Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/8CqR1lFjsJmGy1mzpEwxGqk6wJ4.roa
File: 8CqR1lFjsJmGy1mzpEwxGqk6wJ4.roa (raw, json)
Hash identifier: HNwm9OUfijeRnlBEiuoWiFEIj1ddpH/091v+lJw0AGk=
Subject key identifier: F0:2A:91:D6:51:63:B0:99:86:CB:59:B3:A4:4C:31:1A:A9:3A:C0:9E
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 0187EBC6C71A03AD9DC9FF048357D2C6A6B7
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/8CqR1lFjsJmGy1mzpEwxGqk6wJ4.roa
Signing time: Fri 05 May 2023 11:58:05 +0000
ROA not before: Fri 05 May 2023 11:58:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395743
IP address blocks: 185.101.12.0/24 maxlen: 24
185.101.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:eb:c6:c7:1a:03:ad:9d:c9:ff:04:83:57:d2:c6:a6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: May 5 11:58:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02a91d65163b09986cb59b3a44c311aa93ac09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cc:13:af:a1:e3:53:fc:b4:80:45:5c:98:5d:
87:d1:65:16:4a:e1:ad:60:ed:42:48:36:10:03:ea:
c4:7c:c9:09:05:2f:1e:83:fa:5c:70:38:b4:7d:ff:
97:3d:84:d6:e6:85:f6:f9:67:64:cd:e6:e1:ac:f9:
82:49:a6:f8:56:0e:c4:1f:bf:4d:be:2d:b1:5d:6a:
45:6c:fd:a0:58:c9:50:d5:6a:c0:43:14:0e:58:1b:
3e:98:dc:1c:30:3c:24:5f:05:18:1e:12:33:73:9c:
ce:23:fc:84:ec:e1:d5:ce:4c:c9:56:d9:9d:bf:5f:
3c:b2:33:77:14:7d:76:c3:cd:42:59:0e:69:10:5b:
4c:c8:28:e0:de:78:9c:2f:4e:72:c7:b1:8e:78:6a:
bf:c1:86:d0:8c:5f:99:8d:d5:01:7a:ca:bf:76:81:
ac:65:15:ce:ce:4d:6c:8f:51:b6:55:7c:75:ef:bc:
41:1d:f7:94:c9:7a:04:31:9d:f0:ef:f3:8c:dd:04:
13:eb:d3:a6:7a:cc:9f:10:34:ae:6d:c4:df:86:35:
11:b0:ee:34:86:79:70:9f:21:70:d6:f3:52:70:9a:
ee:4b:e3:6f:20:05:e6:3a:1b:eb:ea:14:9f:62:c6:
01:1b:1d:f7:66:15:ef:c6:12:4f:5f:a5:71:fa:e2:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2A:91:D6:51:63:B0:99:86:CB:59:B3:A4:4C:31:1A:A9:3A:C0:9E
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/8CqR1lFjsJmGy1mzpEwxGqk6wJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.12.0/23
Signature Algorithm: sha256WithRSAEncryption
70:28:7f:6c:3f:2a:96:4f:84:24:61:ef:49:38:90:b4:ad:7b:
02:e3:71:af:15:3e:62:96:04:df:fa:2c:51:f6:76:98:1f:86:
e4:86:2a:89:30:24:52:0e:8b:31:bd:20:f5:da:94:b2:08:c8:
2c:7c:5d:12:77:0d:20:9b:33:4b:f6:ae:3c:76:1e:72:5e:9e:
f3:f6:f5:e1:be:69:a6:a4:59:b0:2b:e5:3c:a2:f4:0a:f4:b0:
c5:21:dc:56:1c:b0:4b:07:a5:92:8d:25:e8:a7:df:47:c4:10:
f9:dd:f8:68:88:8d:c0:63:c3:f8:da:12:6a:0c:d1:3a:e0:bd:
22:46:10:cc:55:6e:bf:80:33:59:4a:12:ec:11:99:a3:f8:ac:
85:ec:f3:bb:a2:3c:af:71:97:f8:01:eb:81:c0:1c:0c:12:41:
8d:f4:4e:97:ee:6f:88:44:e7:05:4e:f6:5f:f4:c5:0f:5a:15:
60:f4:2a:f5:2c:f1:e8:48:ed:a4:6f:9d:2f:b6:b4:ae:9f:53:
38:06:b3:65:d3:a5:d9:66:6e:0b:b3:e0:a2:a3:a2:1d:f3:b4:
89:33:ec:8d:ac:87:9a:96:8b:4e:65:30:5e:fa:1e:ce:56:63:
3f:c1:ef:00:c5:59:3e:cd:83:22:8b:d3:e9:03:94:67:86:56:
d3:c5:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:22 2025 by rpki-client