Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/8AgfCDE2r8mqechIUfRKikUCNy4.roa
File: 8AgfCDE2r8mqechIUfRKikUCNy4.roa (raw, json)
Hash identifier: gsWXugq26yee1+ESep4o8ugCxcc3f5PvzWj3NFMa6d0=
Subject key identifier: F0:08:1F:08:31:36:AF:C9:AA:79:C8:48:51:F4:4A:8A:45:02:37:2E
Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial: 0752B08D
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/8AgfCDE2r8mqechIUfRKikUCNy4.roa
Signing time: Sat 01 Jan 2022 05:00:51 +0000
ROA not before: Sat 01 Jan 2022 05:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198024
IP address blocks: 185.191.192.0/22 maxlen: 22
2a0a:1c40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122859661 (0x752b08d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Validity
Not Before: Jan 1 05:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0081f083136afc9aa79c84851f44a8a4502372e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:72:e5:66:e0:3d:7f:0a:7e:76:bc:3e:9b:
62:fd:15:44:45:33:27:8d:bb:80:a1:dc:cc:61:af:
cf:d8:ff:ea:0e:c4:8e:45:68:a0:1a:9b:71:e8:c2:
01:25:d3:71:fa:c8:a8:5c:80:9f:3e:a4:9c:37:95:
26:38:98:79:92:a5:a7:7a:d8:06:87:c5:35:0f:74:
c0:4c:c9:7c:45:aa:28:de:78:1a:9c:07:c8:a4:b1:
db:4f:80:c1:b4:53:d5:90:f7:67:96:c9:e5:32:f6:
94:d1:0f:f8:7c:05:1f:d2:38:9f:cc:3a:a4:c1:a1:
48:35:98:5c:38:f0:a5:b4:bb:d9:6d:6f:06:6a:e9:
d9:71:92:11:72:48:45:8e:d4:64:61:56:cc:f5:95:
76:bf:bc:aa:ae:c7:97:47:d4:0d:90:d5:c1:6f:9d:
43:ce:af:9f:75:14:40:e2:96:5c:2b:eb:ab:05:fb:
67:85:da:3c:e4:9c:cc:41:72:0a:78:53:4b:de:93:
2c:cf:3b:34:35:72:bd:87:37:5c:74:be:7a:94:93:
fa:10:2e:cd:8a:31:21:67:74:3a:3c:bb:77:4d:f7:
62:0d:97:6a:1b:ba:47:fc:e3:99:dd:c4:14:fa:94:
5f:47:15:d5:27:ee:4a:1d:79:58:58:cf:fa:4c:b5:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:08:1F:08:31:36:AF:C9:AA:79:C8:48:51:F4:4A:8A:45:02:37:2E
X509v3 Authority Key Identifier:
keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/8AgfCDE2r8mqechIUfRKikUCNy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.192.0/22
IPv6:
2a0a:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
79:7f:ef:ba:c4:8d:17:52:ec:6c:51:00:69:87:56:fd:7d:d3:
ba:7b:b7:36:6c:57:15:ac:8b:7e:53:3e:ea:74:81:41:8e:36:
ec:47:9b:65:3e:fa:41:dc:a0:aa:90:b1:f5:7e:51:7f:39:96:
d8:a8:0f:b7:c8:19:3c:73:13:e3:92:31:df:35:34:45:5d:27:
66:11:34:57:fe:3d:a0:97:c5:9c:5b:d2:15:94:fe:dd:ff:27:
49:c8:06:91:b7:3f:d7:6c:89:d0:02:c9:37:88:cf:ee:91:4e:
7d:8f:16:35:5d:79:fb:71:d7:55:ff:c9:b3:4e:e3:0c:71:3f:
11:e4:ed:30:3f:bc:14:19:a9:37:d0:ef:7e:41:89:43:30:fd:
34:94:43:87:ae:a7:f5:22:c5:d4:81:66:18:a1:86:54:f4:f6:
97:4e:3d:2e:4e:06:f5:c6:0e:11:f0:64:c9:ef:6f:9a:e0:81:
ad:c8:3b:1a:ed:ac:ce:5c:56:ce:10:89:97:af:26:84:af:d2:
1a:a3:ff:f7:6b:4c:95:de:04:97:d3:5b:da:47:15:50:c1:e3:
10:43:98:a7:82:04:3b:35:1d:c5:75:7c:1a:66:4e:17:34:30:
72:d8:d7:d2:1b:48:7c:ae:5c:a4:44:ba:59:e9:bd:d6:d6:47:
01:1e:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:59 2025 by rpki-client