Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/8HmRKchgo8K4mjEitS14VA0EwXM.roa
File: 8HmRKchgo8K4mjEitS14VA0EwXM.roa (raw, json)
Hash identifier: GpRbzhGGfj6RhBmJnnwkwPdwPG1BFUy+b7tvG+InWKk=
Subject key identifier: F0:79:91:29:C8:60:A3:C2:B8:9A:31:22:B5:2D:78:54:0D:04:C1:73
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0C6088D9
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/8HmRKchgo8K4mjEitS14VA0EwXM.roa
Signing time: Tue 05 Apr 2022 18:34:24 +0000
ROA not before: Tue 05 Apr 2022 18:34:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 89.43.44.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207653081 (0xc6088d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Apr 5 18:34:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0799129c860a3c2b89a3122b52d78540d04c173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:8f:b1:d6:6f:34:8a:84:11:38:86:25:53:
23:69:2e:77:a0:ec:92:9c:ae:da:4e:92:b5:91:09:
80:f6:ad:8a:5c:9b:a9:c2:17:15:5c:9f:ff:9c:74:
f8:30:8f:04:50:84:28:8f:d1:e9:75:f6:82:41:9a:
44:3c:e0:4e:9b:f3:59:c7:36:17:e0:0b:05:7c:4f:
84:25:40:9c:e7:f9:e1:5d:7c:92:f7:71:a5:d9:7a:
6f:12:c4:06:0f:0d:9e:0e:64:fe:be:d9:f0:ed:b5:
5b:67:dc:d9:d1:da:ce:eb:ac:6c:f3:4d:08:ad:bd:
78:ca:97:b6:92:0a:7b:93:d5:e4:73:4e:8a:7c:4a:
86:6a:89:af:f9:52:ae:9e:08:8b:76:a8:30:fd:6d:
39:86:93:d9:8b:23:32:14:63:62:fa:13:3d:d0:24:
50:57:d9:7b:10:b3:dc:45:4d:8f:95:0a:42:5b:5b:
41:96:c1:55:7d:c6:c8:d0:3f:d2:56:d0:d6:47:af:
7a:ce:96:8b:2b:3b:2d:58:fd:f2:00:d7:c5:95:d7:
07:b3:12:96:83:96:84:89:ea:a8:57:0c:ec:0f:92:
a1:88:d0:61:9b:8c:31:6c:9e:31:b0:3f:8f:b1:c3:
37:af:0c:da:7f:5f:f4:6b:f6:e2:46:ac:0d:43:6d:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:91:29:C8:60:A3:C2:B8:9A:31:22:B5:2D:78:54:0D:04:C1:73
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/8HmRKchgo8K4mjEitS14VA0EwXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
89.43.44.0/24
93.113.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ce:48:2c:c9:2d:49:26:e0:4d:ef:62:35:76:64:66:91:19:
cb:81:c1:77:e6:66:f5:b5:a9:c9:5c:1a:9c:6f:cc:3f:a9:2e:
f5:48:67:a8:c4:47:77:74:09:f7:fc:15:2c:c5:5c:ee:8c:83:
1e:f1:9b:64:70:40:d0:23:f0:bd:5a:a5:8d:14:3f:01:8b:f2:
74:00:e8:f9:c1:7c:31:86:4b:27:5f:0a:74:46:1b:b3:56:27:
61:fa:39:70:da:12:25:5d:2e:d0:92:36:64:45:09:91:1c:73:
30:ed:d6:24:f3:b0:91:79:11:91:73:a4:25:75:5c:66:36:20:
bf:7b:47:8b:1c:f6:93:28:32:6d:4e:c5:fa:88:9e:64:5c:44:
b7:37:36:6c:0a:d6:a3:45:61:1a:73:d8:bb:b2:15:4b:09:4f:
8d:af:dd:c4:2d:8f:dd:85:5d:d8:84:f9:8b:c1:f3:4d:68:0c:
e7:bb:ae:b6:0a:f0:b8:26:26:da:5c:76:ca:94:17:7f:b4:34:
d8:9f:71:47:1e:63:b4:04:cb:5c:d5:dd:52:9c:c3:33:4e:1f:
4c:31:40:13:5e:dd:92:c5:45:4d:13:b2:f6:a1:b9:eb:52:33:
cf:fc:52:98:de:0c:14:08:b5:da:e8:95:d2:d5:1f:8a:a9:3b:
0f:fe:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org