Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/8yjDWxpmy8w_zo7x1f6Mvjhk2Co.roa
File: 8yjDWxpmy8w_zo7x1f6Mvjhk2Co.roa (raw, json)
Hash identifier: cxAyAx1bycmoLa+J5G2jWpJbguzac1xZa7iJdtkYhBg=
Subject key identifier: F3:28:C3:5B:1A:66:CB:CC:3F:CE:8E:F1:D5:FE:8C:BE:38:64:D8:2A
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 018A4C10CF13672C57C86F7A03492EEE867D
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/8yjDWxpmy8w_zo7x1f6Mvjhk2Co.roa
Signing time: Thu 31 Aug 2023 14:48:04 +0000
ROA not before: Thu 31 Aug 2023 14:48:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216445
IP address blocks: 185.160.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:10:cf:13:67:2c:57:c8:6f:7a:03:49:2e:ee:86:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Aug 31 14:48:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f328c35b1a66cbcc3fce8ef1d5fe8cbe3864d82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:dc:ca:e6:bc:a1:f6:a8:f5:4a:74:6d:77:
a6:d2:50:07:56:5b:cb:42:43:3a:2f:5c:49:92:46:
14:15:d1:74:b4:f2:7a:f5:75:33:89:b5:4d:e4:eb:
e4:70:51:d1:0a:37:8c:8a:e5:d7:00:c0:23:d1:1c:
85:fd:19:43:30:bb:65:3c:ee:15:5a:22:22:62:b2:
40:85:89:86:c6:95:17:50:aa:01:b4:fa:bf:05:92:
be:ee:2d:49:92:dc:0d:0c:ae:8a:98:06:25:16:d0:
f2:21:40:b4:4c:2b:6c:01:07:9d:d7:b7:84:10:89:
e6:82:c9:07:f7:4f:d4:29:ce:74:98:55:f0:08:54:
e4:ed:66:ba:e9:d8:dd:0e:ba:42:c3:74:ca:86:7f:
67:b3:9a:8e:58:4b:31:02:fe:ae:5a:10:72:4e:aa:
4f:ff:2d:62:1d:6a:c9:23:f7:d8:2c:8f:45:35:13:
5a:9d:cd:fb:56:39:c5:62:9e:76:3e:9c:26:80:7a:
81:78:57:46:1d:ef:73:39:64:2d:e9:3f:e8:63:e7:
59:8c:00:a7:d0:f5:40:a9:a6:2a:5c:b3:78:c3:28:
5c:ae:06:a9:a3:ad:db:7d:6d:73:c9:af:35:1d:ae:
be:9b:88:71:3d:9c:fc:cb:e3:67:27:f8:07:03:22:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:C3:5B:1A:66:CB:CC:3F:CE:8E:F1:D5:FE:8C:BE:38:64:D8:2A
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/8yjDWxpmy8w_zo7x1f6Mvjhk2Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a3:81:72:12:2e:25:dc:86:ba:2c:a2:2b:70:0b:03:78:a2:
6e:d5:01:c5:25:74:6b:65:27:fb:8a:87:f9:ee:56:56:a0:0b:
c2:6a:e2:cd:a7:31:bd:64:ab:58:68:cb:ef:07:d1:77:9e:f7:
c4:6b:82:5b:bb:4f:bd:be:b5:b5:b4:15:bc:7d:50:e0:85:39:
0c:71:87:35:9e:50:64:83:19:4f:5b:04:26:63:f0:3c:89:0c:
f6:a2:7a:06:ae:c8:f0:90:18:d2:51:d1:10:c9:d8:ca:c1:d1:
1a:a0:5f:94:5f:c1:8c:1a:7e:e6:46:dc:ff:ef:d6:85:33:16:
ca:29:9d:f6:27:56:5a:b3:f3:e9:ac:74:78:13:f5:ce:09:58:
5f:d3:37:8f:76:cc:f6:2f:9e:a2:be:fa:09:8e:63:cc:a3:0c:
05:31:43:aa:36:03:3f:6d:cc:86:0c:d0:b1:79:bc:76:e9:f7:
ad:96:40:49:9b:19:65:e4:67:09:40:1b:b8:08:12:19:f4:2c:
e7:3a:c7:a8:09:0c:d6:48:9b:a3:30:90:5b:6c:12:f1:23:a9:
d2:8e:1c:90:21:ef:dc:64:3e:4f:d1:3f:96:6e:67:4d:53:f0:
fe:ba:15:4a:e2:be:22:bc:c9:2b:ff:0c:2c:5b:35:49:c8:5f:
68:ce:bb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:10 2025 by rpki-client