Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/8eJkq7oTUhy7EwKZJWmCrb8zLFs.roa
File: 8eJkq7oTUhy7EwKZJWmCrb8zLFs.roa (raw, json)
Hash identifier: 9RYfJJpfyt3T1IlSkiOzA61OLyjBMP6bOB1lQVGqEe4=
Subject key identifier: F1:E2:64:AB:BA:13:52:1C:BB:13:02:99:25:69:82:AD:BF:33:2C:5B
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 0BE66F
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/8eJkq7oTUhy7EwKZJWmCrb8zLFs.roa
Signing time: Mon 02 May 2022 17:49:20 +0000
ROA not before: Mon 02 May 2022 17:49:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62053
IP address blocks: 188.215.115.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779887 (0xbe66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: May 2 17:49:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1e264abba13521cbb130299256982adbf332c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:b8:16:f4:7b:0c:a4:ae:80:88:0b:81:1a:
bc:00:2e:89:c0:d6:29:2d:35:dd:97:53:b0:bf:b9:
9b:f0:e6:8e:00:c4:0d:65:87:58:06:3c:40:75:46:
93:3e:61:e5:0a:7d:d1:ee:bb:12:a6:4a:64:de:81:
1c:f6:aa:e8:b0:c1:09:fc:20:a4:51:bd:29:7c:3a:
11:1c:f2:f8:e9:c3:ae:d3:d9:d0:e4:be:36:62:4d:
c5:9a:a8:b7:c9:56:c1:63:9a:ec:ae:f8:72:0f:cb:
92:6d:66:85:5a:2d:e0:6e:ce:ab:df:38:d2:04:26:
18:9a:a8:bf:1b:41:8f:75:93:b4:04:0e:75:5b:0b:
7b:37:bd:2d:db:28:a9:9e:c6:7a:bb:45:ba:58:c4:
75:fe:54:2c:3f:65:99:a0:22:8c:35:7f:36:87:e6:
e1:ba:32:a9:fe:ef:ff:00:fa:21:23:1f:73:42:90:
52:95:a6:80:0f:d5:79:22:69:c5:e9:1a:53:c0:4b:
9d:5f:58:19:9f:93:59:05:42:b2:9e:85:0e:7c:16:
de:d8:d0:8f:75:39:ae:3f:8f:01:8b:8a:a5:5e:2a:
22:66:57:14:79:97:25:d4:e6:a3:a0:93:98:b3:5e:
57:f6:00:62:16:79:dc:8f:1f:91:06:15:20:e8:a3:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E2:64:AB:BA:13:52:1C:BB:13:02:99:25:69:82:AD:BF:33:2C:5B
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/8eJkq7oTUhy7EwKZJWmCrb8zLFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6e:c8:dc:9d:1a:c6:5b:10:79:a2:36:ea:e2:4c:25:e9:a5:
b9:4e:32:20:cc:05:9a:b1:ad:1f:8a:2d:d3:b2:c6:85:eb:25:
c1:ec:5e:ed:49:6f:dd:cc:3e:c3:a5:0e:f6:60:70:d8:65:ad:
b8:5c:ae:f2:a3:ad:07:aa:c1:66:a9:4c:28:49:51:ed:c2:37:
be:0b:8f:f7:0e:bd:a1:69:89:12:ec:bb:14:03:86:43:0a:5c:
50:c6:7d:78:e6:16:56:3c:e2:5a:f2:0f:15:63:dc:0a:85:dc:
70:14:73:f8:8b:c2:44:6b:9c:dc:f1:ea:66:9c:40:86:74:f3:
4b:48:82:2e:85:09:0f:62:3b:39:9b:8c:92:81:c5:8d:0b:6b:
2c:b0:a5:15:6b:49:7b:72:17:a1:c1:db:ba:e9:6f:e8:87:bd:
53:3c:99:e8:a5:1e:6e:a6:f5:f3:50:12:5c:af:c2:d9:0a:f6:
19:02:0d:85:7b:2e:e9:cc:3d:41:f4:b7:54:11:7a:3a:36:29:
52:c6:93:06:5a:c2:7b:f6:5f:b1:60:91:ff:a0:2a:27:cf:3d:
dc:04:02:b8:fd:82:c9:86:50:f4:f6:23:59:7c:20:30:80:9c:
89:04:6d:18:ad:d6:9f:ed:d2:67:34:18:60:96:b9:82:ad:21:
65:7d:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:08 2025 by rpki-client