Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iXjLLKZ6d1AcC2Z63Xi6fKWWeyo.roa
File: iXjLLKZ6d1AcC2Z63Xi6fKWWeyo.roa (raw, json)
Hash identifier: 3kIKhUsZtRwhC5VivbJqzQnaYi2w2/N6JsuFFzPWSIg=
Subject key identifier: 89:78:CB:2C:A6:7A:77:50:1C:0B:66:7A:DD:78:BA:7C:A5:96:7B:2A
Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Certificate serial: 0183D60E7B83C9A4BAE4BFB8F625E762A94E
Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iXjLLKZ6d1AcC2Z63Xi6fKWWeyo.roa
Signing time: Fri 14 Oct 2022 10:33:36 +0000
ROA not before: Fri 14 Oct 2022 10:33:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51013
IP address blocks: 185.140.108.0/24 maxlen: 24
193.32.235.0/24 maxlen: 24
185.111.88.0/22 maxlen: 24
185.111.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:0e:7b:83:c9:a4:ba:e4:bf:b8:f6:25:e7:62:a9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Validity
Not Before: Oct 14 10:33:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8978cb2ca67a77501c0b667add78ba7ca5967b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:40:c2:5d:2b:54:1f:3c:34:9b:88:07:d2:
2f:cd:1d:53:a6:92:22:b5:8e:0e:9b:48:cb:2a:c3:
c5:19:5d:50:f9:22:2c:56:3d:e0:83:57:95:da:75:
f7:aa:ff:ab:0d:7a:38:72:3f:57:34:5d:9f:53:84:
37:64:9f:11:28:28:ce:98:0c:65:7f:51:c8:2e:c3:
7c:df:1a:24:31:ae:d5:e5:0c:2e:77:d2:47:6d:08:
e2:22:01:2e:32:6b:f6:97:8b:ff:8e:94:19:22:13:
96:7a:a9:2a:35:e2:6c:e6:e3:d9:88:f9:f8:7c:fe:
4e:49:eb:d5:26:c6:dd:65:1e:75:51:c9:fe:6e:07:
84:af:e5:e0:59:f3:af:88:77:f9:71:db:22:df:91:
5f:45:cd:f0:11:65:58:31:6d:e0:d5:9f:81:7c:42:
2e:59:74:7f:c8:a3:20:0a:73:aa:9f:e6:92:81:43:
87:3c:7d:a3:f4:56:66:8a:3d:29:64:0f:ba:c5:d7:
1c:bc:be:e9:9a:6e:d6:9a:45:01:77:1a:53:e2:7d:
b7:f7:f3:21:22:c3:d8:ed:5d:7b:d0:40:25:1e:df:
b7:b5:36:e0:ea:3a:5b:3a:e4:cc:03:42:9a:04:da:
13:fa:7a:aa:46:66:d6:a5:bf:d8:4c:fd:5f:df:90:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:CB:2C:A6:7A:77:50:1C:0B:66:7A:DD:78:BA:7C:A5:96:7B:2A
X509v3 Authority Key Identifier:
keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iXjLLKZ6d1AcC2Z63Xi6fKWWeyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.88.0/22
185.140.108.0/24
193.32.235.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b5:99:b3:c3:9d:35:66:a4:b6:ca:be:e3:b0:07:d0:6c:ff:
61:c7:59:71:28:68:71:9f:8a:6a:aa:73:2f:86:f1:f7:77:59:
72:4c:3f:bd:dc:04:b9:f7:32:f9:06:8a:2f:e4:b1:17:1a:04:
31:68:52:7e:ad:1a:31:56:db:d9:7d:0b:e8:33:92:56:dc:57:
e3:b0:3f:ca:3f:a7:61:a4:8b:cb:f4:1e:87:86:c8:49:bd:67:
39:4b:4c:a5:69:11:8e:f8:bc:1b:1b:61:dc:4f:64:68:c4:90:
aa:dc:e2:15:b2:97:57:b3:a5:41:2f:f1:4b:72:f9:ab:95:ef:
97:cb:71:a7:ff:65:5c:b1:de:cc:73:cf:1b:30:1b:9b:99:d7:
f1:e0:fa:d2:fb:ca:c6:97:7e:67:ed:8d:06:eb:94:d8:69:f0:
33:3a:34:98:18:8e:a2:67:53:1e:a9:c0:a5:c3:7e:75:95:e2:
58:5b:da:a9:8e:d6:45:19:6a:44:c4:98:4c:eb:60:f3:d8:2a:
4e:87:91:af:f0:f5:03:16:cb:87:aa:e1:3d:c0:1c:62:ed:7e:
da:e0:9a:01:62:fd:e0:51:61:8c:a3:ac:61:29:c3:ce:68:e4:
40:59:fe:56:1f:e9:9b:18:f1:59:4e:fd:8c:3c:1d:ec:7c:97:
ec:9f:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:58 2025 by rpki-client