Jan 2022 05:51:46 +0000
ROA not before: Sat 01 Jan 2022 05:51:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35478
IP address blocks: 195.252.176.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194881079 (0xb9da637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 1 05:51:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f06855b457f2ea70181ada43162cb9d68a621394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:b0:9f:de:0e:0c:82:d1:d2:4d:8e:70:b3:
cb:cf:a3:85:ed:0a:7a:23:9f:a6:42:49:9b:33:d3:
55:7e:d3:7f:71:e5:c2:f1:17:b6:cc:c2:2b:d2:90:
f9:17:b7:1f:3b:f2:0c:2a:75:c5:d2:7b:6a:b5:84:
ff:6e:33:93:ba:84:eb:1b:a5:c2:5f:8b:24:d5:fb:
d6:64:69:c9:5b:80:6f:71:41:47:84:b1:7f:7e:aa:
54:62:e5:7b:29:9f:e4:dd:9f:b0:e6:9c:57:34:a8:
5a:52:ba:67:ad:f2:f4:de:43:32:1c:6f:38:d6:a9:
c3:b9:82:ba:97:d5:e5:18:01:8a:52:f6:44:87:81:
d5:01:ed:1d:7e:ad:a0:cc:20:2b:8b:6c:9c:b5:95:
d6:96:fe:dd:37:60:b4:77:12:4e:80:9d:d4:db:ae:
78:1a:af:10:61:3a:eb:b1:7e:49:cf:02:00:89:db:
98:ea:d6:6f:84:c3:d1:7d:50:8a:66:79:c1:8d:da:
1c:db:3f:6f:41:4e:d0:6b:cd:37:b2:dc:6f:be:35:
54:71:e8:ef:5e:2a:e5:68:4f:33:2e:df:55:a0:47:
ec:8a:b1:ac:31:01:dd:05:56:23:f9:21:ed:b0:21:
b6:0b:42:3e:ed:f2:22:2c:6f:50:7b:cd:7b:ac:59:
c7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:68:55:B4:57:F2:EA:70:18:1A:DA:43:16:2C:B9:D6:8A:62:13:94
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/8GhVtFfy6nAYGtpDFiy51opiE5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.176.0/20
Signature Algorithm: sha256WithRSAEncryption
44:d7:41:18:b1:6e:84:9d:36:4e:ed:a0:c2:6c:5e:c5:77:57:
66:bf:97:5c:02:81:00:22:30:d5:d5:ee:26:73:42:b6:29:03:
30:0d:09:d8:6a:c1:78:a1:b1:21:5f:dc:f2:25:ff:e5:b9:a9:
ba:99:e0:5f:53:57:a4:bf:d8:c7:2b:be:14:b1:4e:84:e3:10:
ed:d7:88:ee:94:15:2c:f7:d5:fa:b3:7c:4a:c5:5f:0f:4e:8b:
af:a8:d8:b0:47:a3:55:fe:0d:57:7c:4b:e0:25:49:42:a6:f0:
a6:a7:2b:a7:1b:b7:93:95:be:14:49:d2:c3:9c:66:eb:5f:4b:
dc:cd:27:ea:43:92:b6:12:28:98:34:53:f1:f8:5b:ce:83:79:
5d:5c:88:cb:a9:db:b8:fa:fd:ea:24:ec:a9:a8:07:57:32:f2:
a8:48:f3:ca:d2:fb:ea:c9:b8:cb:60:8a:86:52:26:5e:2d:7c:
e2:2d:83:8a:db:12:07:d4:7c:68:38:68:b4:00:bf:46:c7:4a:
4c:44:b0:58:42:f5:a9:0d:71:15:28:99:ce:a1:b6:d6:2d:79:
f5:c0:0e:1c:18:af:a2:0b:2a:e6:22:3c:31:9a:c5:f2:01:61:
11:61:58:bd:93:74:77:c1:5b:2b:61:85:ed:1d:df:ce:a5:8e:
f9:47:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:34 2025 by rpki-client