Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/F80owWU8T_hav5FKrHRXUgvIKnA.roa
File: F80owWU8T_hav5FKrHRXUgvIKnA.roa (raw, json)
Hash identifier: SlRJoOYgdIEBOO2Y3P53k4xp9dFLdb8YpqUwGrKrBv0=
Subject key identifier: 17:CD:28:C1:65:3C:4F:F8:5A:BF:91:4A:AC:74:57:52:0B:C8:2A:70
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 0188E2F5263C8A2D8D117A07688B0D91660C
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/F80owWU8T_hav5FKrHRXUgvIKnA.roa
Signing time: Thu 22 Jun 2023 11:54:56 +0000
ROA not before: Thu 22 Jun 2023 11:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55002
IP address blocks: 91.212.110.0/24 maxlen: 24
194.102.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:f5:26:3c:8a:2d:8d:11:7a:07:68:8b:0d:91:66:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Jun 22 11:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17cd28c1653c4ff85abf914aac7457520bc82a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:69:68:02:f5:ce:1b:d8:5e:9d:93:c0:04:
51:b2:3a:e8:98:e3:79:1c:ba:ec:5a:71:47:95:7f:
91:c8:0a:c2:0f:6d:0b:9c:e9:cc:ff:7c:e7:d2:bd:
ba:1a:fd:2f:eb:41:69:00:2d:de:70:5e:fc:5b:c6:
6c:6a:fb:a5:22:81:b6:0d:89:56:b3:89:18:87:d9:
0c:65:81:f3:75:50:14:12:7b:0d:1d:ec:87:b1:f9:
bb:1b:73:f8:b6:f7:d9:b5:b8:db:7c:09:19:77:c7:
5a:3f:9a:a9:bd:b0:7b:6f:d6:f4:99:6d:df:23:66:
6c:4c:70:c5:59:59:f9:d9:03:dc:c9:35:e0:18:ed:
15:81:4f:54:54:78:5e:56:7c:33:9c:be:ae:fd:e4:
d2:bc:07:f8:a0:8a:28:05:9a:42:d0:88:23:31:bc:
30:60:e7:08:f6:29:e8:cd:39:5b:65:3f:ba:4e:46:
dd:16:53:20:fc:f7:90:1b:25:eb:36:7f:56:cb:09:
d3:f0:b8:5d:bb:97:3a:78:cc:34:a9:a4:7c:2a:81:
5b:5c:78:ec:ca:c7:11:3a:9e:84:e8:08:0e:f4:0c:
2c:ee:cb:2f:79:7b:2e:dd:8e:63:ec:05:12:c3:8b:
8e:39:2f:8e:76:56:6f:99:9d:57:dc:6d:96:11:86:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:28:C1:65:3C:4F:F8:5A:BF:91:4A:AC:74:57:52:0B:C8:2A:70
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/F80owWU8T_hav5FKrHRXUgvIKnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.110.0/24
194.102.208.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cb:a7:0b:0e:3d:49:eb:dd:ed:83:9b:31:9e:c6:e4:71:92:
a5:48:cf:bb:e1:32:7c:45:ee:e7:df:77:7a:0a:62:7e:b4:1b:
be:59:b8:3b:65:04:b8:84:6d:7d:dc:0e:5d:31:4a:d7:75:69:
08:d0:9b:76:64:92:a4:8f:f5:39:b2:7e:67:ab:de:8a:ea:a8:
bf:92:4d:1c:e0:24:34:b3:42:71:ef:43:6c:f4:65:c9:da:16:
f6:31:78:62:a3:96:ad:5a:5d:ca:ff:26:92:37:3f:ad:75:7f:
87:7d:2b:d4:4e:ba:92:97:5b:08:bb:01:ae:7a:da:93:88:33:
d4:ba:b3:f7:c9:99:31:12:7a:e3:55:88:9b:bf:57:ff:c7:3a:
81:20:b6:74:fb:05:bf:b7:8a:5b:60:0d:04:30:3f:0a:04:bd:
01:37:7d:6e:91:18:1b:7c:44:40:d6:79:19:64:b0:25:45:62:
2a:2f:ac:1b:e2:10:f2:c6:d8:ae:db:ab:45:d2:b1:9e:a0:9e:
c5:20:8d:e9:eb:5b:69:e1:05:7f:21:0b:97:45:90:e6:f3:66:
7f:47:49:fb:bc:f6:06:5a:e2:45:ae:68:3f:8a:16:75:95:da:
36:ef:20:64:05:e1:90:18:eb:f3:e6:1e:d1:46:e5:75:34:4f:
51:52:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:46:58 2025 by rpki-client