Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/8cjqncQXa5bSSleP4sajAqWtBV8.roa
File: 8cjqncQXa5bSSleP4sajAqWtBV8.roa (raw, json)
Hash identifier: ya1ucJABtu3AtomLLAP1PMMZCmUzDmL00nEXZ+O91o4=
Subject key identifier: F1:C8:EA:9D:C4:17:6B:96:D2:4A:57:8F:E2:C6:A3:02:A5:AD:05:5F
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 018C200C3AEE1617ABEB6E7B50516CEAD99B
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/8cjqncQXa5bSSleP4sajAqWtBV8.roa
Signing time: Thu 30 Nov 2023 11:45:21 +0000
ROA not before: Thu 30 Nov 2023 11:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17804
IP address blocks: 185.109.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:0c:3a:ee:16:17:ab:eb:6e:7b:50:51:6c:ea:d9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Nov 30 11:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1c8ea9dc4176b96d24a578fe2c6a302a5ad055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d8:b6:8c:5c:ca:98:99:46:f5:7b:17:9d:ec:
8d:f5:93:52:8a:3d:8a:cd:4d:f6:94:a5:ca:ad:1d:
91:25:2e:cb:b8:37:06:fd:80:b2:e3:18:c2:74:69:
c6:aa:2a:72:b5:2d:b9:51:9e:3f:b3:9f:f6:a1:7b:
10:88:74:d5:d4:85:99:cd:ca:2f:bc:5e:f3:71:61:
c6:48:38:12:07:c0:dc:7d:c7:88:e9:8b:76:a9:76:
e7:fd:d7:0a:5d:c0:92:49:88:fb:af:88:7f:a6:d5:
da:90:b2:ac:d0:86:82:a2:c6:bf:c1:36:44:72:72:
ae:4e:8f:82:48:11:40:d2:6b:37:61:44:b2:04:13:
70:ef:70:03:9e:53:af:91:15:71:38:05:5a:e7:3e:
dd:91:60:e5:bb:6e:47:1d:61:f9:04:56:be:59:75:
12:63:1c:f7:dd:9c:5e:fe:5f:90:9e:6a:56:f4:e5:
40:f9:6c:af:9f:99:d6:b5:3a:51:84:a2:c6:a9:4c:
8c:b0:c2:95:a4:0d:47:43:57:84:a1:d8:dc:c6:a4:
dc:8e:89:a3:8c:e7:e4:91:94:f2:65:8a:1b:03:c5:
0a:1a:4c:ca:fe:4a:25:ea:69:4c:38:08:bd:64:2c:
89:e0:76:92:ec:b4:be:73:74:71:f1:51:bd:a2:17:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:EA:9D:C4:17:6B:96:D2:4A:57:8F:E2:C6:A3:02:A5:AD:05:5F
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/8cjqncQXa5bSSleP4sajAqWtBV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.87.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8c:fb:3f:4e:54:32:0c:8d:57:67:ac:56:29:76:6d:0e:aa:
b9:f0:b8:dd:65:ec:a4:15:93:7b:3d:f0:9f:0e:de:16:7b:16:
8e:83:60:ae:1e:5e:2d:d2:1d:63:95:bf:d1:97:03:3b:44:b1:
f5:51:51:cd:ae:5a:a3:20:19:bc:26:b4:d7:10:1a:cb:62:37:
2a:cb:91:23:b9:c6:e2:1d:a5:54:f2:7e:c7:e5:f5:60:9b:43:
e8:89:52:74:b6:17:30:7c:37:a6:39:59:65:39:25:42:60:9e:
b5:6f:8e:ad:e9:ea:76:82:fa:bb:4d:7d:74:a8:8c:98:86:99:
5b:84:6d:9b:f2:7c:66:cd:df:50:15:a1:a4:98:f9:4e:58:7d:
29:40:5c:81:1c:70:e1:e3:47:88:06:44:20:02:9f:4c:dc:f5:
e8:64:67:f6:e3:09:f1:f5:27:03:92:f6:51:13:31:d4:8a:c1:
1d:1e:ff:3c:5f:dd:4d:0b:2e:a7:21:f0:ec:e4:d0:54:03:cb:
98:93:20:5a:a9:c9:fd:90:c6:b0:72:ff:82:53:92:fe:c5:18:
72:d6:98:2c:29:17:6f:94:a8:06:2b:76:8e:a9:6f:df:71:66:
d9:b2:26:90:70:b1:94:3e:5a:70:b6:1f:9d:3b:21:22:9e:13:
14:f1:64:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:49 2025 by rpki-client