Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/8oIQ2v8vRZS2uPfbZqq5xE6NpsU.roa
File: 8oIQ2v8vRZS2uPfbZqq5xE6NpsU.roa (raw, json)
Hash identifier: J6tf+Hary0G+r8xDy6qR/JqqWtqzj8DceHIerVdTHPY=
Subject key identifier: F2:82:10:DA:FF:2F:45:94:B6:B8:F7:DB:66:AA:B9:C4:4E:8D:A6:C5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0181E3DBD43E8FD584340829BABEA30EDD64
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/8oIQ2v8vRZS2uPfbZqq5xE6NpsU.roa
Signing time: Sat 09 Jul 2022 16:47:23 +0000
ROA not before: Sat 09 Jul 2022 16:47:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13209
IP address blocks: 77.81.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e3:db:d4:3e:8f:d5:84:34:08:29:ba:be:a3:0e:dd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jul 9 16:47:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f28210daff2f4594b6b8f7db66aab9c44e8da6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:33:c2:b7:dc:07:2d:ad:e2:38:48:7e:15:b4:
f6:73:6b:ad:52:66:af:f1:7a:1c:34:29:10:aa:99:
27:3a:07:65:4c:e2:57:5c:c8:82:3e:93:03:43:7e:
84:b3:0b:6e:6c:e5:3c:dc:7f:6a:1f:0a:95:d8:e5:
16:69:f7:85:62:57:9c:9e:be:8a:67:da:c9:5a:70:
f1:6c:d2:c2:e4:6e:de:dc:c7:81:06:b4:42:10:f3:
1f:67:94:71:0a:f3:43:d0:c1:73:af:05:4e:0d:82:
7e:f2:11:b0:a0:f6:55:76:1f:e4:69:e7:8b:fb:1c:
cf:ab:03:57:85:ba:8d:30:a0:fa:86:d1:98:a8:66:
e6:13:20:d5:aa:70:4e:01:64:0d:a0:1b:fa:f5:07:
1a:8d:3c:fe:71:e5:cb:5b:a5:84:73:bf:8a:01:c9:
1e:07:c5:e5:d9:c2:f8:c2:aa:2c:54:f9:78:42:02:
51:7a:5a:f9:91:1f:a1:c7:95:a5:63:e2:40:5e:6a:
ae:29:21:0a:3e:49:bc:a6:60:f9:4a:b7:43:ac:21:
b6:5e:0a:27:20:37:c5:85:78:28:4a:43:09:08:11:
36:c5:6b:25:66:80:40:d9:79:a9:c6:d8:f2:ce:9d:
39:5e:82:43:b7:6e:ce:a2:3b:d7:63:dd:66:b9:25:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:10:DA:FF:2F:45:94:B6:B8:F7:DB:66:AA:B9:C4:4E:8D:A6:C5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/8oIQ2v8vRZS2uPfbZqq5xE6NpsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a8:59:aa:9f:cd:31:a1:40:2d:4a:d5:3b:ff:2c:b1:35:49:
70:be:71:f9:33:22:1f:12:9a:2d:3a:a1:b9:2a:e2:10:ef:fe:
ea:c2:4e:bb:ca:0e:0a:58:87:78:70:31:c9:3f:c8:1a:0f:8b:
24:c5:87:8c:5d:ca:b1:67:67:f2:68:b2:27:c7:07:21:68:b5:
ac:8c:9e:3a:be:5c:cc:ca:9b:e5:62:80:2e:b9:40:b1:b8:c1:
38:d1:2b:8c:45:89:1b:99:90:a1:ae:a5:61:93:62:ef:b8:6d:
fe:a7:5f:86:d4:96:88:75:39:5c:2c:0f:e1:76:4c:ad:20:57:
f9:49:98:6a:37:e7:f7:a7:2b:26:b2:ee:08:bd:2d:29:68:a4:
bd:19:87:5f:b7:50:69:e3:09:8b:53:d5:69:0f:f3:46:53:9f:
27:c8:54:d3:f2:8d:80:69:e1:1a:cc:15:40:2d:e6:5a:a7:73:
90:af:24:d5:ad:65:72:45:2d:6f:56:0c:da:04:a7:5a:24:e8:
4a:4e:78:da:d4:b0:24:c6:2b:75:e8:e8:b4:00:cb:fa:ed:fa:
ae:5b:56:36:a4:81:6a:c4:ad:9b:b8:38:37:72:19:67:dd:3b:
ed:c1:c1:9a:db:1c:ea:62:af:e1:a7:b8:09:b9:e4:39:e9:88:
39:26:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:40 2025 by rpki-client