Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/8e0hWg8Eu8BlzDM7-ApR68-srRk.roa
File: 8e0hWg8Eu8BlzDM7-ApR68-srRk.roa (raw, json)
Hash identifier: HwUu4thJMLKf6ds9mjwzOTY60rbJESANaQkYULxsPbw=
Subject key identifier: F1:ED:21:5A:0F:04:BB:C0:65:CC:33:3B:F8:0A:51:EB:CF:AC:AD:19
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 018B4C8DB1F546BE72E719C78AFC08A0177F
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/8e0hWg8Eu8BlzDM7-ApR68-srRk.roa
Signing time: Fri 20 Oct 2023 10:07:16 +0000
ROA not before: Fri 20 Oct 2023 10:07:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51178
IP address blocks: 91.197.192.0/22 maxlen: 22
185.132.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:8d:b1:f5:46:be:72:e7:19:c7:8a:fc:08:a0:17:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Oct 20 10:07:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1ed215a0f04bbc065cc333bf80a51ebcfacad19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7f:30:76:e1:af:b0:5a:94:fd:56:b0:03:ff:
c0:44:fc:ea:2a:eb:ef:b7:25:57:ea:dc:cb:f2:d3:
d3:7c:a7:14:62:e1:e2:59:1f:e4:72:dd:b4:78:76:
0d:ac:8c:98:c0:1b:dd:70:0f:63:d6:ce:a5:61:af:
b3:8d:0d:29:dc:be:69:fe:82:bf:92:01:7e:2e:54:
d0:5b:f6:ff:5d:1c:f9:fc:e3:da:b5:45:e9:8e:8d:
3d:46:3a:17:fc:6a:ee:0b:9a:4e:aa:f6:97:22:f1:
13:b2:de:45:6d:24:9c:56:9f:7d:76:f2:3c:35:70:
77:4d:67:14:04:79:0d:c0:23:51:d9:27:1c:61:77:
44:80:56:18:0c:15:1b:6c:d1:a6:d5:8c:48:33:fd:
fa:6f:c9:00:c9:48:c9:3e:10:b1:3f:38:f1:95:9c:
ba:e8:2c:b9:68:61:56:d7:e6:ae:4b:d7:12:13:9f:
fd:b2:c6:13:2d:48:fa:91:26:15:39:55:ae:de:30:
e9:5f:60:74:39:f7:e9:7c:44:b8:ee:4b:ad:f6:f2:
d6:b8:4a:23:b0:2e:73:8c:ec:0a:50:1b:46:bd:7b:
59:75:88:6d:f8:a2:8d:ab:df:a6:c4:0f:81:11:f9:
d9:fc:34:87:24:5e:7a:93:12:82:7c:8f:b5:3e:cc:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:ED:21:5A:0F:04:BB:C0:65:CC:33:3B:F8:0A:51:EB:CF:AC:AD:19
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/8e0hWg8Eu8BlzDM7-ApR68-srRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.192.0/22
185.132.196.0/23
Signature Algorithm: sha256WithRSAEncryption
60:9f:b1:cc:fc:ba:91:23:fa:87:df:29:e3:fa:20:f2:a9:7f:
ed:e4:22:cd:85:05:6b:d5:5d:2c:ac:e4:78:65:28:42:27:f7:
e3:c3:a9:56:a8:55:ad:81:88:83:f7:2e:5f:7c:f1:78:48:e9:
39:58:f9:3d:07:11:3d:7e:56:44:1f:b1:96:1b:9a:bf:25:19:
62:6c:74:87:fe:1d:0b:8a:83:3c:71:c0:5d:29:9d:9e:4d:42:
67:73:89:d6:cf:7f:c7:59:fb:3a:7d:f0:67:d4:e4:36:d9:6e:
25:4e:64:21:e1:6e:75:e4:33:f1:88:bd:a6:6e:01:5e:91:34:
6d:67:eb:75:c6:7d:8d:09:80:d1:6e:e3:6f:50:e3:60:40:67:
60:d6:d6:53:01:da:bc:c8:de:e1:12:fe:40:4b:47:11:01:d5:
e7:b9:6e:1b:6e:ba:2f:dc:79:3f:99:9b:c7:22:41:3a:c5:41:
c8:05:ce:7f:c6:35:b2:54:a2:1e:8c:45:19:f5:b1:39:68:13:
2b:f7:23:8f:ff:04:c0:65:d8:ec:c9:5d:fb:88:e3:3b:d1:ea:
a5:38:1e:0b:4d:99:01:82:d7:1e:3b:0c:6b:23:11:ea:8d:1e:
2b:b7:98:67:50:a4:a2:35:3f:9f:21:48:32:6f:84:f0:34:24:
53:a2:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:38 2025 by rpki-client