Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/8d-t50t_fiOIhuR_rO5vgvYKKF4.roa
File: 8d-t50t_fiOIhuR_rO5vgvYKKF4.roa (raw, json)
Hash identifier: egrTYk6oVoVLYvdryZd79NccwA3NW1zAD7ZgcdQuxoE=
Subject key identifier: F1:DF:AD:E7:4B:7F:7E:23:88:86:E4:7F:AC:EE:6F:82:F6:0A:28:5E
Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial: 01857246A6D876047E57C8F5681629F4375E
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/8d-t50t_fiOIhuR_rO5vgvYKKF4.roa
Signing time: Mon 02 Jan 2023 11:38:30 +0000
ROA not before: Mon 02 Jan 2023 11:38:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41530
IP address blocks: 195.138.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:a6:d8:76:04:7e:57:c8:f5:68:16:29:f4:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
Validity
Not Before: Jan 2 11:38:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1dfade74b7f7e238886e47facee6f82f60a285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:e4:85:74:c3:bf:d7:93:21:77:19:39:2f:
9b:23:0e:90:56:ce:5f:b1:dd:cb:86:ad:fd:35:40:
21:90:63:21:5b:9f:fb:0d:c3:fe:fc:ac:8f:d5:00:
a4:e5:e4:2e:fa:4c:1e:de:8c:d8:f1:16:32:c0:51:
b4:09:8e:40:d8:de:8b:1e:b2:3c:fe:e6:bd:17:9f:
47:b1:60:f1:c9:80:ca:77:0b:d9:04:4e:c4:34:c4:
34:72:ef:ae:4a:8d:8a:dd:f4:4b:c6:ae:38:ac:d7:
b1:04:09:94:d1:fc:51:de:56:57:22:c5:b3:05:f5:
ee:83:59:1d:c9:be:39:23:43:0e:f6:ff:85:11:fd:
35:fe:77:9c:76:a5:e0:ea:ea:b0:a5:a0:f9:65:9e:
5d:0f:28:07:4c:a9:2e:1e:d8:60:92:64:d6:27:dd:
8d:8e:04:d3:96:84:bf:64:76:98:a7:ce:1a:ad:6e:
2a:0c:63:ce:a5:23:85:ca:26:af:68:a7:bc:4c:b0:
49:47:ed:f1:87:0f:dc:22:bd:b2:6c:4a:e6:ae:00:
b9:54:96:8f:86:d0:dc:0d:d7:0e:d2:87:bd:2a:d1:
53:32:b3:f6:54:41:4b:9d:ef:d4:ba:63:35:cd:be:
cf:82:a6:22:8b:67:ec:33:d6:2a:7e:d6:21:de:33:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DF:AD:E7:4B:7F:7E:23:88:86:E4:7F:AC:EE:6F:82:F6:0A:28:5E
X509v3 Authority Key Identifier:
keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/8d-t50t_fiOIhuR_rO5vgvYKKF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.192.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:26:c6:8d:4f:46:ed:36:77:b3:32:34:95:eb:18:bf:58:8a:
a3:76:d2:2a:5e:04:73:7f:09:ea:20:bf:1b:1d:5b:28:ee:04:
d5:46:e8:4a:77:b6:bf:e0:07:f4:13:bd:65:2f:53:0b:b0:17:
47:fc:dc:65:37:32:2a:88:5f:99:6c:14:d9:81:b9:37:aa:2b:
47:b9:f7:2d:f1:9c:e6:d5:be:95:3e:a9:eb:f1:5a:eb:5e:b7:
e0:13:7f:4f:6b:f5:ea:68:0b:7e:ca:5c:19:0b:80:8a:6c:3a:
00:7e:04:6c:9b:34:53:32:a8:9f:53:3f:d4:33:60:c4:db:c0:
e8:17:ab:74:de:09:c5:be:ab:4b:f2:5d:66:2e:f6:71:22:85:
96:24:67:22:67:12:25:3d:84:0e:a4:79:a7:75:20:a9:a4:c8:
63:61:78:99:b5:e5:cb:a1:b8:65:4a:ab:6b:47:42:e4:f8:5e:
77:bf:71:40:da:bf:8e:98:bc:12:eb:80:e9:1c:14:d3:b8:9e:
a7:da:5d:80:a8:25:2b:d4:dc:59:46:69:0b:d7:d7:2d:b6:9e:
1b:f8:24:64:40:22:08:21:52:3b:81:1c:fb:3c:43:02:5f:70:
35:d3:7e:bb:90:65:a6:63:41:49:d1:41:76:ea:6d:e9:f5:e8:
e7:8a:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:17 2025 by rpki-client