Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/8ZCmhdY8sbRPffU-VWWwlr_iC4k.roa
File: 8ZCmhdY8sbRPffU-VWWwlr_iC4k.roa (raw, json)
Hash identifier: MZ9RWCdbDjY5AhuNwZDP5bsAS/swGWpyHICLHxIRr54=
Subject key identifier: F1:90:A6:85:D6:3C:B1:B4:4F:7D:F5:3E:55:65:B0:96:BF:E2:0B:89
Certificate issuer: /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial: 018572558234E8808357888891E009749893
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/8ZCmhdY8sbRPffU-VWWwlr_iC4k.roa
Signing time: Mon 02 Jan 2023 11:54:44 +0000
ROA not before: Mon 02 Jan 2023 11:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1103
IP address blocks: 194.104.124.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:82:34:e8:80:83:57:88:88:91:e0:09:74:98:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
Validity
Not Before: Jan 2 11:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f190a685d63cb1b44f7df53e5565b096bfe20b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fc:5a:3c:6e:61:ad:a2:56:8f:7d:d8:28:9e:
42:89:9e:d5:09:2a:99:1a:35:cb:42:02:9d:61:c8:
8a:15:aa:9f:78:38:65:4c:40:59:02:89:52:53:bd:
77:d4:94:48:be:ba:1b:89:81:f6:2b:9d:0f:ec:02:
0e:e5:95:b0:11:d9:d3:4f:53:08:34:18:96:59:fe:
17:bd:cb:72:07:66:44:f2:b8:b2:b3:a0:5b:04:82:
7f:b6:e3:b3:c4:4b:7d:fc:56:d3:67:e5:6d:c5:44:
b2:59:6a:f1:2c:50:ff:f8:e0:8e:d5:36:04:9f:4e:
8e:53:34:83:ee:03:e4:c8:de:64:a2:c9:20:3d:34:
a8:6a:0a:0f:2c:4f:ff:ce:2d:3f:18:8b:ad:57:7d:
0e:26:3c:6f:ca:3e:7a:3b:f2:48:b8:46:ea:fc:39:
60:e0:19:21:94:25:2b:ab:82:bb:96:d5:42:46:e8:
b2:77:ec:35:45:21:83:95:f3:5f:7e:8b:64:68:ef:
bc:2e:6b:82:d4:79:a9:31:00:aa:07:5b:8e:f9:9e:
7b:2a:0f:1e:e2:c6:0e:79:71:d9:3d:09:6f:e1:5c:
1f:47:ea:38:f3:ea:df:b2:50:00:f1:ed:8b:97:c7:
c6:46:d9:01:99:26:fe:f4:bd:11:13:07:af:2d:01:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:90:A6:85:D6:3C:B1:B4:4F:7D:F5:3E:55:65:B0:96:BF:E2:0B:89
X509v3 Authority Key Identifier:
keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/8ZCmhdY8sbRPffU-VWWwlr_iC4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.124.0/23
Signature Algorithm: sha256WithRSAEncryption
88:34:d2:9a:4d:ff:32:a1:1b:c3:b5:29:44:ac:d1:43:1a:36:
c2:93:5f:95:44:74:03:46:cb:b0:98:eb:64:8b:d3:82:92:30:
5b:b6:9e:1f:e9:7a:aa:1e:23:c7:7a:3b:06:a5:a5:97:b7:18:
08:8c:91:85:b2:69:e0:8a:fa:9c:42:02:d3:f4:33:a4:c8:b0:
d9:f7:b9:8f:71:1b:d3:1c:13:5a:d9:65:5a:6f:be:04:8f:dd:
af:1e:2b:2b:86:ec:4b:a4:84:e9:05:94:a5:d9:ed:7a:87:c7:
71:6a:30:01:cb:62:db:a5:15:83:a6:33:1d:db:fc:4c:d6:d9:
e0:d6:3b:14:ee:11:e7:9f:f3:9b:92:9c:5d:39:c0:e4:bf:84:
80:c6:0c:4f:cc:4c:57:92:62:4b:c5:fe:b0:92:b5:05:1d:87:
11:78:35:1c:f0:04:81:23:2e:61:7d:e2:10:29:07:d1:0b:a5:
85:e3:c4:9d:78:1a:77:a3:f1:7e:39:6c:9c:24:91:f0:34:f5:
e1:6b:84:ec:61:7e:fe:a3:cd:f0:ac:3e:9b:91:be:d6:ba:c0:
41:70:03:3e:ef:c8:f5:61:72:ba:a6:21:ed:38:c1:50:75:34:
56:f4:1f:b9:d3:00:cf:9f:f7:c9:f1:c2:b9:39:28:a1:3d:00:
b4:fc:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:04 2025 by rpki-client