Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/1-P0JO1_cOwtdX623NIOZLjCAo6A.roa
File: 1-P0JO1_cOwtdX623NIOZLjCAo6A.roa (raw, json)
Hash identifier: aC+/pmUPcw6FCiXAlz4jqvpIvaCCcmF8jrCklYgn48M=
Subject key identifier: F8:FD:09:3B:5F:DC:3B:0B:5D:5F:AD:B7:34:83:99:2E:30:80:A3:A0
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 0A7A146B
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/1-P0JO1_cOwtdX623NIOZLjCAo6A.roa
Signing time: Sat 01 Jan 2022 09:03:24 +0000
ROA not before: Sat 01 Jan 2022 09:03:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2200
IP address blocks: 134.206.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175772779 (0xa7a146b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Jan 1 09:03:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8fd093b5fdc3b0b5d5fadb73483992e3080a3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:08:86:fd:be:b0:13:3b:4e:22:80:9a:b7:
e7:28:03:bb:cf:4b:e4:0c:94:1f:aa:82:65:1f:b3:
68:9e:02:f9:42:bc:43:a4:df:31:88:44:42:4d:78:
44:cb:6a:b5:77:05:a5:3d:a5:77:a1:40:e7:0a:37:
39:d0:78:e6:73:a2:1c:c2:cd:82:30:a6:eb:41:68:
3f:c3:40:59:5d:98:fd:e4:6c:0d:30:f5:e1:95:d6:
4e:04:2b:8c:1e:77:80:ac:9f:a8:d3:5f:96:9f:74:
b7:77:12:a2:91:3b:6c:66:4e:20:ae:1d:ff:a3:03:
a9:38:6c:95:36:33:69:ca:80:0b:bd:ab:17:98:b9:
17:09:ea:a7:81:0f:e8:29:29:42:fc:16:23:37:ca:
75:d1:41:cf:e2:bb:67:df:06:cb:a7:ef:f1:71:9f:
b5:23:02:21:7a:c1:b9:95:32:a9:89:7e:59:7d:22:
a1:da:3c:4a:b8:12:1f:d6:e6:60:41:24:9d:6d:35:
34:06:fa:d3:90:2d:c9:5e:fc:35:72:5e:56:af:fd:
39:ba:7c:e7:76:a0:3d:05:b7:b5:08:63:23:9b:3d:
9f:cf:36:b4:82:2d:0a:1f:44:f0:53:09:91:bf:69:
1d:a8:d8:7b:0f:32:0e:88:d1:12:85:07:e5:b4:6d:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FD:09:3B:5F:DC:3B:0B:5D:5F:AD:B7:34:83:99:2E:30:80:A3:A0
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/1-P0JO1_cOwtdX623NIOZLjCAo6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:68:aa:76:d3:48:47:f2:fc:eb:5d:7d:aa:98:81:12:87:7e:
20:1c:53:2d:53:1f:0e:81:29:6a:7e:3a:1c:3a:be:7c:84:bb:
30:66:29:dd:96:73:c4:f5:d0:99:33:ec:44:48:e6:82:92:9b:
66:62:84:c6:b7:8b:8c:40:e8:96:9e:a7:45:ba:a5:10:55:b1:
c8:d5:e5:cf:4e:d4:9b:8c:65:4f:aa:12:52:89:02:4c:16:c9:
17:47:a1:63:3d:a7:02:f3:e6:df:dc:ab:50:3a:2e:ed:7d:30:
56:f5:7c:db:28:f0:b1:c6:bd:34:7f:4a:fa:14:42:b4:2d:c4:
d3:ba:c3:1c:06:ae:c7:db:79:d9:83:d5:fd:21:e0:eb:7e:c9:
6c:5f:5a:e8:4a:78:bb:20:7b:74:eb:0b:f6:c6:b3:88:2f:5f:
30:da:5c:2f:da:69:3b:f8:7f:d8:25:df:12:46:a0:c3:cb:3e:
23:1c:7f:c4:95:bf:e0:54:9d:56:32:5f:f9:82:03:6a:ee:b9:
89:88:23:b2:ef:00:d7:d4:05:3d:d0:c7:f7:af:0c:d1:b1:c3:
0a:7a:43:2b:59:25:a2:db:79:74:af:12:54:53:87:93:c2:f8:
6e:dd:71:50:5d:d4:e2:a6:e5:b6:dc:34:19:1d:fe:38:f6:44:
77:3a:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:14 2025 by rpki-client