Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/8jiISliG3HKqZihLQTkSEnNexbA.roa
File: 8jiISliG3HKqZihLQTkSEnNexbA.roa (raw, json)
Hash identifier: 98qaYxvPPQIQ4DoUqVpHo7iSLjbIKTW86fKp5TP3PQo=
Subject key identifier: F2:38:88:4A:58:86:DC:72:AA:66:28:4B:41:39:12:12:73:5E:C5:B0
Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial: 03A9FB4B
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/8jiISliG3HKqZihLQTkSEnNexbA.roa
Signing time: Sat 01 Jan 2022 10:56:04 +0000
ROA not before: Sat 01 Jan 2022 10:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41350
IP address blocks: 85.223.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61471563 (0x3a9fb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Validity
Not Before: Jan 1 10:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f238884a5886dc72aa66284b41391212735ec5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:49:ee:3b:fe:a9:f1:c9:19:f7:b7:98:f4:
42:c6:cd:60:4b:80:49:0d:05:43:61:63:c1:5f:85:
4f:29:b1:1f:66:a6:fb:bd:3a:5a:9b:02:04:15:70:
47:0c:ca:f0:6a:c2:ab:c9:60:42:8e:ca:96:30:e1:
18:71:73:a9:93:eb:14:83:48:de:8f:ac:52:67:4f:
ef:36:82:99:79:2b:61:56:9f:34:ef:76:95:1f:a1:
fd:e5:72:4b:4a:94:6a:24:1d:7d:fb:75:17:89:2f:
c6:be:6b:8d:47:f2:a5:32:4a:2d:b2:96:54:85:f9:
fd:3d:b4:9e:3e:c7:44:01:71:73:b6:23:57:f5:ca:
6d:f3:f0:d4:bd:67:b5:3a:e8:2c:c5:fd:0b:e9:54:
6f:5c:3f:4b:6b:c5:0c:55:fb:20:bc:50:39:08:6e:
9e:37:93:90:6c:1a:b7:30:db:41:91:2a:00:54:6f:
c4:49:69:f4:f2:1c:7b:9e:69:1b:ff:24:50:2f:b2:
7c:ce:01:5a:d0:30:d1:a6:b7:4e:eb:2d:29:92:c2:
cc:61:2d:39:0a:10:e6:6a:b2:ce:ab:89:4b:4a:3b:
77:bf:8b:90:70:43:2c:2c:75:b3:0c:77:b9:3b:e4:
b1:43:7c:5e:2e:01:1c:88:28:3e:e4:2a:7f:85:61:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:38:88:4A:58:86:DC:72:AA:66:28:4B:41:39:12:12:73:5E:C5:B0
X509v3 Authority Key Identifier:
keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/8jiISliG3HKqZihLQTkSEnNexbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.223.143.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f2:dc:71:2d:6e:1f:02:b0:c3:c2:87:0e:b7:68:a4:85:7c:
e1:b8:11:f4:e1:8e:72:d8:f5:f7:b7:55:55:2f:23:e9:67:22:
9d:b2:9b:3a:40:b5:d3:61:3a:75:96:be:c8:c6:7f:65:8a:6a:
16:e4:45:46:15:30:20:9b:3b:69:98:c2:86:59:eb:14:49:1c:
0e:21:cb:67:82:6d:2f:f9:96:a8:9d:49:7a:57:4a:a3:a4:e1:
a8:84:31:c9:13:8c:7e:9c:93:19:d9:58:11:7e:55:bc:54:44:
0d:9a:30:e1:28:7c:0d:f9:7c:d1:a4:09:26:d8:ab:22:70:5e:
77:e7:ad:2a:a2:9f:bd:5f:59:fb:1b:05:76:6f:4a:04:d5:dc:
e7:b5:6f:67:69:b6:ac:e7:85:d7:f1:2f:4f:90:46:c1:5f:d5:
83:30:1d:fb:bd:31:4e:18:20:40:41:2b:59:aa:ca:55:a6:75:
35:a3:fe:11:22:66:09:51:f2:df:44:d1:73:60:3f:35:2c:69:
d2:b3:30:e6:ad:01:60:84:31:7f:57:e5:0e:63:3f:28:ac:7b:
65:50:7a:4f:9e:41:16:b3:8b:ad:96:ba:35:ae:87:95:63:b4:
3b:81:d4:74:ca:6f:e1:38:60:08:ee:d1:63:ac:71:95:55:de:
58:e2:d6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:53 2025 by rpki-client