Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/8NKmvG8hHDH_oLT5evrS1ZNynig.roa
File: 8NKmvG8hHDH_oLT5evrS1ZNynig.roa (raw, json)
Hash identifier: 8P16G6BGIF+6XlBF4V+D6oMTl1qUiOzCtIUmG39FQ5s=
Subject key identifier: F0:D2:A6:BC:6F:21:1C:31:FF:A0:B4:F9:7A:FA:D2:D5:93:72:9E:28
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 0183FA7F054085F01E040CF3D452F95F745E
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/8NKmvG8hHDH_oLT5evrS1ZNynig.roa
Signing time: Fri 21 Oct 2022 12:22:51 +0000
ROA not before: Fri 21 Oct 2022 12:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 195.189.245.0/24 maxlen: 24
185.248.28.0/22 maxlen: 24
2a0d:dd80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:7f:05:40:85:f0:1e:04:0c:f3:d4:52:f9:5f:74:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Oct 21 12:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0d2a6bc6f211c31ffa0b4f97afad2d593729e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:96:7d:f5:a4:8a:f1:c0:cb:03:51:35:6f:
e5:e2:68:4c:84:cf:10:9c:aa:92:78:6f:ff:50:2f:
21:a2:7b:a6:d8:d4:93:b2:30:3a:27:c8:66:37:f0:
39:7d:a5:ec:25:e5:2e:69:e5:87:1c:0e:cc:ef:2d:
cc:51:c9:69:c2:11:e9:95:7f:8c:7a:53:c4:d2:68:
75:12:82:52:98:c1:34:72:18:41:ea:24:39:14:35:
e7:c6:19:51:09:d4:c1:ec:4e:72:13:2b:d2:93:9a:
17:70:25:d0:95:e5:34:87:7e:6c:01:b3:61:76:40:
95:e0:62:8e:47:ee:51:44:bd:ad:94:25:ca:c9:91:
8a:82:72:72:79:53:e2:cc:ee:82:c2:32:4a:5e:34:
44:c1:d1:b8:b0:2f:75:09:e2:a4:38:90:1b:07:9d:
f6:00:aa:20:3b:a2:54:8e:5c:a9:ef:a8:ac:ac:d7:
4a:ef:49:4a:30:97:3c:7e:6f:d9:77:46:d6:08:87:
e5:17:9a:50:64:94:59:d9:14:31:52:a9:f7:00:2d:
4b:08:d3:fe:94:18:68:a5:ff:f9:f9:b6:67:8d:46:
b3:d5:f8:3b:24:0a:49:05:fa:99:29:ea:1a:21:84:
79:9f:82:ca:69:b4:7f:14:09:6b:7c:81:d5:00:c4:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D2:A6:BC:6F:21:1C:31:FF:A0:B4:F9:7A:FA:D2:D5:93:72:9E:28
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/8NKmvG8hHDH_oLT5evrS1ZNynig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.28.0/22
195.189.245.0/24
IPv6:
2a0d:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
00:01:88:9a:38:90:7f:a2:59:8a:ce:93:95:4f:75:80:ba:3a:
76:19:c4:cd:4d:65:8b:5e:29:2d:34:88:8a:55:ec:d6:3a:b4:
d0:4c:78:e2:e4:46:b1:a0:1c:08:95:b5:70:aa:93:17:fb:66:
27:bb:b8:d8:90:77:37:32:0c:6f:d1:db:28:16:e0:00:cc:ce:
25:62:48:2e:15:0d:ac:dc:2b:1c:65:ff:e1:d8:72:47:e7:d1:
e9:17:8e:fa:04:c6:14:95:9d:ca:4d:7f:be:0b:78:db:7d:62:
03:e6:52:49:c3:f2:7f:6e:c4:10:ac:16:72:dc:62:b8:cc:86:
83:14:c8:75:2d:e4:b9:1f:10:47:b4:33:40:e6:83:7a:85:81:
5a:34:e1:80:7c:4d:e3:6d:a9:aa:7d:21:9d:28:0a:f9:22:ee:
46:3a:ec:19:32:26:35:08:3f:90:72:42:15:47:29:fc:65:6d:
7c:c9:8b:73:0a:49:81:69:e4:2d:fe:ca:6c:5d:a7:c6:c0:03:
52:3b:7e:ee:6d:91:44:d9:3f:07:87:e1:0a:28:27:c9:60:b8:
9d:30:24:7c:f1:fa:02:f6:b1:a9:1c:40:cd:ca:58:f0:19:88:
0c:35:58:8e:9c:48:9f:a8:4c:b8:ce:50:61:4f:0a:10:cb:a0:
51:71:87:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:49 2023 by rpki-client on console-ams.rpki-client.org