Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/8gjCKTpKiJ5yMmArS5uT2qYYALU.roa
File: 8gjCKTpKiJ5yMmArS5uT2qYYALU.roa (raw, json)
Hash identifier: Vby3/Khmo/ck93x1qNICp1DvgVF26Q4Q/6NIPA86fIk=
Subject key identifier: F2:08:C2:29:3A:4A:88:9E:72:32:60:2B:4B:9B:93:DA:A6:18:00:B5
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 0A03D3AD
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/8gjCKTpKiJ5yMmArS5uT2qYYALU.roa
Signing time: Sat 01 Jan 2022 10:05:07 +0000
ROA not before: Sat 01 Jan 2022 10:05:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1213
IP address blocks: 149.153.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168022957 (0xa03d3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Jan 1 10:05:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f208c2293a4a889e7232602b4b9b93daa61800b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:e0:c0:ed:a1:63:76:20:4d:d2:0b:bb:29:
10:71:94:d7:bd:5a:11:ac:de:77:4b:49:67:dc:11:
e2:34:e8:e1:21:a4:12:7e:68:db:ad:b7:c7:d5:e5:
4f:9a:f6:fd:2b:0b:9b:1c:87:6a:ef:90:f9:3b:34:
ea:7a:d8:ec:39:77:09:9e:b7:e8:a6:42:54:7a:53:
27:74:46:93:2f:05:ae:e5:e1:ca:1b:d0:77:1d:13:
b2:07:73:b2:7c:e3:08:e4:aa:21:79:ef:cd:0d:12:
72:64:09:75:ce:fe:42:af:02:9a:9a:d2:ce:36:64:
8f:c3:b3:10:18:81:7a:f2:38:e0:79:65:3a:fe:de:
9a:a2:0a:05:0e:81:8f:8b:11:41:c3:a9:ac:ac:60:
68:cb:32:34:4a:1e:10:28:f0:d1:a0:80:87:85:52:
6d:88:5b:8c:78:8a:f7:8e:07:7e:a0:92:4a:83:41:
d5:2e:43:19:06:fe:38:fb:3d:53:5d:0b:95:20:c5:
93:a0:78:36:bc:28:30:4d:01:a2:47:56:f9:65:fd:
21:df:6a:c6:71:06:a3:91:ba:bd:c2:8e:5d:a4:61:
83:a8:27:e8:00:2c:cc:af:73:d0:61:9e:8e:d7:d1:
39:76:a3:1b:54:49:7f:7c:45:c7:ba:54:91:9b:aa:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:C2:29:3A:4A:88:9E:72:32:60:2B:4B:9B:93:DA:A6:18:00:B5
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/8gjCKTpKiJ5yMmArS5uT2qYYALU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:f1:4b:f5:e2:fa:a9:f5:c8:f8:e1:73:df:b3:7d:c5:e0:c9:
6e:1b:23:ab:05:75:ec:6d:8c:fb:1a:b7:5f:87:74:c7:11:e9:
76:63:88:48:86:26:ca:be:95:b5:c6:24:c9:be:9d:3e:e9:b5:
53:5f:a4:67:64:5c:b6:e9:c7:e8:f2:f7:dc:d1:d2:5e:39:6e:
d1:7e:9d:f7:ce:e4:c2:bb:4f:74:b5:29:13:9b:27:7b:2f:f5:
7f:6b:f5:83:66:09:0f:0f:1e:7e:48:ff:47:4b:64:90:a7:8b:
db:88:a3:1f:d1:14:dd:d7:d1:19:78:a3:b0:be:d2:08:68:fe:
06:8e:0f:b7:2c:d1:6f:58:32:ba:af:21:85:0b:03:36:88:b3:
65:5b:f0:98:52:f8:c5:e2:21:62:2c:eb:ea:c5:80:8d:95:61:
1e:17:1b:e9:d9:c8:cd:f4:64:e5:4e:79:1c:09:69:3b:0d:37:
79:04:3a:c8:8f:ff:5b:ad:5d:49:5f:48:0d:d6:c6:78:78:1d:
32:2a:75:f4:f1:f3:9f:19:31:2a:59:05:cd:5d:39:54:6a:41:
18:27:5a:7c:63:1b:2c:27:48:cb:52:d6:47:73:c7:16:9a:91:
8a:a5:62:19:70:e2:54:da:74:b2:89:04:33:9c:7e:3d:45:ce:
8f:44:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:10 2025 by rpki-client