Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/8bFhWMf5fPXl123RLbsix8orxQw.roa
File: 8bFhWMf5fPXl123RLbsix8orxQw.roa (raw, json)
Hash identifier: B6goZ728YPCJGrS7THyl9jK9Wepa+uivs8uCUF67jio=
Subject key identifier: F1:B1:61:58:C7:F9:7C:F5:E5:D7:6D:D1:2D:BB:22:C7:CA:2B:C5:0C
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 06E174FD
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/8bFhWMf5fPXl123RLbsix8orxQw.roa
Signing time: Tue 10 May 2022 09:37:02 +0000
ROA not before: Tue 10 May 2022 09:37:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12459
IP address blocks: 185.241.212.0/24 maxlen: 24
185.119.89.0/24 maxlen: 24
185.119.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115438845 (0x6e174fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: May 10 09:37:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1b16158c7f97cf5e5d76dd12dbb22c7ca2bc50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:00:e3:ab:b7:3f:7f:fa:5b:17:a8:1e:80:
2e:30:12:20:6b:85:32:11:a4:2b:c3:78:12:ea:7c:
4a:70:92:c7:e7:1e:f3:c0:0e:b8:2e:62:90:be:27:
13:28:4d:82:7c:80:79:1d:a7:b8:29:69:8c:4e:4b:
1d:a9:e5:f5:8b:4d:28:9a:79:cd:fb:ef:06:ff:c2:
8f:f6:5a:a2:17:fa:c3:54:ec:9f:5b:3f:8c:9d:54:
bf:16:df:98:cc:f0:3a:62:9c:25:1c:5c:5d:80:4d:
be:ab:4f:1e:0e:95:16:e1:5a:a2:bb:c3:1c:8f:71:
2d:e5:42:c4:b7:a9:26:42:9f:a5:5a:ad:e6:e2:33:
86:11:71:9d:6b:ad:a3:34:e7:77:e2:c4:bc:a0:f2:
7d:88:e1:28:38:bb:42:b7:7a:93:ca:d5:8b:a8:ee:
a1:c6:d4:5b:b9:06:dc:a6:33:27:fd:f0:77:0d:1f:
02:36:47:d6:99:58:ff:20:de:6c:f7:83:f1:cc:4e:
86:cf:b0:17:b2:2d:14:cd:9d:8e:9d:5a:cb:60:ae:
47:3c:04:b9:41:59:9e:a7:d2:95:4f:f9:16:ae:af:
40:2e:28:6a:cf:d8:6f:9f:8d:18:6b:3b:06:65:a3:
18:c7:53:44:39:53:22:e7:75:42:d4:17:9b:06:d9:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:61:58:C7:F9:7C:F5:E5:D7:6D:D1:2D:BB:22:C7:CA:2B:C5:0C
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/8bFhWMf5fPXl123RLbsix8orxQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.89.0-185.119.90.255
185.241.212.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:6f:1d:c5:08:dd:70:b0:49:78:bf:44:5d:82:79:12:94:b4:
6c:dd:34:3e:c6:de:61:09:71:f0:27:0d:f3:4e:87:da:fb:a3:
de:5e:d0:08:db:b4:20:ff:e6:7b:2e:51:32:4c:ba:fd:77:d1:
4e:b9:1e:b2:50:82:57:0d:07:a5:8c:c9:f2:58:b7:6f:50:3c:
67:ed:9d:84:9b:ef:b1:aa:f1:ea:3f:8d:34:51:4a:d6:72:45:
a3:76:dd:cf:2c:88:b5:ff:f9:5b:2d:5a:b9:ad:c9:f7:fb:fe:
b7:f8:0f:9b:d8:6c:b6:63:a4:fe:1b:d4:32:35:5f:d0:36:95:
0d:3d:f3:e2:42:75:09:73:61:2d:48:f8:9c:80:1b:e2:37:fa:
97:a8:6e:51:fc:14:1d:a9:ed:9d:3a:0d:50:d8:33:fd:d6:57:
39:36:95:4a:d2:82:fe:cf:5e:96:f7:cd:b6:80:b0:80:55:e1:
74:3f:a2:b3:17:b1:83:a3:22:97:ba:a3:b6:28:37:69:b8:cb:
a2:b5:4a:8e:b1:13:90:f8:86:0f:5c:b3:cc:3a:25:12:df:86:
c1:f7:8c:7e:59:10:46:5f:25:7c:c3:ba:24:7c:7a:4e:08:6b:
94:8e:8f:fe:17:89:ab:c6:20:5e:e6:04:4b:52:1e:92:8c:c7:
d7:bb:9d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:07 2023 by rpki-client on console-ams.rpki-client.org