Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/j8-LW-vzIimYxaUBH9hhHMgu4Jk.roa
File: j8-LW-vzIimYxaUBH9hhHMgu4Jk.roa (raw, json)
Hash identifier: QCmHSTwW+Nx0EUODO9sCh+nw+Q4ytAMk5ib+YlwqFhI=
Subject key identifier: 8F:CF:8B:5B:EB:F3:22:29:98:C5:A5:01:1F:D8:61:1C:C8:2E:E0:99
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 0772C13D
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/j8-LW-vzIimYxaUBH9hhHMgu4Jk.roa
Signing time: Sat 01 Jan 2022 09:55:34 +0000
ROA not before: Sat 01 Jan 2022 09:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 89.251.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124961085 (0x772c13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jan 1 09:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fcf8b5bebf3222998c5a5011fd8611cc82ee099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:8d:8d:5e:0a:71:27:36:f2:5d:cd:ab:41:
13:64:08:5b:ca:25:0e:82:96:a4:4b:89:eb:25:76:
5d:72:1a:2f:4a:a5:c0:d6:f8:19:43:65:41:1a:10:
87:38:24:96:eb:a8:5e:3a:5f:8d:08:c4:59:71:a3:
c2:b2:0a:e7:b8:d3:ac:3a:c0:fc:1d:96:75:65:f7:
2d:94:6f:9b:92:ba:54:ce:42:6c:8c:fc:24:5c:6d:
5f:bf:2f:92:72:62:b0:b3:55:b0:33:87:90:cc:ec:
ce:cb:57:43:46:e2:6c:a8:9e:6b:f2:b9:26:3f:c6:
ff:22:dd:10:1e:b4:aa:da:f1:2d:fe:11:da:85:a4:
e9:98:51:67:c5:bd:2c:b6:ac:42:c4:c7:dd:75:f9:
ba:3f:cb:d8:c7:ac:5e:5b:68:e3:20:c9:8c:33:37:
79:65:06:3e:cf:5e:4f:c3:83:2e:76:06:56:ee:5f:
c4:cd:db:c8:fa:b3:eb:fc:c7:5f:a0:d4:89:bd:d6:
4d:ab:1f:83:32:97:6d:2f:75:91:92:f5:3e:af:db:
ec:e8:e3:26:be:6f:ff:d4:2a:88:12:d1:16:63:44:
f3:d6:53:6f:c9:c7:6d:ad:78:38:0c:55:dd:9c:4a:
06:ba:00:56:c0:dc:a5:9a:c2:ad:55:42:63:1d:0f:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CF:8B:5B:EB:F3:22:29:98:C5:A5:01:1F:D8:61:1C:C8:2E:E0:99
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/j8-LW-vzIimYxaUBH9hhHMgu4Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.12.0/22
Signature Algorithm: sha256WithRSAEncryption
27:84:0b:7c:8a:9b:8f:ba:37:8e:28:2a:e7:09:3f:dc:c2:a3:
92:f7:2c:46:1d:18:eb:b0:b5:2e:e7:6c:dd:89:40:b7:67:27:
02:22:89:be:5f:4f:3a:36:fe:63:ac:0b:6b:e9:be:34:0a:79:
8d:33:91:e3:67:7d:09:10:54:29:e4:fa:aa:94:3f:3f:23:a6:
37:15:fa:b2:13:f0:ac:20:63:f8:c4:48:a0:2e:24:c7:4b:e4:
9a:79:f2:d2:a7:6c:27:0a:46:9b:8b:f2:81:71:64:59:c9:86:
ed:77:dd:bc:f3:c8:f5:e6:2e:91:dc:9f:2d:e9:95:93:f1:8d:
8d:49:b9:f5:2b:62:a3:41:5b:22:5b:68:8a:33:96:4c:5c:9e:
3f:5a:2f:a0:75:b7:f3:b9:b5:a2:5e:3a:7d:a2:ea:d3:3c:77:
1d:25:34:0e:a2:d0:a6:c7:67:45:20:93:37:79:fe:5a:4f:b4:
d8:97:54:b6:cd:58:8e:3d:24:9a:fd:b7:c6:6b:71:1e:4b:1b:
50:5d:e3:d5:c1:52:bd:a6:da:94:91:34:12:14:fc:e3:2e:f1:
4f:03:ee:a4:59:98:63:03:fe:af:c2:66:59:42:72:c8:93:7c:
52:a8:de:49:cb:69:96:23:2d:c6:1d:dd:77:e6:e3:7f:51:35:
6e:29:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:23 2025 by rpki-client