Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/8oRAlEbSyeJoIP1VdZQyTesswnA.roa
File: 8oRAlEbSyeJoIP1VdZQyTesswnA.roa (raw, json)
Hash identifier: nyT/o63Yjg0SX6n+9VM8OZtkuhJCtGb3w6bQv0/0NWA=
Subject key identifier: F2:84:40:94:46:D2:C9:E2:68:20:FD:55:75:94:32:4D:EB:2C:C2:70
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 01856F4B5DADD920D9C19738725E5848B57A
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/8oRAlEbSyeJoIP1VdZQyTesswnA.roa
Signing time: Sun 01 Jan 2023 21:44:48 +0000
ROA not before: Sun 01 Jan 2023 21:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 194.147.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:5d:ad:d9:20:d9:c1:97:38:72:5e:58:48:b5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Jan 1 21:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f284409446d2c9e26820fd557594324deb2cc270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:6b:d8:4e:c1:b1:8a:3b:13:13:23:73:e2:
cd:c5:c2:1d:4a:e3:a3:d1:b4:e4:85:3a:ed:fe:5a:
69:85:ae:75:1b:74:b3:c4:34:8a:18:dd:ed:19:0e:
3b:38:e2:7f:0b:3f:12:15:2a:67:b5:2c:e5:5a:30:
a2:67:3d:dc:d5:b5:ea:67:2b:6e:10:ed:be:9d:18:
0d:9b:63:70:9c:11:77:84:3d:6a:79:98:87:68:32:
46:ce:1a:dd:02:7d:50:9b:12:2a:a8:3b:1b:e4:ce:
96:d2:7c:f7:80:fb:cd:9a:1c:69:80:51:88:7e:4c:
4a:51:d1:61:15:8b:b4:18:06:b2:7e:46:f8:60:17:
cd:96:2b:ff:30:04:cc:cb:45:99:c6:cf:8a:a5:3a:
5a:e4:ff:c3:57:b6:cc:d6:f3:f1:8b:34:8b:24:f4:
b2:3e:50:8a:e4:db:b8:98:e2:48:7c:f0:f6:25:86:
7d:fb:85:1b:ae:d5:93:f8:e0:b7:19:f1:db:d7:f0:
0e:db:bd:9a:ee:e7:34:06:b8:ff:81:59:02:c7:6e:
43:e7:2a:6b:1e:27:dd:6b:98:63:85:8d:b3:d5:f7:
8b:23:ad:54:4c:2e:46:07:0c:e5:ac:9d:ce:e5:87:
5e:79:42:26:9e:9b:b7:64:f9:ed:a9:96:b2:37:92:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:84:40:94:46:D2:C9:E2:68:20:FD:55:75:94:32:4D:EB:2C:C2:70
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/8oRAlEbSyeJoIP1VdZQyTesswnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.164.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:eb:3c:71:7a:9f:96:82:b2:de:be:b0:97:55:36:1d:0f:1c:
54:fe:ec:51:78:a0:4a:87:75:d9:0e:92:b5:27:c6:b1:f6:d4:
8a:10:e5:0e:2e:34:9c:9d:a8:00:cf:f0:6d:d1:b6:4e:f7:7f:
a9:f7:9e:05:9d:b1:5c:56:95:05:f9:77:ed:30:4c:45:7b:ad:
82:45:86:07:63:30:c4:00:9f:82:0f:d3:26:f7:d0:fa:b8:07:
12:00:3d:94:55:81:8f:ba:27:ad:23:92:df:8d:e5:5d:2b:cf:
ce:a4:a2:d1:3e:e5:39:bb:eb:83:8d:84:b0:7f:2f:0b:51:66:
b8:bd:4f:6b:20:e3:b6:24:2f:13:fd:21:54:fb:c7:ee:38:c6:
0e:4b:d9:65:a9:6c:f0:4a:8c:a4:f7:e7:90:c0:d0:b6:1e:33:
bc:f6:07:08:9a:9c:07:23:e8:ee:5a:95:bb:37:5d:72:e0:2a:
f4:3c:94:e3:85:56:a9:f6:2b:d9:f5:2d:f0:e5:95:d4:19:db:
ce:5e:35:11:91:bd:2b:30:cf:81:7d:98:27:42:9d:1d:a9:b7:
0f:a3:2d:69:4b:85:5c:26:c0:64:2b:b8:b1:ed:5d:64:1a:9b:
b3:e7:ad:31:cd:ba:f1:82:99:a0:28:3f:4c:e8:e4:60:00:b1:
d2:c5:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:47 2025 by rpki-client