Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/8i0yL09Qk7Qzddvh4MfUjSHYbxM.roa
File: 8i0yL09Qk7Qzddvh4MfUjSHYbxM.roa (raw, json)
Hash identifier: EsC2VzLFM5qX8l7KeE4Rg/26daGAJRMm2svkBiNuBrE=
Subject key identifier: F2:2D:32:2F:4F:50:93:B4:33:75:DB:E1:E0:C7:D4:8D:21:D8:6F:13
Certificate issuer: /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial: 01831D111A715EF45F29FF655D8763A14DA6
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/8i0yL09Qk7Qzddvh4MfUjSHYbxM.roa
Signing time: Thu 08 Sep 2022 12:26:43 +0000
ROA not before: Thu 08 Sep 2022 12:26:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198491
IP address blocks: 195.85.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:11:1a:71:5e:f4:5f:29:ff:65:5d:87:63:a1:4d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Validity
Not Before: Sep 8 12:26:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f22d322f4f5093b43375dbe1e0c7d48d21d86f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:8e:ea:8d:67:0a:46:3e:7c:0c:90:70:76:
32:d0:aa:6c:6e:0a:b2:cf:73:22:2c:0f:7f:37:9c:
ab:f6:16:88:f8:6b:41:9d:74:bc:db:a3:a6:f4:c6:
40:c5:8d:fd:14:21:f7:aa:72:61:05:34:59:6b:46:
ee:25:18:a1:09:ac:8a:3b:7d:56:11:7d:84:e3:f0:
a9:10:fe:02:d5:4f:af:c4:2b:c6:5f:f7:6a:e6:dc:
ff:92:4b:c6:fe:42:cf:7f:5f:12:17:85:22:e5:93:
45:bc:94:19:55:e9:1d:99:19:b0:34:fa:6a:f7:97:
ae:e2:5a:26:13:62:5c:bc:4c:9d:ee:05:4d:dc:c5:
5f:f5:62:c5:a5:c2:5d:41:30:10:5c:b3:44:92:a2:
c9:c5:43:9b:44:4e:e2:0e:be:f5:39:8a:d3:82:f0:
34:e2:73:4d:9e:c9:bd:ba:f5:13:3c:09:6f:b0:14:
c8:c9:b3:8b:c1:fa:90:cf:67:ed:2d:09:34:22:f0:
f3:63:7f:67:71:b8:6b:a0:27:62:6d:03:0d:a1:53:
7a:96:81:3a:71:a2:1c:a2:8e:b4:fe:44:ce:80:36:
9d:e7:13:0b:4f:c4:10:f3:3b:2a:ec:07:8c:11:88:
ca:c4:d7:25:69:34:e1:17:a6:2d:94:8c:b0:74:cc:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2D:32:2F:4F:50:93:B4:33:75:DB:E1:E0:C7:D4:8D:21:D8:6F:13
X509v3 Authority Key Identifier:
keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/8i0yL09Qk7Qzddvh4MfUjSHYbxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.208.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f8:ff:cb:7d:f9:90:0d:62:e9:a5:83:a7:9d:88:db:44:5d:
4f:31:a7:b5:56:3b:16:22:d9:62:df:b5:a4:a9:76:73:9a:23:
6a:7b:fc:cf:dd:b4:3e:1c:6a:5b:10:d8:e9:6f:f8:a4:20:f1:
4d:77:88:83:2e:d9:1b:01:57:78:16:35:97:9a:9d:58:9f:98:
7a:1b:fe:bc:bd:7d:5b:97:72:fd:55:5c:dd:c9:c2:43:7f:81:
1d:11:12:2a:a7:8c:d3:f9:77:4a:de:6b:22:3b:bb:b1:86:c6:
26:9b:0c:eb:81:99:10:16:3a:a2:06:4e:ae:82:27:23:1c:df:
78:44:32:cb:65:de:a8:73:49:1e:eb:72:43:f4:70:d3:70:95:
d2:3c:60:17:75:e2:af:13:7e:5e:0b:7d:fd:d3:47:ba:d5:2e:
35:6a:70:86:1e:70:22:06:3e:f4:8c:ee:73:51:b2:b5:04:41:
87:69:be:52:ba:c8:63:d6:27:5a:db:da:4c:cd:20:85:a7:09:
0d:97:a2:c9:b1:86:ea:e0:4b:7f:60:3a:a5:24:20:fd:91:0e:
b6:fd:4a:a0:00:c0:f5:77:b5:ea:12:15:3b:57:24:bb:33:17:
72:21:ea:4d:db:bf:45:b7:e2:5d:41:2d:ee:60:56:f9:ac:62:
d6:7c:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:19 2024 by rpki-client on console-ams.rpki-client.org