Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/IHUC5dnde6oaLs2RWXpq4pz3Ae4.roa
File: IHUC5dnde6oaLs2RWXpq4pz3Ae4.roa (raw, json)
Hash identifier: AK1y/jlKdzMW1bBwKpzb1YmJ7LDtVJo9uMQ9QaQXUfY=
Subject key identifier: 20:75:02:E5:D9:DD:7B:AA:1A:2E:CD:91:59:7A:6A:E2:9C:F7:01:EE
Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial: 01898CD6FE65D1B5CC8FC936B7BD9815EAAA
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/IHUC5dnde6oaLs2RWXpq4pz3Ae4.roa
Signing time: Tue 25 Jul 2023 11:37:27 +0000
ROA not before: Tue 25 Jul 2023 11:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8925
IP address blocks: 212.8.192.0/19 maxlen: 24
212.15.192.0/19 maxlen: 24
2001:ae0::/31 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:d6:fe:65:d1:b5:cc:8f:c9:36:b7:bd:98:15:ea:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Validity
Not Before: Jul 25 11:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=207502e5d9dd7baa1a2ecd91597a6ae29cf701ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:9c:e3:c4:0f:61:74:71:26:ff:b1:1f:e6:
ee:2d:83:4a:ff:cc:03:58:41:f9:03:73:5b:d7:16:
ce:9a:cc:ef:4e:65:e8:d9:18:cc:17:99:d2:9f:af:
74:ab:de:29:8b:7c:e7:31:ed:4f:8c:c5:ff:ac:0b:
73:b3:0d:66:48:8a:ef:8d:ed:04:ec:4f:1c:9e:38:
e4:f5:7c:7c:28:dc:89:d1:78:c7:6b:4c:04:85:ee:
09:23:72:55:ec:80:2b:dd:0c:84:ca:58:1b:2b:21:
e7:0c:bb:d1:be:99:b9:27:6c:6a:b4:96:b2:d8:6a:
f3:52:7f:56:e0:f5:be:8f:f0:ee:97:3c:e6:b6:06:
35:f1:02:6a:d7:18:91:65:42:41:d0:bb:1b:96:62:
0d:48:1b:85:9c:59:fb:15:96:4a:21:c2:57:77:86:
42:13:2d:a3:6d:a6:b7:17:92:ac:16:51:c9:42:28:
7c:04:4e:b2:ad:0c:9d:f7:e4:02:bc:f4:84:35:8d:
e1:dc:54:c3:e3:bd:7a:24:c4:3e:70:9a:c2:63:ed:
05:bf:24:7c:d1:3a:00:c5:2d:b4:d3:fb:73:1c:53:
d1:aa:01:99:fa:af:b9:bd:ad:e8:73:b4:dc:f5:58:
36:fc:85:7f:54:b2:5b:5c:be:dd:73:86:c7:32:23:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:75:02:E5:D9:DD:7B:AA:1A:2E:CD:91:59:7A:6A:E2:9C:F7:01:EE
X509v3 Authority Key Identifier:
keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/IHUC5dnde6oaLs2RWXpq4pz3Ae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.192.0/19
212.15.192.0/19
IPv6:
2001:ae0::/31
Signature Algorithm: sha256WithRSAEncryption
59:a6:89:65:05:de:f7:b3:a0:99:b0:ef:bb:5e:33:f9:ac:62:
bc:dc:59:c1:11:e7:6f:31:10:e0:56:aa:6d:46:1d:31:4d:c4:
fb:8d:c3:92:b2:ad:b7:f2:c6:6e:65:5f:4e:10:00:4f:48:13:
31:3f:47:81:95:f4:10:ae:b4:12:66:4c:47:92:35:32:3d:17:
33:26:9a:e9:12:37:0b:0f:9c:4e:0f:f6:a5:2a:ac:63:aa:89:
85:30:ce:2c:b3:cf:34:d1:6d:b2:dc:7d:f6:a7:31:f4:82:f6:
03:a6:a6:84:62:20:51:49:1e:2d:a0:ca:a8:c9:97:95:f3:f4:
af:1a:72:8e:5c:da:c5:59:fa:81:39:29:06:93:90:c6:69:3b:
07:66:28:e9:d4:d2:4a:10:39:53:6e:62:a5:22:6d:d5:f9:3d:
9d:f0:7d:43:21:58:3d:4a:c5:fc:de:cc:7f:b1:0e:a3:d5:97:
9d:72:bf:c1:29:00:63:8d:1c:a7:1f:19:cb:31:7b:d0:a4:81:
a6:6c:66:23:25:08:cc:c9:0a:bd:5d:47:b1:f3:96:6c:28:2e:
20:41:54:3e:94:40:22:aa:fa:8a:af:b3:ea:82:ea:cf:b8:a7:
1d:c5:9e:5b:b2:66:b9:b5:1e:7f:38:6c:99:84:e1:e0:29:ec:
ed:9a:5e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:43 2025 by rpki-client