Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8JTR9AsgLU_84qrjFNoyKPAz9ro.roa
File: 8JTR9AsgLU_84qrjFNoyKPAz9ro.roa (raw, json)
Hash identifier: QQDiz5OYy5M9OGGqpy/OXmJNZSg9hdjN7yY0bKYmRi8=
Subject key identifier: F0:94:D1:F4:0B:20:2D:4F:FC:E2:AA:E3:14:DA:32:28:F0:33:F6:BA
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A8087C7
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8JTR9AsgLU_84qrjFNoyKPAz9ro.roa
Signing time: Sat 01 Jan 2022 04:52:03 +0000
ROA not before: Sat 01 Jan 2022 04:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197704
IP address blocks: 194.183.54.0/23 maxlen: 24
195.136.18.0/23 maxlen: 23
82.177.112.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981501895 (0x3a8087c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f094d1f40b202d4ffce2aae314da3228f033f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:d0:85:94:e7:78:64:af:98:98:52:03:cf:
5d:a3:08:3d:7f:75:b9:1c:59:2a:d0:d8:cf:30:78:
4d:a4:0e:b3:f9:f4:3a:94:56:db:7f:09:30:05:0a:
c8:f7:15:14:59:8d:0a:aa:64:27:1c:b6:4c:da:02:
b5:ef:33:ed:ef:8e:cc:bb:fa:ef:91:bd:68:6c:d9:
eb:f3:ce:2e:1f:78:9c:7e:bc:76:03:f9:e7:fc:3a:
32:c7:d7:15:2f:27:ff:92:68:9f:7e:e4:45:76:98:
8e:b3:91:9f:bd:de:ca:a8:9c:f7:6c:67:ca:30:e5:
e0:8b:f5:4a:fb:58:46:95:93:7f:7a:1e:64:f4:ba:
89:43:ae:de:74:5c:2d:6f:0d:a4:6f:d1:07:ec:c0:
80:d7:c8:e2:4f:24:d9:f8:ce:b5:ef:6b:45:78:d0:
0c:b3:f2:12:d7:37:21:ae:01:e0:ba:7e:20:9e:81:
05:8b:10:93:2b:be:0c:d8:24:4a:f2:87:45:e5:31:
6f:83:19:97:53:b0:8b:25:3d:3d:cb:28:38:7f:2b:
4a:8b:8d:aa:2f:a1:81:b6:2c:f2:2c:f6:a3:69:7f:
5d:a2:c9:22:39:c2:31:9f:75:51:18:06:b2:d4:2d:
a5:8f:ae:b7:54:1f:0e:3c:32:e3:75:da:bc:c7:5b:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:94:D1:F4:0B:20:2D:4F:FC:E2:AA:E3:14:DA:32:28:F0:33:F6:BA
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8JTR9AsgLU_84qrjFNoyKPAz9ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.112.0/23
194.183.54.0/23
195.136.18.0/23
Signature Algorithm: sha256WithRSAEncryption
25:c3:33:27:2a:01:06:02:b9:82:9b:43:4d:14:32:9f:af:f4:
60:4b:23:4e:46:bf:b9:74:d1:c7:be:a2:61:e1:c0:75:86:50:
13:78:e2:ee:96:2e:b1:11:ca:68:cc:21:d2:ab:ae:bf:43:49:
d8:66:e2:15:c5:ee:c2:db:07:28:93:83:2f:0e:f9:d7:5e:74:
4e:a5:ab:30:f7:45:58:9e:6c:e3:4b:af:bb:40:74:8a:fe:e5:
49:e9:5d:3c:1a:90:b2:c2:7a:bb:6f:b5:e1:0c:bc:e0:6a:17:
03:0f:d4:5e:14:4d:f9:1e:b5:b2:c1:48:5b:ad:9f:13:ad:48:
f3:94:6b:35:60:ee:a3:c8:a1:37:1f:3f:1c:ca:a5:5d:bf:fa:
c4:08:44:53:47:6a:a7:b7:35:9a:ce:f6:63:f2:4b:ec:1a:3f:
a4:28:43:34:bf:ba:a1:ae:7c:a8:b0:3f:97:b2:21:3c:49:40:
ae:f6:b3:44:63:cf:e4:08:ed:86:7e:2c:83:74:67:ea:cf:72:
ee:51:6a:86:41:7a:b3:f6:8f:c6:2b:84:b9:7d:3d:4b:47:58:
22:3f:fa:14:b5:7a:92:13:62:02:60:7c:27:ca:bd:59:e0:52:
29:bb:94:70:46:b6:4f:58:de:41:a0:11:0f:d4:84:ce:a7:1a:
e8:07:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:33 2025 by rpki-client