Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/8ZgMzFD5agmBpyM9dnj48vF5iyg.roa
File: 8ZgMzFD5agmBpyM9dnj48vF5iyg.roa (raw, json)
Hash identifier: hBCVJ836psNIFVLbl7D6uLRiEKmwq7BBHAbRw02pHyQ=
Subject key identifier: F1:98:0C:CC:50:F9:6A:09:81:A7:23:3D:76:78:F8:F2:F1:79:8B:28
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 0D592DA4
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/8ZgMzFD5agmBpyM9dnj48vF5iyg.roa
Signing time: Fri 01 Jul 2022 13:30:25 +0000
ROA not before: Fri 01 Jul 2022 13:30:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39072
IP address blocks: 194.110.165.0/24 maxlen: 24
194.110.164.0/24 maxlen: 24
194.116.202.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223948196 (0xd592da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Jul 1 13:30:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1980ccc50f96a0981a7233d7678f8f2f1798b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4e:1f:7a:0a:9a:b2:46:42:b4:a8:e3:b8:09:
12:df:7e:c1:7a:a4:9b:dd:76:5d:ef:7f:94:c8:f0:
2d:46:fe:3b:e1:97:4f:30:1a:22:d2:cd:09:82:07:
95:0f:6d:38:53:97:22:96:cd:19:a2:15:fb:37:92:
00:ed:18:57:15:b2:f6:ba:82:fb:8e:21:38:f1:54:
9c:fc:e2:68:68:9f:71:cf:32:f7:30:d1:12:a9:59:
a0:c9:1c:eb:e6:6c:98:9d:1c:55:1e:7f:c1:e5:5f:
85:08:c6:e9:5a:ee:06:36:74:4d:a5:27:1b:71:e0:
71:b1:13:03:f7:3e:12:7d:c5:18:9f:2a:9d:b3:3e:
9b:17:06:ec:e9:69:15:e5:25:87:9a:c5:99:65:59:
77:ac:62:cf:96:2b:8a:59:9d:2c:f3:40:10:03:84:
47:88:b6:6a:99:90:5d:1c:24:f0:77:62:b1:9c:d0:
f6:fd:11:cf:bd:39:05:b0:01:2e:1a:7e:b8:7a:83:
7f:bc:06:8a:b7:86:bd:e0:2b:98:d0:24:06:24:7b:
85:d4:77:ff:16:5b:fe:74:ad:45:d2:6d:d6:e2:f2:
2b:07:07:f7:68:63:bb:e4:82:64:e6:c9:dc:e9:21:
3e:62:11:29:e1:39:b2:81:1f:d4:41:a4:d1:3a:8d:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:98:0C:CC:50:F9:6A:09:81:A7:23:3D:76:78:F8:F2:F1:79:8B:28
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/8ZgMzFD5agmBpyM9dnj48vF5iyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.164.0/23
194.116.202.0/23
Signature Algorithm: sha256WithRSAEncryption
09:6a:ea:92:4f:bf:69:29:c8:08:bd:f8:f7:25:6d:76:9b:d6:
bd:cb:6d:23:02:74:2f:da:48:f0:bf:6f:8e:c1:15:dc:11:9e:
2b:87:f4:0b:cb:08:aa:30:36:4b:8a:ef:32:ad:fe:6e:21:45:
cd:d1:ff:59:a9:aa:f0:4e:78:e8:6c:f5:97:2c:3d:cb:11:7f:
80:d3:27:7b:09:98:62:ae:39:5c:aa:14:54:79:79:fe:ae:f1:
57:57:e6:d9:c1:f3:1b:1e:3d:20:b1:12:25:99:4c:b8:3e:ae:
41:fd:79:2a:52:7d:56:7f:f8:40:75:4d:be:c5:23:80:9a:59:
ba:f2:ff:03:fa:ad:98:be:30:ad:9e:6d:3d:1d:33:7c:07:bb:
25:dc:58:85:70:06:45:ef:8c:c8:61:11:41:19:42:20:be:d9:
1e:f9:cb:45:aa:d0:98:10:22:d7:00:26:84:ca:60:3a:c1:d5:
32:f3:3d:fc:e2:ee:37:e6:02:33:c3:24:54:6f:1a:2e:25:93:
8b:06:71:68:71:78:dc:49:f0:90:55:75:6a:87:8c:04:82:36:
83:6b:38:39:c2:36:29:e1:7f:45:1a:43:61:d7:5b:33:e1:7e:
b2:f9:8b:00:fe:6e:67:66:e2:8f:03:36:4a:cd:0b:18:32:79:
83:9e:7e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:14 2025 by rpki-client