Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/j8NU1v2aNrbrVOymF9I5ELizoJI.roa
File: j8NU1v2aNrbrVOymF9I5ELizoJI.roa (raw, json)
Hash identifier: NcVx175a56K1015MPh8Ee+UxGau6pXGG1uP4j2A+QYw=
Subject key identifier: 8F:C3:54:D6:FD:9A:36:B6:EB:54:EC:A6:17:D2:39:10:B8:B3:A0:92
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 018BD8B3764B1CE7BC2EE612F1BC6DFE513B
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/j8NU1v2aNrbrVOymF9I5ELizoJI.roa
Signing time: Thu 16 Nov 2023 15:15:21 +0000
ROA not before: Thu 16 Nov 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 89.18.30.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:b3:76:4b:1c:e7:bc:2e:e6:12:f1:bc:6d:fe:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Nov 16 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fc354d6fd9a36b6eb54eca617d23910b8b3a092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:ba:65:03:39:e2:45:90:3e:74:40:c9:ed:
a8:92:95:37:77:c7:eb:ec:c0:d2:11:b8:20:ac:74:
a8:f1:91:99:4c:f9:be:9c:08:f7:1b:5a:88:ec:09:
55:6e:f8:57:23:85:a0:d7:9b:c5:4f:8d:e8:83:a8:
5e:9c:00:dc:6a:89:f4:bc:dd:22:c0:5c:ee:37:4b:
92:79:82:49:42:11:4b:a4:3a:57:3c:9a:11:f6:ea:
eb:b2:75:10:91:4a:10:4d:74:c3:b4:53:ad:b7:36:
79:28:f0:bc:b3:e3:db:0d:95:87:38:6b:9c:98:17:
84:e5:c3:3f:4c:a3:e0:c1:e0:49:8e:cb:99:62:a1:
b0:f0:02:41:eb:70:a8:4c:12:2a:a5:0f:63:55:e8:
70:9b:3a:7b:89:f3:e8:5a:45:7d:05:ea:7a:8c:c0:
55:2b:1c:64:ed:6a:3b:83:b4:c9:ab:c6:97:0b:00:
32:c8:ba:d9:b4:db:b5:18:52:ae:fc:b4:fb:c0:d2:
18:36:7b:09:51:08:9a:6e:09:0f:7d:8a:95:42:81:
c9:46:11:11:08:c3:70:5c:a0:a1:22:50:dd:61:a5:
41:05:18:e7:8a:bc:a6:4b:48:87:62:0d:24:6e:a2:
da:4c:1f:03:47:a7:8f:01:4c:56:40:b7:4d:0e:9f:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:54:D6:FD:9A:36:B6:EB:54:EC:A6:17:D2:39:10:B8:B3:A0:92
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/j8NU1v2aNrbrVOymF9I5ELizoJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.30.0/23
Signature Algorithm: sha256WithRSAEncryption
57:2b:32:1a:64:b7:a4:a7:29:29:c9:4b:e7:a8:d9:77:6a:f8:
89:36:e2:da:b8:86:ee:21:3d:64:9e:a5:d3:24:1d:b1:21:42:
f5:33:8b:ff:ad:47:7f:dd:dc:aa:3f:14:ad:21:c3:91:93:5e:
35:bb:49:67:a5:06:1a:3f:ec:fc:d2:4e:2e:69:14:dc:ef:40:
16:dd:9f:02:5c:98:15:c6:37:c9:67:f5:8e:70:bf:c5:ba:cb:
25:51:f0:10:02:b9:25:fc:ab:2e:fd:28:29:2a:08:9c:c4:2f:
4e:1a:fe:0e:f0:0e:06:80:3f:ab:a8:37:06:01:98:a9:60:81:
91:c8:23:59:07:67:c1:07:7a:1d:6c:53:e0:c4:06:c1:c3:89:
7d:77:1a:b6:21:f4:b6:05:40:95:09:1d:4f:f4:46:bc:9e:f7:
31:4b:35:1b:b2:6d:46:e7:e4:6c:56:41:9d:f6:23:b5:1f:9d:
e8:44:d1:01:b4:8b:19:39:84:05:f1:0c:7d:37:df:b5:c0:e6:
82:73:28:82:48:6e:5b:9e:08:4a:54:1d:dc:a8:1a:c7:2a:6c:
7f:c8:b4:46:13:10:59:63:79:45:b8:39:94:58:65:59:bf:00:
cd:e6:5e:f6:26:2e:6d:86:a5:5d:e2:38:3f:80:14:a2:c2:aa:
f3:36:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:13 2025 by rpki-client