Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/8vb8Ebi_OXsGA7qCqQFJDkUMO0M.roa
File: 8vb8Ebi_OXsGA7qCqQFJDkUMO0M.roa (raw, json)
Hash identifier: sYt5HpxrDbLd8gQakoVv4gXf6FFgHVqps2AWmArhJGU=
Subject key identifier: F2:F6:FC:11:B8:BF:39:7B:06:03:BA:82:A9:01:49:0E:45:0C:3B:43
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 018C69A6780ACEC9485672A5ED6CF32AD00F
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/8vb8Ebi_OXsGA7qCqQFJDkUMO0M.roa
Signing time: Thu 14 Dec 2023 18:46:06 +0000
ROA not before: Thu 14 Dec 2023 18:46:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 194.32.147.0/24 maxlen: 24
185.113.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:a6:78:0a:ce:c9:48:56:72:a5:ed:6c:f3:2a:d0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Dec 14 18:46:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2f6fc11b8bf397b0603ba82a901490e450c3b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:13:49:3b:84:96:be:b5:a1:83:2c:ee:a6:47:
9b:00:92:ca:14:60:d2:a1:5d:7e:b3:e4:62:1a:38:
da:6f:c3:36:1f:21:b2:6a:52:4a:7c:14:24:e7:f9:
91:26:81:c7:11:96:a7:c0:15:20:88:66:84:eb:21:
2c:85:32:34:4e:2a:c3:f6:f1:92:0f:53:3f:ea:09:
f1:f4:c0:eb:cd:af:55:4d:5e:07:b7:a6:4c:47:5b:
5d:c4:2f:2e:c8:ce:7f:7e:07:7a:0b:ce:d4:e7:43:
78:ca:d6:75:6b:c2:45:a7:f4:be:14:30:ed:c8:ee:
82:36:c9:f2:13:47:f1:f1:bb:98:af:cc:85:cd:c2:
a7:a2:60:b2:bf:05:a8:04:95:84:da:02:34:cb:ef:
90:b7:e7:e7:ad:ef:8d:e9:4c:53:f6:21:1d:3e:75:
75:82:4b:62:70:aa:19:e1:29:2d:7e:0f:f5:64:62:
2a:bc:35:90:18:e2:de:3f:93:a9:fa:36:28:53:d9:
83:0e:bd:35:c8:f7:f7:c4:02:52:a8:fb:f3:c1:5e:
df:f6:53:7b:fe:d9:28:57:48:50:41:34:4d:50:d4:
91:b1:9c:5f:ed:eb:3e:18:41:e1:f2:f7:89:6b:46:
f9:84:60:69:43:75:b2:6f:0d:db:d3:f8:48:b2:61:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F6:FC:11:B8:BF:39:7B:06:03:BA:82:A9:01:49:0E:45:0C:3B:43
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/8vb8Ebi_OXsGA7qCqQFJDkUMO0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.11.0/24
194.32.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ca:bb:2f:3f:ee:aa:42:87:2c:a3:cb:38:41:9b:13:56:8c:
18:17:48:4a:47:b9:54:fa:fc:18:47:8f:90:84:5b:cc:65:d9:
0b:41:7b:69:65:f2:c7:36:45:a6:64:d4:1c:c9:26:c2:0d:aa:
ec:73:81:98:f0:ac:10:6e:f1:7c:f8:c7:b0:9b:b0:7f:b5:44:
d3:3b:f8:3a:bb:f7:90:36:44:3f:78:d6:bc:ef:46:61:c5:eb:
78:7c:bd:ea:d0:f2:ca:49:c0:90:13:0f:e7:62:e0:41:39:cf:
0b:0a:0a:b0:9d:34:7f:e4:15:b4:ea:5f:cf:30:f8:c4:f3:70:
8d:1e:4b:16:40:ae:90:80:fb:04:27:7f:f8:6f:b3:ee:eb:70:
42:78:5b:37:0a:b2:3f:6a:32:2b:85:b2:5e:5b:01:e8:1f:86:
26:fa:0e:0f:d3:d6:60:ee:a5:38:e6:09:78:40:2b:3a:00:a3:
69:1c:6c:6a:6b:54:a0:6f:17:a0:8e:34:02:c1:f6:28:a9:85:
92:b4:ef:02:0e:4b:b5:f5:55:ec:9f:fc:ef:40:ec:51:a1:8f:
ab:d4:fa:3f:c7:40:d3:8f:7f:56:52:45:97:d5:23:50:3b:24:
30:84:47:68:6f:10:b6:af:0c:80:e6:16:68:7c:f4:2d:52:96:
84:69:db:9e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxppngKzslIVnKl7WzzKtAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0
NDg4NzgwHhcNMjMxMjE0MTg0NjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmY2ZmMxMWI4YmYzOTdiMDYwM2JhODJhOTAxNDkwZTQ1MGMzYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRNJO4SWvrWhgyzupkebAJLKFGDS
oV1+s+RiGjjab8M2HyGyalJKfBQk5/mRJoHHEZanwBUgiGaE6yEshTI0TirD9vGS
D1M/6gnx9MDrza9VTV4Ht6ZMR1tdxC8uyM5/fgd6C87U50N4ytZ1a8JFp/S+FDDt
yO6CNsnyE0fx8buYr8yFzcKnomCyvwWoBJWE2gI0y++Qt+fnre+N6UxT9iEdPnV1
gkticKoZ4Sktfg/1ZGIqvDWQGOLeP5Op+jYoU9mDDr01yPf3xAJSqPvzwV7f9lN7
/tkoV0hQQTRNUNSRsZxf7es+GEHh8veJa0b5hGBpQ3Wybw3b0/hIsmF7fQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPL2/BG4vzl7BgO6gqkBSQ5FDDtDMB8GA1UdIwQY
MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt
YzBiMWFkNDM1Yjk1LzEvOHZiOEViaV9PWHNHQTdxQ3FRRkpEa1VNTzBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1
LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXELAwQA
wiCTMA0GCSqGSIb3DQEBCwUAA4IBAQBdyrsvP+6qQocso8s4QZsTVowYF0hKR7lU
+vwYR4+QhFvMZdkLQXtpZfLHNkWmZNQcySbCDarsc4GY8KwQbvF8+Mewm7B/tUTT
O/g6u/eQNkQ/eNa870Zhxet4fL3q0PLKScCQEw/nYuBBOc8LCgqwnTR/5BW06l/P
MPjE83CNHksWQK6QgPsEJ3/4b7Pu63BCeFs3CrI/ajIrhbJeWwHoH4Ym+g4P09Zg
7qU45gl4QCs6AKNpHGxqa1SgbxegjjQCwfYoqYWStO8CDku19VXsn/zvQOxRoY+r
1Po/x0DTj39WUkWX1SNQOyQwhEdobxC2rwyA5hZofPQtUpaEadue
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:36 2025 by rpki-client