Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/R8AJeKNW_qsbVdZQj077bbAQrLE.roa
File: R8AJeKNW_qsbVdZQj077bbAQrLE.roa (raw, json)
Hash identifier: H4SOwud527f6ey+H/W9rpXgg6hqBd/M49zj3QLGNZcQ=
Subject key identifier: 47:C0:09:78:A3:56:FE:AB:1B:55:D6:50:8F:4E:FB:6D:B0:10:AC:B1
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0998BFBA
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/R8AJeKNW_qsbVdZQj077bbAQrLE.roa
Signing time: Sat 01 Jan 2022 05:04:08 +0000
ROA not before: Sat 01 Jan 2022 05:04:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199853
IP address blocks: 178.156.32.0/24 maxlen: 24
88.148.58.0/23 maxlen: 23
84.232.106.0/23 maxlen: 23
37.72.8.0/24 maxlen: 24
94.76.176.0/24 maxlen: 24
185.27.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161005498 (0x998bfba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47c00978a356feab1b55d6508f4efb6db010acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:28:39:bd:6d:b7:2c:3e:89:4b:d5:13:b6:
a3:00:ab:94:d5:24:b8:6f:a3:a2:a9:f7:34:88:26:
76:7e:7c:06:c1:e7:a1:cd:4e:2d:9d:7b:fb:68:9f:
32:e8:24:40:fe:cd:79:a1:c3:4d:59:9c:6b:cb:1d:
95:23:0c:17:48:ad:ed:bd:d9:df:19:0e:b9:8f:ba:
06:3b:9a:a7:59:0e:39:50:57:58:97:c3:6d:f6:ef:
71:8f:04:5e:ff:55:5c:4d:c2:45:44:af:da:a9:90:
d5:ff:9b:18:78:ea:65:da:4b:72:ec:60:c5:53:9d:
b3:ad:bc:02:f3:a5:8c:34:a3:4c:12:48:a6:3c:de:
57:b4:7f:8a:d6:9b:fb:65:a7:6b:b8:aa:64:d6:53:
ab:e1:6c:34:4c:9e:03:11:13:05:3a:3e:d3:04:67:
d5:c7:cc:18:85:93:ba:59:a5:2a:39:d3:f4:ae:5a:
5c:f0:4f:14:02:f1:30:a5:c6:bc:3e:1e:64:63:8f:
3e:b3:ea:7c:cb:7d:85:5a:cd:b2:2b:b6:23:25:d4:
e7:95:ad:5c:34:db:27:9c:eb:d6:b1:ec:79:c1:15:
f5:9e:ae:f8:44:6f:06:ac:6d:94:a2:4c:e6:41:da:
55:32:99:a8:fe:0b:67:15:ba:70:8a:52:20:e6:2d:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:09:78:A3:56:FE:AB:1B:55:D6:50:8F:4E:FB:6D:B0:10:AC:B1
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/R8AJeKNW_qsbVdZQj077bbAQrLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.8.0/24
84.232.106.0/23
88.148.58.0/23
94.76.176.0/24
178.156.32.0/24
185.27.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:06:c7:eb:ba:ea:e8:f9:8e:5e:98:e0:a6:7a:dd:f5:26:5a:
3e:24:83:33:84:47:c5:ce:ba:7e:59:7b:64:bb:2b:5f:28:02:
64:84:2e:3e:28:4f:71:f7:11:d4:c8:fa:48:5d:87:a4:36:7f:
b3:25:fb:0d:9f:78:5a:7c:4a:71:f9:b6:b2:b4:26:6d:cb:d6:
a2:3c:f1:00:d4:e5:37:81:8f:26:dd:2a:a3:3b:c5:c4:e4:68:
91:13:6d:ea:eb:15:38:25:6a:43:eb:89:d4:30:14:cf:38:a6:
b5:42:0a:11:23:1d:74:34:6d:26:47:b1:5d:36:6f:a7:46:b1:
cb:d0:43:ae:7c:e1:69:61:3e:1d:07:93:21:a2:e0:73:e0:8b:
be:31:cc:3f:ea:1c:cc:b1:ca:25:e7:0d:17:e6:54:1d:1a:15:
9c:9f:0d:d9:fe:02:9e:be:0c:36:65:a1:12:e7:68:57:de:fe:
f1:ab:1e:db:4e:2b:81:2f:0a:70:39:c3:21:cb:86:54:d1:0c:
fb:bf:a0:80:be:b7:48:a7:7e:d0:1f:09:6c:0b:96:48:5c:19:
63:dc:25:af:e4:71:e9:c9:68:80:2a:eb:62:b3:c4:11:22:92:
83:9f:a9:d7:f9:54:1f:9d:3b:be:d9:28:3b:41:46:0a:7a:cb:
ce:eb:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:04 2025 by rpki-client