Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/8Ym7dLA32EHZkXCxiSajtmWPoKM.roa
File: 8Ym7dLA32EHZkXCxiSajtmWPoKM.roa (raw, json)
Hash identifier: 6AB97XpdyTwH91vhRN80rF5M1EZ8jcL9rkXvzyhG0gQ=
Subject key identifier: F1:89:BB:74:B0:37:D8:41:D9:91:70:B1:89:26:A3:B6:65:8F:A0:A3
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 018B62FF8A1D3001945CFADA3D73263D48A1
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/8Ym7dLA32EHZkXCxiSajtmWPoKM.roa
Signing time: Tue 24 Oct 2023 18:43:16 +0000
ROA not before: Tue 24 Oct 2023 18:43:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57630
IP address blocks: 185.88.112.0/22 maxlen: 22
2a03:7f20::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:ff:8a:1d:30:01:94:5c:fa:da:3d:73:26:3d:48:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Oct 24 18:43:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f189bb74b037d841d99170b18926a3b6658fa0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:68:60:e6:b3:87:ee:31:20:31:f5:1f:81:
f5:44:51:dd:dc:f6:94:b9:37:88:75:21:e2:0a:72:
a6:b6:d2:fd:c6:f9:dd:8d:63:25:6b:d7:b3:63:6a:
9b:c1:b5:20:7f:d6:b1:22:58:ee:35:e0:dc:38:39:
ae:f4:3a:85:c2:eb:56:4b:a0:81:44:c7:f8:05:12:
e2:d5:bc:91:ce:52:f0:67:06:00:35:37:0d:05:74:
76:21:ff:d3:cc:6d:ca:70:7e:27:0d:07:70:52:be:
c7:f2:3d:b5:e1:cb:b8:ab:60:4e:91:c6:2e:e7:7d:
d0:88:9f:d8:37:9a:24:cc:4e:53:72:03:9d:5b:cc:
a3:17:a4:26:2a:f1:1d:39:e9:b8:16:1d:75:71:9a:
96:59:e9:16:f7:35:28:22:31:89:2a:0b:9c:86:05:
57:2d:30:6f:51:3c:c4:d1:61:45:7e:6d:1e:b9:46:
35:eb:8b:d9:b0:3a:53:d3:48:17:5a:96:0b:92:ec:
6c:79:97:31:7a:40:1e:f8:65:17:8d:76:ec:e6:a1:
ff:70:1b:d3:4c:e4:dd:82:97:9a:01:6b:a3:93:a0:
cb:ca:5d:29:73:31:42:ef:47:93:22:17:76:a2:3d:
08:6d:c8:6c:c0:a7:25:78:73:30:ba:9b:b1:5b:51:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:89:BB:74:B0:37:D8:41:D9:91:70:B1:89:26:A3:B6:65:8F:A0:A3
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/8Ym7dLA32EHZkXCxiSajtmWPoKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.112.0/22
IPv6:
2a03:7f20::/29
Signature Algorithm: sha256WithRSAEncryption
68:f6:72:31:50:1c:18:f1:50:fe:ee:48:c7:29:60:31:4a:43:
d7:9a:b9:69:6b:f3:e7:69:42:e9:45:77:2f:eb:2c:d3:1c:cc:
35:2e:41:ea:92:89:b6:3b:b4:e7:6e:70:66:77:c8:ac:13:b7:
99:89:37:da:93:80:30:aa:24:a4:2f:ce:86:48:68:3c:05:e7:
08:ab:53:51:32:a0:e9:5f:d0:2d:86:aa:de:5e:53:23:50:f6:
13:8c:ee:24:36:31:04:c8:13:d0:f2:96:cd:e6:4f:89:26:f3:
be:f7:88:3b:41:6f:49:21:97:65:10:ba:a3:7d:81:fa:22:a5:
e1:e5:80:fe:86:8b:69:5e:24:a1:bb:83:3d:1d:73:50:60:ab:
79:a5:a0:93:f9:f6:7f:fe:e2:e3:c4:bc:f0:a0:af:48:e7:8e:
2b:29:55:94:3b:1e:cb:ee:be:45:2b:76:ab:b4:a6:c9:d5:60:
a6:40:7a:3d:f7:b8:24:96:e3:d9:ec:90:34:bb:73:43:4e:65:
0b:39:5f:ed:86:d0:34:3c:03:f0:55:77:f4:43:ec:62:17:b2:
ed:87:03:e1:55:c1:59:33:a2:d6:5e:de:84:dd:90:51:2c:1d:
76:13:74:54:20:b6:ab:fa:9d:bb:f6:7f:28:6c:ab:08:6c:27:
14:82:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:31 2025 by rpki-client