Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/O9pVmig9EaR4ovVUKKUVIrtHOTE.roa
File: O9pVmig9EaR4ovVUKKUVIrtHOTE.roa (raw, json)
Hash identifier: K7dxogWMZiBmmI0DJo/aljsjVqs67NYR0JzTmkkSBUk=
Subject key identifier: 3B:DA:55:9A:28:3D:11:A4:78:A2:F5:54:28:A5:15:22:BB:47:39:31
Certificate issuer: /CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Certificate serial: 04FCC30C
Authority key identifier: BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/O9pVmig9EaR4ovVUKKUVIrtHOTE.roa
Signing time: Sat 01 Jan 2022 14:03:51 +0000
ROA not before: Sat 01 Jan 2022 14:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202105
IP address blocks: 185.217.11.0/24 maxlen: 24
185.217.8.0/24 maxlen: 24
185.217.9.0/24 maxlen: 24
185.217.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83673868 (0x4fcc30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf1b69c82f781a817ce102117178cdb7fb263af
Validity
Not Before: Jan 1 14:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bda559a283d11a478a2f55428a51522bb473931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:00:79:58:7e:7c:de:ac:74:82:80:4e:2e:
09:62:e0:32:d8:5a:8c:70:1d:f4:ef:00:17:78:58:
28:44:5a:94:33:c7:d5:22:0e:d1:f6:fe:87:41:87:
19:d8:6d:2f:54:57:d9:fc:a0:2a:b3:c5:25:69:06:
a0:db:4c:c0:29:1b:f0:fd:a2:f3:7d:a6:ae:2e:72:
2c:d2:d4:67:1c:96:f0:0e:ff:3d:b6:a3:c0:e1:f0:
f5:95:99:43:bf:cb:dd:6f:ba:b8:00:3c:d4:24:aa:
96:66:c0:26:14:bb:85:47:d5:1a:04:39:32:82:a9:
fa:b3:70:8b:97:9d:af:99:39:7d:41:60:86:bb:7e:
8b:7b:23:71:6d:88:52:f4:25:88:b9:38:9b:f9:c0:
a5:48:68:71:e9:ce:00:7d:fa:aa:a4:9a:66:6a:3e:
62:d0:c7:07:30:bd:9f:c2:0d:a9:58:9c:50:75:74:
9f:21:93:39:01:7d:df:46:dd:79:72:6e:ee:fc:61:
1e:47:04:5c:1a:25:5b:fd:82:f4:b1:33:b7:76:23:
48:7c:b0:ac:eb:f9:4f:d4:e9:97:18:ac:61:15:e7:
7d:92:1b:af:c9:7b:c4:ec:39:9c:25:e4:d9:90:c9:
1a:a5:cd:fa:2d:9f:67:3b:df:39:f1:11:fd:dd:46:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:55:9A:28:3D:11:A4:78:A2:F5:54:28:A5:15:22:BB:47:39:31
X509v3 Authority Key Identifier:
keyid:BD:F1:B6:9C:82:F7:81:A8:17:CE:10:21:17:17:8C:DB:7F:B2:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfG2nIL3gagXzhAhFxeM23-yY68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/O9pVmig9EaR4ovVUKKUVIrtHOTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b95e83-282b-4deb-aff2-a4ddec7a3b9e/1/vfG2nIL3gagXzhAhFxeM23-yY68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:44:8c:8b:68:38:19:df:31:53:b4:88:49:0b:e7:ab:76:5f:
48:cd:4e:19:33:76:b3:03:06:9e:5d:48:be:60:56:be:da:96:
d4:0d:8e:64:4d:17:29:c4:c1:5f:cf:8f:e5:8f:05:92:df:c8:
ca:30:f8:aa:cc:13:e6:99:bc:d7:5e:70:9b:44:07:9e:b7:d8:
92:60:f4:56:1e:a0:3e:5a:a4:ce:38:27:a2:3e:5a:06:5c:c5:
9a:05:12:d4:18:ae:b1:ef:1d:c7:f9:b9:e2:b0:8a:49:12:08:
29:8b:5c:07:dd:77:9a:87:2f:07:fb:5d:17:d6:37:e9:b5:f3:
75:3d:92:af:d1:b6:10:72:0d:c2:d5:ff:78:60:0f:c5:d7:5e:
0d:33:74:f9:3e:d9:0d:b3:59:07:a9:49:20:7c:b7:bd:0f:86:
31:f2:b1:fa:5a:2a:dc:44:60:04:d2:b0:19:26:93:4d:c5:7e:
63:73:ab:23:99:b8:50:14:6a:2e:70:9a:47:99:55:e2:5c:f7:
bc:84:7e:52:43:5d:a3:2f:8d:a9:f7:dc:07:75:38:d5:e5:d3:
df:28:21:c5:12:0b:44:e3:98:9f:1f:e7:8c:cb:b3:a5:a7:c1:
5f:61:eb:a8:a2:61:34:9b:67:d5:b8:4a:6f:40:06:16:73:07:
d8:4d:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:55 2025 by rpki-client