Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/C8j4MVHy3qknA3ovsFjw1OOpQVc.roa
File: C8j4MVHy3qknA3ovsFjw1OOpQVc.roa (raw, json)
Hash identifier: FDAFOxdNKwcnXiQ5jXsx0izn0YoBlXnhwGGeoTWEJq0=
Subject key identifier: 0B:C8:F8:31:51:F2:DE:A9:27:03:7A:2F:B0:58:F0:D4:E3:A9:41:57
Certificate issuer: /CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Certificate serial: 0A2A0432
Authority key identifier: 4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/C8j4MVHy3qknA3ovsFjw1OOpQVc.roa
Signing time: Wed 04 May 2022 11:34:34 +0000
ROA not before: Wed 04 May 2022 11:34:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52144
IP address blocks: 195.20.144.0/24 maxlen: 24
185.247.152.0/22 maxlen: 24
2a03:e100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170525746 (0xa2a0432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Validity
Not Before: May 4 11:34:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bc8f83151f2dea927037a2fb058f0d4e3a94157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:5e:f9:0a:ab:d6:32:5c:ad:fc:ec:c6:20:
23:29:e8:55:a2:a2:02:79:22:1d:8b:76:59:91:71:
e2:10:f7:ac:6b:3f:84:3b:af:9e:98:00:00:61:85:
d6:65:1e:d2:31:d7:90:36:5f:cc:be:2c:39:e9:fb:
d5:0c:94:00:b8:00:52:05:59:ce:d3:c5:4c:ed:cb:
c1:35:49:c7:f8:5c:27:79:76:83:29:a9:35:84:76:
b8:f8:f1:e8:58:12:48:40:62:79:6e:af:55:39:95:
68:5b:d0:ba:dd:3d:8a:bf:7a:a5:19:72:0c:5d:ae:
e7:f6:42:b7:4e:ee:e3:99:08:60:ea:53:fe:a6:f8:
30:37:8f:3b:47:e5:18:5c:d6:22:7d:32:b1:a5:11:
23:29:f6:f5:92:5d:10:ea:e0:ef:53:7e:a0:39:1e:
4e:23:0d:26:2e:97:b4:bf:7f:55:de:45:af:e5:97:
e9:12:22:b3:35:c9:fa:83:62:3b:0c:f1:26:65:2e:
55:99:2c:79:ff:0e:6c:69:45:5d:1a:8c:b1:77:b1:
29:57:00:5d:6f:2a:0e:5e:24:e0:89:59:10:78:03:
a7:da:af:7b:d0:ab:36:fd:d6:31:53:30:3e:77:67:
e6:bb:20:67:d5:6b:a9:c0:0f:28:88:67:74:0a:28:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:F8:31:51:F2:DE:A9:27:03:7A:2F:B0:58:F0:D4:E3:A9:41:57
X509v3 Authority Key Identifier:
keyid:4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/C8j4MVHy3qknA3ovsFjw1OOpQVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.152.0/22
195.20.144.0/24
IPv6:
2a03:e100::/29
Signature Algorithm: sha256WithRSAEncryption
78:f2:38:90:3b:9a:cc:9e:a3:3b:97:bd:be:03:8d:97:2e:b4:
d5:44:d7:ef:b7:66:17:c1:11:ba:30:13:e6:f5:fd:61:85:3f:
ac:d0:72:ab:e3:3b:c2:53:aa:86:92:75:c5:2c:0d:b2:d6:51:
1f:de:9b:5e:e0:5d:e6:ca:0e:7a:62:0c:fa:c4:c4:88:7d:34:
2c:3f:a5:2b:31:4c:16:0a:d5:5d:54:d2:11:37:75:0b:40:3d:
ff:9e:90:3a:59:1d:29:71:d0:f0:48:65:73:0c:05:5c:4e:f3:
ee:d3:bc:fd:9a:8b:46:bc:48:1d:98:6c:e3:88:8c:ac:ef:7e:
c4:d5:76:8b:c1:50:35:95:39:bb:6f:3a:66:54:e2:73:c9:3b:
eb:d4:2f:4b:ab:8a:bc:e7:b3:be:44:db:23:80:de:14:03:81:
11:b8:57:1f:99:a9:13:bf:88:bd:5b:f4:63:b5:72:ab:70:a3:
d5:3a:f2:71:a5:12:9d:99:32:a3:7f:71:86:b9:53:3d:d0:7c:
0d:57:30:b8:d1:d2:bd:33:b6:cd:b0:7c:94:b0:1d:fc:e1:96:
c3:9c:8b:7b:d2:7f:9b:c7:de:69:93:c2:a2:1f:1d:f4:26:ee:
33:09:7b:20:99:35:17:93:a6:0a:4d:99:4e:b4:ec:c6:71:6d:
04:ce:ee:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:40 2024 by rpki-client on console-fra.rpki-client.org