Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/8r-uOOOiPeQrRVnQcbSw2DmPz5I.roa
File: 8r-uOOOiPeQrRVnQcbSw2DmPz5I.roa (raw, json)
Hash identifier: VG6iO+efE4vPgc3/ej+LSx47FxM05ERJfv5M59rPFfU=
Subject key identifier: F2:BF:AE:38:E3:A2:3D:E4:2B:45:59:D0:71:B4:B0:D8:39:8F:CF:92
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 028BDF0E
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/8r-uOOOiPeQrRVnQcbSw2DmPz5I.roa
Signing time: Sat 01 Jan 2022 04:53:02 +0000
ROA not before: Sat 01 Jan 2022 04:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60593
IP address blocks: 185.196.134.0/23 maxlen: 24
2a09:a5c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42721038 (0x28bdf0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Jan 1 04:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2bfae38e3a23de42b4559d071b4b0d8398fcf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:3e:2d:9f:1b:7b:d7:a3:bb:96:3f:b0:d1:
c3:17:0f:ad:cb:b2:86:7f:0a:10:63:32:dd:d6:b0:
22:f2:43:86:a4:c8:e1:a4:bd:fb:14:85:c6:0e:29:
39:6a:06:63:c6:9c:02:6c:20:ff:7a:39:f1:11:56:
bd:02:4a:c7:03:6e:b5:73:4d:a6:ff:c7:df:0e:7b:
38:6c:94:25:b8:19:63:fd:5b:56:35:2b:9a:a9:9d:
c7:8d:10:a7:b0:91:7c:f3:c6:aa:00:b1:d8:ce:e5:
ef:4d:fc:7c:e5:d7:91:57:03:e9:09:bd:05:5f:90:
44:99:cb:69:35:a8:79:a7:2a:2c:d3:cb:93:6c:c5:
7c:84:1c:7c:8c:19:d6:06:ad:62:f8:53:d6:2e:6b:
35:8a:91:96:13:7c:4a:64:f7:1e:95:c0:44:47:be:
bf:1d:71:51:ff:f7:9a:30:20:0b:4d:8e:55:61:30:
27:5e:62:2f:db:ad:97:10:03:ff:5a:06:48:1f:f8:
78:37:36:cc:e2:ba:fe:d9:c0:79:9b:a8:13:73:29:
4a:92:9a:32:44:ba:fa:f7:f2:7c:19:95:81:d5:6a:
e9:24:cd:bb:68:e8:d3:eb:29:0c:ab:51:5f:b3:2a:
8b:5a:6e:b2:6d:f6:63:c2:7a:61:8a:24:66:12:f7:
54:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:AE:38:E3:A2:3D:E4:2B:45:59:D0:71:B4:B0:D8:39:8F:CF:92
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/8r-uOOOiPeQrRVnQcbSw2DmPz5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.134.0/23
IPv6:
2a09:a5c0::/29
Signature Algorithm: sha256WithRSAEncryption
cc:39:13:09:4f:73:f0:c2:a3:c8:7a:ec:be:70:22:ac:2f:be:
43:42:c1:3d:4d:62:a0:51:67:4a:5a:c0:1a:3a:a4:a4:a3:69:
12:1a:7b:ed:0e:e6:42:f0:50:16:20:99:11:18:14:a6:86:8e:
b3:af:9d:f0:25:88:f1:9e:dd:49:b0:9c:37:51:14:9c:b0:c1:
07:72:3f:80:4d:60:d2:90:fe:d1:ee:7f:48:76:c8:aa:f3:9b:
96:b4:d6:ea:04:6e:75:57:b0:ca:69:82:eb:a0:c3:9a:dd:3a:
43:64:dc:7d:e2:bf:59:4b:d4:11:ef:5e:75:f6:13:cc:b6:c2:
53:6a:83:71:8d:bb:34:2a:32:ea:de:32:94:be:d5:f2:4b:08:
a5:b5:90:c8:de:c7:ab:7d:66:ae:34:66:58:ed:c3:06:2b:46:
70:05:c0:c2:bf:43:01:a2:1e:a4:31:d2:44:47:6f:43:00:73:
14:09:f7:07:96:7b:ce:db:69:49:df:3c:1b:12:d2:d3:de:bb:
b4:24:8a:d4:3f:a0:0b:fd:d4:86:54:92:a9:d5:ba:1f:93:cd:
37:a2:34:3e:7b:16:9c:b2:97:49:89:ed:ae:16:16:9c:97:6e:
e2:8b:2f:76:9b:ec:7a:c3:a4:b8:f9:a3:7a:73:eb:af:78:ad:
1e:1d:5a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:56 2025 by rpki-client