Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/8ItLHXWiF63c3bCN7YFZhjb5E9U.roa
File: 8ItLHXWiF63c3bCN7YFZhjb5E9U.roa (raw, json)
Hash identifier: YJd1DdNqyIe4ub8iRFF4QDgCs8HY7AFTOfeJ477cWJU=
Subject key identifier: F0:8B:4B:1D:75:A2:17:AD:DC:DD:B0:8D:ED:81:59:86:36:F9:13:D5
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 018602B46F1B1561D4DF5E8691702F488CE4
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/8ItLHXWiF63c3bCN7YFZhjb5E9U.roa
Signing time: Mon 30 Jan 2023 12:43:44 +0000
ROA not before: Mon 30 Jan 2023 12:43:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49558
IP address blocks: 93.183.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:b4:6f:1b:15:61:d4:df:5e:86:91:70:2f:48:8c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Jan 30 12:43:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f08b4b1d75a217addcddb08ded81598636f913d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:42:b4:c7:3b:62:fc:9d:38:23:4c:c9:22:
4f:ab:42:76:ac:b5:8c:b7:3e:8b:75:9f:3a:c1:d7:
0c:28:68:84:d2:8b:22:10:9c:80:b5:96:e0:41:5d:
ce:a7:78:98:81:d0:f1:27:79:37:d9:46:b5:6e:9d:
c4:2b:46:1c:fd:7a:60:40:99:57:cf:f4:6b:92:b9:
5a:60:bd:57:1a:c7:7f:2c:d2:d8:04:78:15:45:f3:
ee:3f:b1:ef:61:9f:3d:84:38:a7:56:a9:86:75:69:
00:5a:5e:96:c1:6d:d8:5b:6d:a5:4c:5b:57:19:6d:
60:f0:ef:bc:98:15:e1:6d:d3:0c:ec:b6:41:5a:3d:
cc:d7:35:33:31:b7:6a:59:d4:d9:e3:12:83:5b:bb:
69:17:42:ae:73:71:e7:e9:4b:33:7f:d9:31:1b:3d:
a5:e6:62:6a:16:fd:8b:71:c7:d9:28:5d:1c:78:cf:
f5:35:0e:0d:e6:07:d5:24:60:3e:2b:77:c1:d3:55:
a0:23:83:8f:6c:d6:d2:78:f5:e7:73:30:17:04:88:
00:ee:a6:5a:bb:f4:3b:06:22:71:2a:19:b7:36:58:
9f:16:cf:72:2d:84:df:fb:79:66:16:6d:59:a3:51:
9e:cc:e4:e4:c7:36:b4:dc:87:3e:98:d6:0f:63:83:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:4B:1D:75:A2:17:AD:DC:DD:B0:8D:ED:81:59:86:36:F9:13:D5
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/8ItLHXWiF63c3bCN7YFZhjb5E9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.120.0/22
Signature Algorithm: sha256WithRSAEncryption
19:21:6d:ac:2e:20:e9:28:d2:07:b4:ef:40:c3:4f:42:9b:f5:
d5:b5:ac:1c:cd:eb:68:2b:e0:e5:48:8b:a5:9b:97:6b:22:65:
5b:fc:9c:a9:18:07:e6:d2:eb:5b:f7:c2:3f:aa:3b:d4:c7:24:
6d:52:cb:71:6c:0c:31:c6:da:2e:06:cb:e9:0d:25:cc:ac:6f:
e8:07:86:1c:2a:80:43:b1:90:98:97:12:12:4d:ec:2d:8f:bd:
ed:d8:1a:ad:32:3b:78:50:27:46:b5:11:b1:a1:36:ab:e2:d4:
18:cb:27:5e:17:b8:49:0d:49:90:f5:97:df:ca:ca:10:f8:cb:
a4:fc:b4:26:1a:ac:02:98:51:65:ce:4c:85:9c:36:de:48:95:
5c:22:87:2b:a6:81:b9:2d:e0:d4:d1:4c:f1:51:d4:b0:39:da:
b8:99:ee:19:11:81:fa:27:7d:7f:9a:3d:fd:7a:58:e6:30:93:
17:24:e4:a2:b0:76:39:f8:b8:5a:af:cc:77:17:5e:1a:ca:5f:
9a:2a:9d:21:d9:1c:e4:69:6c:0c:d3:67:0d:90:80:35:fb:9d:
85:7f:73:34:89:14:9b:73:91:3c:2d:1e:49:5c:9a:ac:e6:a8:
06:88:ab:5d:ad:1f:a4:ef:b3:5b:3f:7a:dd:0a:0b:aa:11:0a:
76:be:5a:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYCtG8bFWHU316GkXAvSIzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTRkYzk2OGVkNTI5MzVhMDRkZWUzYjIyOWMyMWNhOWJm
ZGJkN2UwHhcNMjMwMTMwMTI0MzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDhiNGIxZDc1YTIxN2FkZGNkZGIwOGRlZDgxNTk4NjM2ZjkxM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusZCtMc7YvydOCNMySJPq0J2rLWM
tz6LdZ86wdcMKGiE0osiEJyAtZbgQV3Op3iYgdDxJ3k32Ua1bp3EK0Yc/XpgQJlX
z/RrkrlaYL1XGsd/LNLYBHgVRfPuP7HvYZ89hDinVqmGdWkAWl6WwW3YW22lTFtX
GW1g8O+8mBXhbdMM7LZBWj3M1zUzMbdqWdTZ4xKDW7tpF0Kuc3Hn6Uszf9kxGz2l
5mJqFv2LccfZKF0ceM/1NQ4N5gfVJGA+K3fB01WgI4OPbNbSePXnczAXBIgA7qZa
u/Q7BiJxKhm3NlifFs9yLYTf+3lmFm1Zo1GezOTkxza03Ic+mNYPY4Pf5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCLSx11ohet3N2wje2BWYY2+RPVMB8GA1UdIwQY
MBaAFOnk3JaO1Sk1oE3uOyKcIcqb/b1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEt
NmM3ODU2ZWY3YjMxLzEvOEl0TEhYV2lGNjNjM2JDTjdZRlpoamI1RTlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEtNmM3ODU2ZWY3YjMx
LzEvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXbd4MA0G
CSqGSIb3DQEBCwUAA4IBAQAZIW2sLiDpKNIHtO9Aw09Cm/XVtawczetoK+DlSIul
m5drImVb/JypGAfm0utb98I/qjvUxyRtUstxbAwxxtouBsvpDSXMrG/oB4YcKoBD
sZCYlxISTewtj73t2BqtMjt4UCdGtRGxoTar4tQYyydeF7hJDUmQ9ZffysoQ+Muk
/LQmGqwCmFFlzkyFnDbeSJVcIocrpoG5LeDU0UzxUdSwOdq4me4ZEYH6J31/mj39
eljmMJMXJOSisHY5+Lhar8x3F14ayl+aKp0h2RzkaWwM02cNkIA1+52Ff3M0iRSb
c5E8LR5JXJqs5qgGiKtdrR+k77NbP3rdCguqEQp2vlqO
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:58 2025 by rpki-client