Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/P8rKUkcyrUMyiqP6-ckpcuIfmlA.roa
File: P8rKUkcyrUMyiqP6-ckpcuIfmlA.roa (raw, json)
Hash identifier: A7DlauM29CKou8yGaIcIb8U3q4sz1efjlktveSIryoM=
Subject key identifier: 3F:CA:CA:52:47:32:AD:43:32:8A:A3:FA:F9:C9:29:72:E2:1F:9A:50
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 011A41F6
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/P8rKUkcyrUMyiqP6-ckpcuIfmlA.roa
Signing time: Sat 01 Jan 2022 10:00:27 +0000
ROA not before: Sat 01 Jan 2022 10:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 185.213.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18498038 (0x11a41f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Jan 1 10:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fcaca524732ad43328aa3faf9c92972e21f9a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:dd:57:01:12:8f:14:29:1e:61:88:54:a3:
64:3f:5f:e2:c7:4a:ae:93:49:bc:c6:28:01:04:d4:
43:36:f6:bf:38:a8:d6:d0:c7:d8:07:1e:07:27:1d:
6f:fa:9b:b5:e1:8c:33:46:f5:a2:59:30:f5:cc:ec:
9f:ab:db:df:a6:b2:bf:1f:cd:41:c5:83:de:a4:1f:
fe:ca:1e:1c:71:0f:38:48:f7:e7:dd:56:7d:72:39:
5a:e0:22:50:52:3f:4c:b9:62:6f:76:d9:9c:4a:ef:
c7:29:49:a8:b2:bf:c1:40:bd:2c:2b:13:77:dc:a2:
71:a3:14:8b:d2:66:a7:67:cf:bf:22:d2:a7:48:3a:
a2:97:dc:62:41:52:3c:a8:b7:78:6e:ea:59:3c:14:
6d:f1:19:f4:e1:b6:33:00:ed:3f:3f:9b:b8:48:a9:
b5:62:43:58:a8:61:84:82:28:48:43:22:a6:84:b4:
82:1b:c6:24:b1:05:07:42:da:8e:ad:f5:a5:2d:41:
c4:90:f1:8b:69:30:11:a5:85:9c:cc:8b:7a:30:d7:
fe:53:f2:98:38:e1:c5:32:ea:4c:30:15:2a:2a:8b:
4c:c8:60:d8:1f:25:db:9e:72:76:58:76:7c:c3:9b:
4c:11:86:16:8b:c5:a4:40:ec:c8:72:3b:28:16:4d:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CA:CA:52:47:32:AD:43:32:8A:A3:FA:F9:C9:29:72:E2:1F:9A:50
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/P8rKUkcyrUMyiqP6-ckpcuIfmlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.168.0/24
Signature Algorithm: sha256WithRSAEncryption
28:41:e7:b0:8c:83:56:34:7b:d8:1f:ec:a6:95:ea:a5:fd:2d:
f1:db:65:3b:c6:9b:7a:5e:57:4d:2c:25:63:3f:38:41:29:12:
93:11:7e:8c:92:77:d0:6c:81:e2:a1:ae:21:cc:4f:38:10:b4:
e3:08:a3:a9:0b:44:33:1e:b7:8e:72:6c:61:21:48:6e:27:fd:
06:6c:5e:8f:ae:b7:ce:c7:c4:6c:9b:6e:e8:71:cf:27:5a:17:
41:04:ff:33:bb:35:84:13:ea:f6:29:57:e2:77:37:3a:11:ca:
81:b1:6b:b6:bf:71:e9:14:91:96:06:0b:fb:7a:bb:c8:21:d1:
bf:d8:d2:71:7b:fa:6b:c1:3a:ac:6c:1e:e2:a3:6b:de:9a:ae:
b4:54:e7:7d:74:38:73:ca:b0:d6:08:4d:03:54:ba:1e:eb:30:
92:1e:a9:a8:9d:72:2a:16:a9:8d:aa:4e:a6:77:fa:15:b9:34:
dd:e3:81:5a:de:20:50:03:70:90:6d:a2:29:a5:e8:66:33:2d:
04:5d:a1:c3:c0:e0:17:93:ee:dc:31:72:5a:54:b0:f9:26:66:
a8:be:a4:21:63:e6:59:55:b3:c9:46:c9:e1:46:ea:53:63:4a:
9e:e4:d8:1f:17:bd:ec:62:5f:e1:53:fb:8e:13:a7:fe:fd:e2:
d5:7b:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:53 2025 by rpki-client