Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/8j69ZzR_DU4Y7HFxN1ySNWQ5cCA.roa
File: 8j69ZzR_DU4Y7HFxN1ySNWQ5cCA.roa (raw, json)
Hash identifier: /oLl4zDjNy21yBjnu0k9WOw8mzmfhllfiiLnBC32XSs=
Subject key identifier: F2:3E:BD:67:34:7F:0D:4E:18:EC:71:71:37:5C:92:35:64:39:70:20
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 0186BC552058405714D4193C2A8E1F5F2457
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/8j69ZzR_DU4Y7HFxN1ySNWQ5cCA.roa
Signing time: Tue 07 Mar 2023 13:49:00 +0000
ROA not before: Tue 07 Mar 2023 13:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207810
IP address blocks: 185.167.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:55:20:58:40:57:14:d4:19:3c:2a:8e:1f:5f:24:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Mar 7 13:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f23ebd67347f0d4e18ec7171375c923564397020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:59:a9:90:a1:bc:a4:3c:be:72:95:07:a9:
29:8f:c0:34:05:24:8d:14:50:46:61:93:ac:f7:5d:
b9:36:a6:35:4b:28:f4:98:fc:74:88:ca:41:cf:1b:
47:66:6f:0a:fe:b3:77:7b:90:f2:c3:31:a8:98:d0:
a9:80:d2:eb:f5:61:fe:fe:07:7c:0e:c7:21:3d:27:
f8:e0:4c:0d:81:95:33:60:9f:00:36:8b:42:2d:08:
e0:47:84:43:58:ec:9f:32:09:33:f1:c2:35:f5:75:
9b:ef:97:d5:b5:f1:29:2c:45:ed:34:9b:95:33:de:
7b:37:f8:c3:e0:68:7b:9e:84:72:13:63:6a:cb:78:
b0:29:78:60:bf:05:c6:79:5f:1c:2e:a7:89:d8:3f:
cf:e8:8a:b5:b6:ea:d7:90:0e:78:74:c1:16:a8:1a:
e4:32:e8:c8:b0:2b:bc:b0:f9:69:8c:1c:e2:d9:f4:
98:62:93:b5:f5:8f:69:02:d8:94:e5:ef:a0:3b:64:
12:68:83:34:ca:04:19:fb:38:d6:0e:89:6a:45:57:
ad:b9:07:ab:11:5c:d5:bd:13:e6:1f:6b:05:7d:07:
45:89:85:76:4d:15:7b:66:0f:a2:fa:bd:db:ff:47:
03:3a:9f:4b:88:31:18:9e:e6:5b:bc:9c:85:77:d4:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:BD:67:34:7F:0D:4E:18:EC:71:71:37:5C:92:35:64:39:70:20
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/8j69ZzR_DU4Y7HFxN1ySNWQ5cCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:2a:0d:c5:4e:fd:e5:1a:42:11:39:b6:fd:af:1b:d5:72:f8:
a0:c7:ce:80:41:b8:fe:c1:86:61:1c:93:7b:1f:d4:b8:66:8e:
ff:63:0d:db:48:87:1a:d7:94:6b:ce:3d:6d:0f:59:5c:60:ab:
ef:bc:cc:ff:ba:93:29:8c:78:07:ed:36:04:c9:e7:52:c6:85:
a7:75:b7:1f:2a:f8:fa:0d:09:4d:2c:08:7a:c7:62:a4:ff:7e:
5d:7e:ef:4d:0b:90:d9:d8:a6:f0:53:b1:0d:86:b2:73:5e:10:
cf:74:31:9c:0e:da:71:0b:d0:12:00:28:9b:c4:9a:14:8b:e4:
a5:2b:ea:f0:dc:e6:c1:72:51:56:b5:2e:db:14:d7:80:97:ad:
58:23:b2:44:f4:99:10:2a:42:c9:88:04:36:7e:95:fb:41:e3:
e5:90:e4:5f:88:b3:67:e2:2f:76:85:fc:51:04:31:16:a7:34:
b5:9d:23:71:28:9b:00:67:9f:fe:a0:f0:72:4f:61:e3:0a:38:
e8:97:18:97:4d:c5:c4:e7:85:f2:9d:c6:bb:7c:3f:c0:e8:a5:
d9:27:82:89:f6:59:50:37:76:aa:ff:02:c4:fd:d9:f1:5d:db:
bd:bc:d8:58:b7:eb:91:b0:74:75:be:9b:74:5b:1c:76:47:db:
6c:47:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:48 2025 by rpki-client