Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/j8XdsCTf7AkXWwzMvr4S90J5CaI.roa
File: j8XdsCTf7AkXWwzMvr4S90J5CaI.roa (raw, json)
Hash identifier: xyp3UdCcL0KuA/Mev+6J0eXiEwEaGyA74/lq4PdVx9M=
Subject key identifier: 8F:C5:DD:B0:24:DF:EC:09:17:5B:0C:CC:BE:BE:12:F7:42:79:09:A2
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018C4111CD01828D09B1ECF33A014BABD080
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/j8XdsCTf7AkXWwzMvr4S90J5CaI.roa
Signing time: Wed 06 Dec 2023 21:38:54 +0000
ROA not before: Wed 06 Dec 2023 21:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
198.145.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:11:cd:01:82:8d:09:b1:ec:f3:3a:01:4b:ab:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Dec 6 21:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fc5ddb024dfec09175b0cccbebe12f7427909a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:d2:b0:dd:0f:87:53:84:20:00:2a:e6:b0:
e3:15:0b:83:56:b4:de:8c:0e:06:9a:cd:a1:1f:c5:
d6:02:a4:96:61:4f:6d:87:56:c3:fe:af:f6:e0:b4:
2e:78:22:b7:c9:92:7f:39:39:da:68:00:94:b5:fe:
18:dd:00:ac:29:34:b3:ff:f2:93:0e:6c:00:55:c3:
d5:1e:cf:e5:ee:5d:59:55:f5:84:f1:88:3a:51:d3:
cf:14:f1:93:9f:cf:ec:92:d4:86:c4:bf:cd:f5:f1:
3f:70:8e:7a:d6:d0:17:3e:43:9b:29:8b:02:31:f5:
5f:a9:0e:7e:4d:a5:64:39:b2:9a:5b:36:e4:f2:2c:
34:41:4e:7a:66:31:83:a2:b3:1d:de:ea:69:bf:0a:
e4:35:1d:7d:3c:d4:fa:87:c7:a0:9a:02:fd:47:03:
4a:83:71:20:5c:9e:ab:c8:25:b6:8a:e3:28:d9:4e:
53:61:9b:8d:e9:6f:b7:83:dd:8f:d7:de:46:68:b7:
d0:4e:30:5d:6b:83:a4:5a:cc:00:17:44:b9:0e:13:
15:63:e1:32:d1:ce:99:a5:f3:6e:b0:5b:ed:ed:a3:
0f:d5:46:88:d4:21:46:b2:58:71:c3:c4:f7:76:e5:
43:f6:f4:bf:23:be:ce:64:11:cb:0e:ed:56:1d:8e:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C5:DD:B0:24:DF:EC:09:17:5B:0C:CC:BE:BE:12:F7:42:79:09:A2
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/j8XdsCTf7AkXWwzMvr4S90J5CaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.200.0/23
79.139.64.0/23
176.222.48.0/22
198.145.112.0/22
Signature Algorithm: sha256WithRSAEncryption
19:3c:e2:b4:c4:a8:0e:68:d6:05:a2:52:de:d1:1b:54:aa:e7:
f0:b8:08:52:48:10:9e:4f:02:d3:b1:f1:0e:f5:fd:b6:00:42:
61:cd:e2:03:75:a9:f8:24:57:72:a7:9d:30:2b:8f:91:43:01:
b9:3f:53:b5:67:69:43:df:14:73:3d:e4:57:9b:de:aa:ab:51:
ef:e9:39:09:63:93:88:b2:5e:c8:8c:6b:95:9c:b5:ec:82:78:
d5:2f:e7:20:9d:19:53:82:68:b8:5e:5f:3c:4c:b6:f8:21:b4:
08:1e:21:a2:c6:3d:a8:55:98:99:8a:8c:2b:3d:e5:ad:ef:ac:
4d:0c:71:c7:66:5b:87:83:84:be:28:61:7c:61:a4:e9:9e:27:
2e:84:fc:97:90:66:73:f3:99:da:96:4f:af:7b:c5:74:fa:71:
56:e4:3e:d8:2c:d0:69:51:9e:00:f1:36:da:5c:97:7b:30:da:
e3:4e:cc:b5:9a:eb:bc:a7:9a:60:72:cf:82:2f:f2:bf:06:ba:
f2:c5:7d:24:0a:da:8d:fe:5e:b0:c6:e8:fd:26:85:19:8c:5b:
14:5c:17:d9:10:41:a1:be:ae:59:f4:cb:f6:8d:6c:c0:5e:09:
5c:61:29:7e:3f:8d:83:c1:e3:dc:18:8c:42:93:b6:22:56:1a:
13:6c:49:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:57 2025 by rpki-client