Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8O-Cx_c8C8_GIzhieVbd80cTq0U.roa
File: 8O-Cx_c8C8_GIzhieVbd80cTq0U.roa (raw, json)
Hash identifier: 8E+I8Lro8iNa99qZtAI2Jshe0HAFLufZJQX42UhM1HM=
Subject key identifier: F0:EF:82:C7:F7:3C:0B:CF:C6:23:38:62:79:56:DD:F3:47:13:AB:45
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 080B9289
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8O-Cx_c8C8_GIzhieVbd80cTq0U.roa
Signing time: Sat 01 Jan 2022 11:54:18 +0000
ROA not before: Sat 01 Jan 2022 11:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211832
IP address blocks: 185.189.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134976137 (0x80b9289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 1 11:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0ef82c7f73c0bcfc62338627956ddf34713ab45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:34:c4:11:17:2f:dc:34:a8:ec:2a:20:d7:
29:5e:f8:01:b2:79:91:25:67:69:0b:0b:1c:6e:f8:
cb:b1:f6:17:af:d5:42:3d:17:a6:47:d5:82:8f:40:
0b:27:4b:f7:32:10:97:c3:80:d0:8e:35:68:7a:36:
ed:da:05:0f:22:26:d6:e5:80:6d:48:a2:b8:cd:84:
e0:3d:25:fb:ff:da:42:55:5c:56:ee:b8:3f:5e:1f:
34:a0:a6:fe:90:8b:5c:27:87:9f:6e:0f:bc:03:c2:
f0:dc:38:68:df:89:5a:34:94:6e:84:91:db:bd:9d:
c5:f2:78:75:0b:0a:f5:1f:cc:b2:b6:60:92:e3:f2:
ab:34:0e:c5:02:e6:99:15:71:cc:31:79:07:55:35:
69:b1:e7:b8:a6:8d:91:e1:d7:6c:2e:b0:c4:d5:49:
ca:e5:36:04:70:2d:de:08:d7:04:aa:e3:f6:f0:a9:
0e:d5:9e:47:e2:09:ff:75:73:4d:bd:21:65:d9:d2:
0b:7e:88:5d:c2:16:a0:ef:43:28:13:43:a9:2d:3e:
ac:f8:75:8c:39:97:b0:a3:c0:1d:fb:d6:b9:d3:67:
88:e2:7c:57:71:1a:4b:4e:4f:02:ae:3a:6b:7e:45:
7c:6e:2f:6f:cf:46:46:8f:79:c4:5b:4e:db:db:ca:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:82:C7:F7:3C:0B:CF:C6:23:38:62:79:56:DD:F3:47:13:AB:45
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8O-Cx_c8C8_GIzhieVbd80cTq0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.155.0/24
Signature Algorithm: sha256WithRSAEncryption
05:e8:16:ba:da:fb:56:f5:72:92:9d:fc:78:ed:5e:3a:4c:ab:
18:69:e5:a7:23:42:bd:4e:36:0b:dc:04:6a:83:6a:10:1e:16:
24:64:68:82:81:0d:05:88:8a:24:26:09:af:52:9f:26:9f:a5:
dc:02:25:1f:44:48:54:ef:b5:25:1e:35:f3:bb:33:60:c4:12:
ab:30:55:08:16:70:b1:eb:93:bf:1f:7e:23:0e:1c:6b:16:d7:
d5:49:95:96:fb:4f:2f:74:36:aa:b8:d3:df:5d:9a:38:34:53:
b2:7a:17:70:86:79:07:ca:9a:65:8b:50:af:4b:b7:5d:db:46:
a3:05:f0:79:ed:a0:64:d2:06:4f:5b:17:08:bf:81:c1:6d:69:
c3:96:a4:14:8c:a5:9c:6d:e9:21:1e:7c:1a:29:3c:cb:29:7c:
77:db:79:ae:91:12:6c:53:dc:9f:c9:89:9f:42:a0:c0:28:34:
d6:49:2b:62:64:58:32:f9:a3:97:31:10:2e:0d:3d:27:e9:17:
24:13:5f:7d:17:b3:8f:8c:60:e7:b9:2f:6e:ca:75:a7:c4:c3:
2e:1d:5b:30:4b:db:8e:0e:ec:38:b3:9f:bf:bc:66:80:f9:98:
3e:ca:4c:e3:d2:a8:21:79:52:0d:bd:9f:24:cd:9d:96:97:88:
0c:a1:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:06 2023 by rpki-client on console-ams.rpki-client.org