Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/F0_8qsIfwOdEu3h1ROeIUUtsU34.roa
File: F0_8qsIfwOdEu3h1ROeIUUtsU34.roa (raw, json)
Hash identifier: Ovx4zIxoAR6aB95CC9lntbFj1rlcWi1+Usd5RuoIjiA=
Subject key identifier: 17:4F:FC:AA:C2:1F:C0:E7:44:BB:78:75:44:E7:88:51:4B:6C:53:7E
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 01856E0AF408B7B243D247364449222124B4
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/F0_8qsIfwOdEu3h1ROeIUUtsU34.roa
Signing time: Sun 01 Jan 2023 15:54:49 +0000
ROA not before: Sun 01 Jan 2023 15:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207715
IP address blocks: 185.229.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f4:08:b7:b2:43:d2:47:36:44:49:22:21:24:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Jan 1 15:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=174ffcaac21fc0e744bb787544e788514b6c537e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:63:5e:50:d0:ef:6c:eb:dc:92:1a:22:0d:
4a:21:d9:e3:60:ee:32:4a:92:8e:63:e3:87:a2:0b:
a1:dc:90:b8:8e:a5:ae:18:7e:5c:29:e7:99:27:75:
d1:48:fa:ab:f7:88:f0:c4:2e:94:0d:36:29:be:22:
f2:3b:51:d3:0b:28:ba:76:92:ee:c0:87:b5:fd:b0:
db:94:9c:48:29:b3:08:09:30:3a:b2:ae:e5:a2:d7:
8e:89:c7:89:4e:9b:2c:4e:1b:a9:64:a6:0b:8f:65:
03:fb:53:8a:0e:f5:05:de:ec:65:8d:84:c8:78:8e:
7f:c4:32:5d:14:76:ff:dd:8d:7b:4f:e8:56:9e:0d:
5f:8d:9f:35:34:4d:97:8b:25:ea:d4:b1:35:72:49:
61:1f:89:ea:f1:3c:67:a2:8d:e6:15:40:c1:11:33:
04:77:bf:4f:d4:5e:b9:c6:0d:6e:aa:a4:db:26:79:
93:51:8b:4d:44:de:75:dc:15:51:a2:2c:49:e2:2a:
c8:5f:ca:a5:56:95:6a:54:7c:b5:1b:d6:38:95:c1:
7c:bc:d6:53:a0:1c:1f:fe:6e:45:3f:e5:8a:ff:30:
c9:c8:35:5f:18:62:33:18:bb:73:e2:dd:18:c4:8b:
63:01:5a:16:f3:ac:91:77:38:b1:5e:53:31:b8:d9:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:FC:AA:C2:1F:C0:E7:44:BB:78:75:44:E7:88:51:4B:6C:53:7E
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/F0_8qsIfwOdEu3h1ROeIUUtsU34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.100.0/22
Signature Algorithm: sha256WithRSAEncryption
34:8e:71:04:db:9c:ef:5b:b7:d0:96:17:93:d9:0d:3f:1e:a8:
fb:53:34:a2:42:b6:f5:da:86:b3:77:a2:03:20:ef:27:b7:ad:
b6:86:dc:f7:2c:00:04:03:37:58:1f:c4:55:7e:f5:0d:62:05:
1b:6e:36:08:b1:44:2d:31:7b:0c:55:04:3d:f3:65:d4:53:65:
cc:e0:10:47:9c:ff:ec:1c:fe:82:6f:9d:50:3e:7b:3f:64:05:
83:b0:f7:50:72:a7:ac:97:85:cd:41:31:13:16:9c:a3:ad:90:
6c:a9:43:a4:4c:dc:15:89:4c:d4:94:51:67:93:6b:37:5f:a9:
0b:45:6f:ed:48:c5:04:1a:27:76:d8:4d:10:0e:ab:ad:f6:6a:
3b:72:1c:71:e7:c1:72:20:d8:9d:8d:4d:87:2d:41:40:4a:e6:
4f:fa:87:b2:e6:5b:98:3d:1b:17:9c:c2:89:55:33:1b:68:94:
44:b3:bf:e4:ba:91:94:ea:18:44:fa:88:83:07:e9:ac:58:73:
d2:ba:62:1d:51:58:51:8e:8f:34:b6:07:ad:ce:a1:30:18:ee:
12:1a:de:ed:ea:f1:85:85:b1:e7:cc:1e:f4:87:98:b9:c8:0f:
fa:99:eb:07:d5:c9:e8:48:14:95:26:06:ba:24:3f:6c:6b:18:
c7:2a:e4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:28 2025 by rpki-client