Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/8EIy8UuAcBa7Of2BWoKDapxtHcI.roa
File: 8EIy8UuAcBa7Of2BWoKDapxtHcI.roa (raw, json)
Hash identifier: kH+rK5znMMQU/4ZiSxoV7PiA9Il3vQ2mjCAmzjN3Rgw=
Subject key identifier: F0:42:32:F1:4B:80:70:16:BB:39:FD:81:5A:82:83:6A:9C:6D:1D:C2
Certificate issuer: /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial: 0A082F4B
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/8EIy8UuAcBa7Of2BWoKDapxtHcI.roa
Signing time: Sat 01 Jan 2022 13:01:52 +0000
ROA not before: Sat 01 Jan 2022 13:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8365
IP address blocks: 82.195.64.0/19 maxlen: 24
91.243.70.0/24 maxlen: 24
185.55.124.0/22 maxlen: 24
2001:41b8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168308555 (0xa082f4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
Validity
Not Before: Jan 1 13:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f04232f14b807016bb39fd815a82836a9c6d1dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:88:18:7f:b9:a7:90:9d:a5:c3:05:e4:4a:
bc:67:d6:16:a7:98:0a:03:7a:b8:3c:88:25:86:21:
46:51:b9:1c:c2:c3:ac:07:04:09:f9:bd:c6:c3:92:
c8:04:49:a7:da:06:b5:cb:aa:8c:f2:fc:4b:a1:05:
21:40:1e:0d:f5:59:89:41:9f:b1:b7:19:cc:85:ff:
f9:18:54:b9:3d:54:59:2f:70:91:be:03:ea:0d:1a:
76:3b:fc:f1:76:05:91:8b:13:b6:c3:3f:a4:19:88:
b9:22:44:59:05:e3:4b:3e:6f:22:10:e0:59:15:af:
5c:19:e9:46:2a:c1:6f:88:60:93:43:2c:c4:f2:05:
18:28:f4:7f:af:ca:01:b2:b9:ef:2d:8c:68:49:e2:
8e:e0:9d:f8:19:25:e3:af:71:2a:fb:00:75:09:c1:
92:c2:9d:72:b8:94:d3:c9:f8:d6:8c:f5:ff:e8:f6:
6f:14:8c:b8:c1:e6:b3:e6:b2:fa:41:8c:37:25:9b:
d7:77:81:4d:47:3d:cb:13:c8:63:29:57:7c:70:76:
51:e2:aa:41:e9:31:8e:fa:32:75:54:a4:33:96:f4:
f9:a9:59:02:1c:1f:af:b1:9c:b1:fa:52:c8:50:9d:
43:2c:c5:ef:b3:6e:75:aa:09:78:52:59:27:ba:31:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:32:F1:4B:80:70:16:BB:39:FD:81:5A:82:83:6A:9C:6D:1D:C2
X509v3 Authority Key Identifier:
keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/8EIy8UuAcBa7Of2BWoKDapxtHcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.64.0/19
91.243.70.0/24
185.55.124.0/22
IPv6:
2001:41b8::/32
Signature Algorithm: sha256WithRSAEncryption
23:a0:ff:cc:3f:4f:06:3a:43:67:20:51:e9:5a:2b:62:c4:cb:
f6:bc:7d:a7:0d:90:02:9a:4a:96:ab:aa:f5:c1:53:7c:bd:e7:
b1:24:2e:84:3f:d1:70:b7:f4:4c:51:8f:f0:3e:e5:83:01:b2:
3c:65:96:5d:29:f7:07:28:61:5a:1d:06:1b:12:d8:40:2d:2a:
e1:f7:c6:e4:7b:92:35:dc:7d:61:f9:17:29:42:c6:e3:4d:f7:
65:79:f7:f0:a7:3d:1d:d9:0e:e2:e4:fc:a4:15:c1:2c:76:e5:
e7:fc:26:01:ed:b0:9f:96:8e:e3:d8:41:45:2b:7b:84:b8:01:
fe:cb:6e:9e:e5:9f:6e:59:97:07:c7:64:83:24:ac:bd:9b:3f:
2e:c1:84:4a:ca:0f:f1:1c:34:38:24:48:47:d1:2b:8f:71:cf:
29:1f:57:c7:66:44:9e:7b:56:87:91:d8:d6:e4:9b:53:c1:ff:
44:96:0e:d6:b9:a1:1d:37:0c:04:56:79:3e:90:66:c8:56:5f:
ce:a2:8d:b3:42:fd:78:69:3e:ca:af:da:26:e3:7e:dd:63:bb:
8c:99:27:50:d0:84:92:9e:5d:9d:f0:52:3b:cb:ff:5b:f7:f8:
ee:08:d5:a6:af:04:9a:57:48:60:9c:d3:12:4a:e7:4c:b3:4c:
2f:68:54:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:55 2025 by rpki-client