Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/jZ4BHEBAoVNFuVPjIFfr6SFimss.roa
File: jZ4BHEBAoVNFuVPjIFfr6SFimss.roa (raw, json)
Hash identifier: V11nsTbnCnNLLsRNfBQ9IrT0QJwQ6I6DOJKRUe2tVSw=
Subject key identifier: 8D:9E:01:1C:40:40:A1:53:45:B9:53:E3:20:57:EB:E9:21:62:9A:CB
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 06BED976
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/jZ4BHEBAoVNFuVPjIFfr6SFimss.roa
Signing time: Sat 01 Jan 2022 11:03:14 +0000
ROA not before: Sat 01 Jan 2022 11:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136933
IP address blocks: 85.8.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113170806 (0x6bed976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 11:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d9e011c4040a15345b953e32057ebe921629acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:28:6d:96:14:bf:a0:6a:7e:e8:9c:ad:6f:
93:a4:3c:08:ab:d7:f6:f6:b9:12:89:00:dd:49:8e:
79:80:3a:3f:51:5b:83:f7:d6:e3:01:fd:1f:4d:d8:
a9:03:c9:bb:65:0a:22:ea:c3:7c:13:f5:f1:9b:88:
b8:31:42:bb:e8:57:59:82:31:c5:d2:08:c6:62:93:
48:13:78:22:59:ee:ea:3f:12:ab:a9:7a:cb:ac:02:
77:0f:ab:60:ca:a3:94:f4:80:b7:2b:63:2a:55:f8:
21:fa:72:7b:48:65:68:d1:a6:33:14:35:07:d4:08:
92:b3:b2:9e:05:c4:4f:f9:1c:23:95:26:aa:8b:dd:
38:af:ce:ab:4d:69:be:ce:0a:7b:cf:90:37:81:f8:
bb:24:ae:21:8a:4a:93:86:ba:c0:9c:d7:c2:17:d6:
82:e4:ed:d0:33:c1:7d:55:3a:7d:84:fd:c6:b6:6b:
b6:16:81:27:98:ba:55:8a:9b:3b:3f:cd:52:ba:da:
11:19:83:d6:71:ab:22:67:18:52:b6:d4:99:91:58:
45:f3:58:51:10:e9:31:11:d5:c4:84:05:94:09:32:
41:4a:98:b9:3e:d7:19:d0:6e:8e:71:01:93:52:4e:
1f:ac:ce:41:06:1c:5e:c3:fd:06:42:38:55:cd:87:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9E:01:1C:40:40:A1:53:45:B9:53:E3:20:57:EB:E9:21:62:9A:CB
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/jZ4BHEBAoVNFuVPjIFfr6SFimss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.182.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:34:a5:f2:e5:91:9d:0c:54:11:3a:b9:31:3a:dc:ae:cf:46:
fb:65:ea:40:88:e6:cc:29:59:79:fd:12:33:0f:ff:61:e3:a7:
92:7e:98:c7:65:19:e6:5d:d7:6f:b0:1d:6b:b6:c3:f1:82:10:
a3:b9:f7:81:b0:09:59:d0:c7:71:57:6e:a8:2a:b5:d3:ed:54:
8e:0a:d4:66:56:b4:9b:85:22:0b:bb:00:d5:5c:de:30:6a:d7:
0b:67:b0:5e:fd:99:f1:d4:f0:37:72:01:d7:49:50:79:75:1e:
d6:3b:56:5b:b2:cf:87:32:7f:41:c9:fe:ee:93:ab:a5:b3:c5:
ab:b1:19:ba:2c:94:78:05:37:16:0d:ca:43:bd:36:9d:ec:44:
4f:72:51:8f:ba:33:c3:6c:ea:a9:dd:19:2f:b4:05:eb:d3:4e:
b4:e3:55:26:26:4e:0a:c5:0a:b7:ba:ad:ad:2e:47:46:69:1a:
94:cc:9a:5f:3d:46:21:30:48:a0:4d:5b:4d:8e:51:ec:40:4e:
67:c7:8d:3d:7d:a8:0b:fe:9f:33:e3:a2:40:97:f2:c2:62:44:
fa:6b:15:1e:72:0b:9b:41:70:dc:c0:38:fe:5e:86:e6:b1:be:
61:57:f7:0e:88:ba:0c:32:a0:d7:61:17:6f:d7:a9:8d:b7:fe:
87:86:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:30 2025 by rpki-client