Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/i8HjS5WZn-DaKev0NGaAxkHm5pw.roa
File: i8HjS5WZn-DaKev0NGaAxkHm5pw.roa (raw, json)
Hash identifier: DHC6prD6rg/AMAAOvn+7eoB9r0IvTmb6FPrHvl8UBXg=
Subject key identifier: 8B:C1:E3:4B:95:99:9F:E0:DA:29:EB:F4:34:66:80:C6:41:E6:E6:9C
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 26331578
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/i8HjS5WZn-DaKev0NGaAxkHm5pw.roa
Signing time: Sat 01 Jan 2022 07:02:51 +0000
ROA not before: Sat 01 Jan 2022 07:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8896
IP address blocks: 185.41.241.0/24 maxlen: 24
185.152.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 640882040 (0x26331578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Jan 1 07:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bc1e34b95999fe0da29ebf4346680c641e6e69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:ef:65:cd:ed:27:8b:89:4e:19:d2:e8:97:
d6:e7:94:0b:ae:a9:21:f5:ce:12:a1:28:b4:c5:8e:
f3:c0:75:18:a0:d9:0d:39:d8:e8:df:fe:b7:8b:5e:
7e:22:03:66:97:74:f8:08:ca:a1:96:a3:e6:a9:75:
46:1e:36:6a:37:15:20:2d:95:06:cb:33:81:25:7f:
6d:74:0c:2c:7e:ff:78:25:4f:2c:fa:94:81:55:9a:
90:48:f4:f3:9e:fe:25:ab:32:42:9e:85:ac:a9:de:
03:03:c5:df:8d:48:a7:14:74:55:26:1a:b1:1f:0f:
99:a7:2e:30:2f:ea:c0:9b:1b:9c:83:df:00:77:76:
5e:17:e2:0b:e3:b8:f1:ca:a5:ee:fa:88:b8:e9:8c:
a2:31:8d:69:8f:50:fd:94:cc:0c:af:74:6d:2b:90:
d9:24:ef:f9:75:db:cf:af:9f:5e:26:3b:48:08:e8:
55:6d:4f:3f:5b:e2:34:5e:2a:6b:f2:0e:9a:bd:f4:
9e:35:f2:36:cb:ec:d5:1e:c8:5f:7a:1e:04:29:f7:
e6:04:a3:41:b4:9c:c1:9e:36:2f:90:f4:13:91:91:
78:24:d7:15:91:79:36:87:1d:db:f0:06:c4:49:23:
8d:b0:3c:96:4d:68:0f:1f:a1:fa:64:de:ed:de:76:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C1:E3:4B:95:99:9F:E0:DA:29:EB:F4:34:66:80:C6:41:E6:E6:9C
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/i8HjS5WZn-DaKev0NGaAxkHm5pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.241.0/24
185.152.33.0/24
Signature Algorithm: sha256WithRSAEncryption
08:90:1b:16:fb:7f:e0:94:f5:08:9d:8b:85:cd:f4:5e:87:4b:
97:61:14:a9:7a:09:d4:75:eb:c2:3f:21:cd:4c:fa:05:1e:d2:
cb:29:37:36:19:ef:39:f9:17:b0:e5:11:b8:98:ed:3b:ca:0e:
a3:1f:10:20:53:6e:b5:ab:2f:67:3b:d8:9e:bc:56:45:fe:b1:
ad:99:96:eb:7b:65:0b:3c:2a:dd:14:4b:32:f4:4b:a7:f7:5e:
3c:02:d2:87:ad:ad:d9:75:c1:04:98:c0:cb:ab:67:54:af:e8:
bf:71:d3:5d:78:19:28:7f:c2:d9:e0:e9:9a:de:b4:bb:e3:a9:
0a:dc:da:c4:f7:41:67:b7:38:31:83:ff:ef:35:8d:39:ed:9c:
6c:52:52:81:b2:33:a7:58:e0:3e:4b:d7:8b:82:82:2d:2a:42:
5b:b6:2b:ff:ee:c3:42:d7:a9:fd:1a:54:e5:66:d3:60:af:73:
bb:02:c4:3f:65:b5:ab:a6:25:19:f0:1f:92:98:77:68:0b:a9:
37:de:d1:b3:66:25:2c:20:cd:37:0e:15:41:f9:ee:da:24:0e:
b5:f9:23:db:b7:c9:a4:5e:b6:4f:54:40:ab:2b:f8:3b:38:b2:
9d:35:75:56:f3:55:20:1d:f5:e3:ff:95:dc:6d:22:96:e6:ef:
cb:12:14:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:22 2023 by rpki-client on console-fra.rpki-client.org