Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/z8Ka-2inJALVY9kCwcvr9vyDZ84.roa
File: z8Ka-2inJALVY9kCwcvr9vyDZ84.roa (raw, json)
Hash identifier: 3xengDCF/c8c9k9Agsi8C2njQmrO5ELZg5stxOuwyNQ=
Subject key identifier: CF:C2:9A:FB:68:A7:24:02:D5:63:D9:02:C1:CB:EB:F6:FC:83:67:CE
Certificate issuer: /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial: 01856EB91FD4CE5024E4A7E452F21BF506B8
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/z8Ka-2inJALVY9kCwcvr9vyDZ84.roa
Signing time: Sun 01 Jan 2023 19:05:04 +0000
ROA not before: Sun 01 Jan 2023 19:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8478
IP address blocks: 185.90.212.0/22 maxlen: 22
109.74.176.0/20 maxlen: 20
2a00:17a8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:1f:d4:ce:50:24:e4:a7:e4:52:f2:1b:f5:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Validity
Not Before: Jan 1 19:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfc29afb68a72402d563d902c1cbebf6fc8367ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:9a:f4:28:46:ff:17:13:15:2c:6f:fe:2a:
3e:9d:88:09:3a:95:af:34:eb:e2:ed:9f:52:c5:d5:
16:de:c3:cf:fc:20:da:d6:da:48:63:d1:19:6d:94:
a0:43:72:3b:21:7f:03:d4:2d:68:2f:e6:e5:80:45:
b9:40:17:c7:67:8e:38:31:0d:de:76:ae:30:19:4b:
27:45:1e:f9:fc:b1:bd:ca:66:ed:22:f5:f9:c3:15:
31:13:16:af:c3:5b:bb:ff:db:7b:77:e6:2d:09:a6:
9d:a6:01:a9:b0:fe:21:92:79:e2:c0:29:77:63:61:
47:ac:3e:ef:40:85:f9:d0:50:bf:c0:d2:c5:85:df:
4e:74:f4:21:40:33:56:0b:fe:db:ea:77:73:6f:35:
82:e5:dd:af:ed:f8:aa:ec:b5:0d:32:55:14:a8:76:
4b:96:96:0d:6c:a5:a4:fd:a3:bf:a1:09:7d:11:93:
d9:42:c2:ac:2c:1f:fc:aa:0c:0f:b0:a0:65:f9:8c:
d2:d9:21:54:02:39:a4:6a:b5:3e:5c:87:50:97:fc:
5d:36:58:93:40:1a:8b:17:ae:aa:1e:db:c1:10:36:
b5:a9:93:a0:a3:09:63:b8:6e:77:f5:fd:6d:23:f3:
ec:fd:da:22:cb:23:bf:bd:e1:93:2e:84:6c:c4:2b:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C2:9A:FB:68:A7:24:02:D5:63:D9:02:C1:CB:EB:F6:FC:83:67:CE
X509v3 Authority Key Identifier:
keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/z8Ka-2inJALVY9kCwcvr9vyDZ84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.176.0/20
185.90.212.0/22
IPv6:
2a00:17a8::/32
Signature Algorithm: sha256WithRSAEncryption
50:bb:54:ef:dd:da:d9:f7:f2:6c:86:26:3f:5e:b4:29:44:96:
37:e2:bd:dc:f1:b5:18:c5:c7:41:09:a4:07:67:6a:23:5a:15:
11:b7:ef:27:29:9c:42:0b:ce:0c:77:98:30:80:29:f1:35:69:
c4:ea:8c:e9:2c:df:71:84:38:e0:a3:9c:ed:4f:05:0b:6f:22:
78:87:79:99:56:37:e1:2c:e3:29:b7:ef:9a:7b:33:1e:fa:2e:
f7:3b:d4:0e:7e:36:45:6d:f2:16:91:a4:ed:c7:b6:58:a2:5f:
56:25:3b:8d:b5:a8:d5:37:e3:29:f1:76:13:f4:12:ab:5f:f4:
54:9a:75:17:ce:6e:17:90:f8:21:16:bf:f4:e9:fd:8d:f0:db:
cd:61:86:81:66:fb:d0:48:27:94:eb:fc:04:c9:fe:95:6b:ac:
6f:a9:83:b1:c6:c3:51:2f:c8:b5:57:07:7c:17:9f:34:47:f3:
36:f0:10:fd:b0:bf:e1:70:fe:70:61:28:d1:6e:e9:c6:90:0b:
7e:f5:31:29:9b:fd:52:99:16:15:38:e2:63:75:11:0f:b2:73:
5d:96:c9:68:22:a8:82:e7:b4:35:90:62:a6:54:f8:83:11:c4:
7a:37:f6:22:67:bc:73:c4:50:9b:b4:ad:d9:88:2b:6e:7b:88:
e6:88:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:43:50 2025 by rpki-client