Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/8ZFYD52MOnlBxX4ay1IIaaW5CN4.roa
File: 8ZFYD52MOnlBxX4ay1IIaaW5CN4.roa (raw, json)
Hash identifier: c7btX/ARKH86XIVlKvuXKjHrecNgSaeWRlj0XT7WNdE=
Subject key identifier: F1:91:58:0F:9D:8C:3A:79:41:C5:7E:1A:CB:52:08:69:A5:B9:08:DE
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0184498AE66BB18EE8BC20A6286EF03BC850
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/8ZFYD52MOnlBxX4ay1IIaaW5CN4.roa
Signing time: Sat 05 Nov 2022 20:45:50 +0000
ROA not before: Sat 05 Nov 2022 20:45:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213220
IP address blocks: 109.248.168.0/24 maxlen: 24
188.130.209.0/24 maxlen: 24
109.248.6.0/23 maxlen: 24
95.182.110.0/24 maxlen: 24
95.182.108.0/24 maxlen: 24
109.248.33.0/24 maxlen: 24
109.248.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:49:8a:e6:6b:b1:8e:e8:bc:20:a6:28:6e:f0:3b:c8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 5 20:45:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f191580f9d8c3a7941c57e1acb520869a5b908de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:51:5f:47:3c:66:d3:9d:aa:9f:81:19:46:
c0:b7:6c:33:b7:a4:cc:eb:bf:ca:d2:8c:94:de:68:
7e:0d:a4:fa:42:a2:cb:b5:52:12:0c:bc:95:08:af:
40:10:dc:d8:0f:36:99:8d:72:e3:e7:36:f8:3b:84:
7e:2e:4c:c7:f4:1e:6f:34:7a:6c:06:c9:b4:81:39:
40:b8:aa:fe:24:10:24:1c:74:43:47:f3:4c:90:64:
19:a3:0e:cf:56:49:de:98:ca:11:a1:8b:15:e2:52:
dc:7c:8f:13:74:4f:61:35:92:c7:c0:e2:a4:06:e3:
a5:25:c4:93:55:09:f9:74:4e:03:74:88:1f:2a:5c:
47:e0:f0:ee:f7:f9:0a:38:e7:1c:bf:0b:98:cb:20:
04:e8:9f:6d:4d:9a:60:af:47:77:84:77:0d:dc:c0:
08:2a:67:c4:d1:f9:1c:47:43:ae:60:38:a1:d8:d8:
3b:e6:ef:a9:4e:73:2e:64:87:ef:f4:ba:ca:1d:2c:
2e:44:9a:df:3e:a9:11:ea:30:77:41:fd:4d:81:10:
0b:55:16:78:d8:34:a6:c7:75:be:44:e7:5f:f7:b4:
a1:14:67:24:e9:8f:f3:39:16:8a:89:72:ea:65:5f:
1f:2d:95:86:f0:ce:fd:1c:ae:53:9c:a8:b0:7a:b1:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:58:0F:9D:8C:3A:79:41:C5:7E:1A:CB:52:08:69:A5:B9:08:DE
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/8ZFYD52MOnlBxX4ay1IIaaW5CN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.108.0/24
95.182.110.0/24
109.248.6.0/23
109.248.33.0/24
109.248.45.0/24
109.248.168.0/24
188.130.209.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ba:42:7c:3b:7f:c2:76:2a:30:7f:d2:93:6c:ea:cd:bc:1e:
9f:1d:e5:1e:a3:cb:0e:36:4b:09:be:07:b6:7a:49:2f:0f:ca:
f3:74:71:f1:31:23:4f:7c:75:20:1a:31:23:d0:e7:8d:df:dd:
0f:19:9e:ca:30:61:3a:00:69:88:2c:8d:62:02:fb:9f:13:98:
18:92:72:9b:0c:9e:33:24:eb:98:d2:6f:a7:99:2b:5c:d7:1c:
b9:85:95:e1:f8:c3:f7:d9:17:36:25:b0:9c:ec:ac:a0:dc:f6:
3b:9c:45:60:11:f9:37:8c:01:98:ac:19:8d:79:cb:4a:b2:88:
7c:cf:1e:c4:e8:66:af:a4:88:91:1d:1e:73:5e:4d:51:65:6d:
f9:52:05:79:cb:10:e0:e0:40:1a:bb:3e:b3:78:7d:4a:29:50:
3a:b9:2a:d2:40:d8:55:8f:62:e3:f3:fa:ee:de:a5:20:a5:59:
38:f0:b1:d9:57:02:1a:cb:df:f2:af:6f:49:c3:38:18:58:89:
03:77:78:c1:a9:0d:1c:65:d2:69:67:8b:35:f2:f3:d1:e0:89:
53:2d:bb:02:34:26:82:d3:af:f5:1c:2c:14:1a:ed:ff:a1:c3:
d6:72:89:ce:6b:ba:12:ed:ea:5a:b5:05:8f:ee:ba:b2:03:46:
69:73:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org