Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/8JDuvlArh_fJq_mJtW_Qswbf8Ro.roa
File: 8JDuvlArh_fJq_mJtW_Qswbf8Ro.roa (raw, json)
Hash identifier: 2kPSc0bzGTlBgbMErpXHOUdzHMTyUpeHRObWNfMjnBo=
Subject key identifier: F0:90:EE:BE:50:2B:87:F7:C9:AB:F9:89:B5:6F:D0:B3:06:DF:F1:1A
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 01896FD9B8CDD957DE20FA52FB697CF0F8E6
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/8JDuvlArh_fJq_mJtW_Qswbf8Ro.roa
Signing time: Wed 19 Jul 2023 20:31:26 +0000
ROA not before: Wed 19 Jul 2023 20:31:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 185.80.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:d9:b8:cd:d9:57:de:20:fa:52:fb:69:7c:f0:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Jul 19 20:31:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f090eebe502b87f7c9abf989b56fd0b306dff11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:78:ab:e3:70:6d:b2:80:ed:2e:02:38:97:87:
2c:62:fd:37:27:a7:7c:39:ac:ae:f0:b3:3e:48:ad:
e2:cb:fe:27:43:c2:e4:11:36:f9:b5:35:a5:60:2d:
c8:84:71:6b:7a:e3:34:3f:f1:b8:fe:54:5a:af:e4:
2d:9c:c8:fd:97:02:70:f0:96:97:5e:61:a6:0d:f5:
bb:e5:ed:ae:6b:4e:39:87:ff:e6:7d:b2:23:32:74:
53:6a:45:c2:03:86:36:d1:96:d1:11:af:21:b6:a9:
7d:44:7c:1e:c8:70:3a:f0:c2:ad:17:6e:01:67:d9:
c4:0e:c5:74:f9:a1:23:95:86:90:2b:8b:97:d3:97:
ef:76:67:e5:fe:2a:ab:04:d2:ab:ac:68:35:1c:62:
af:5f:7d:0a:8e:76:c2:fe:40:80:9f:7c:13:a9:64:
f5:7e:25:b2:c9:13:20:fc:5b:6a:ce:ab:4c:52:6c:
5b:a0:19:44:f6:63:a9:d4:06:08:a2:6e:b3:ff:20:
ad:77:6d:e3:e0:b9:bf:bb:46:75:fb:79:7b:b4:6d:
95:2e:31:83:26:ea:9d:3b:23:26:ad:9a:70:2d:cd:
45:d5:51:a7:f9:d8:24:4e:e4:51:45:f1:36:9b:b3:
91:39:f2:4c:94:4d:64:5d:65:0b:d5:b6:e3:8c:a8:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:90:EE:BE:50:2B:87:F7:C9:AB:F9:89:B5:6F:D0:B3:06:DF:F1:1A
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/8JDuvlArh_fJq_mJtW_Qswbf8Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.91.0/24
Signature Algorithm: sha256WithRSAEncryption
87:56:02:dd:d6:91:84:7e:36:75:83:84:f0:08:79:79:5d:8a:
b5:cd:55:f8:9b:de:3c:ce:22:f5:b2:d2:e2:f4:1c:d2:b1:33:
93:01:ac:02:0d:6d:69:ca:51:79:2d:a1:76:0c:a1:11:38:f1:
12:1c:af:cc:7d:b9:83:33:e2:35:0b:89:31:d9:58:6e:8f:e3:
a9:6a:24:ec:46:b6:6f:aa:bf:11:91:e7:d9:c6:7b:f8:4d:1d:
d9:15:4b:4c:75:f0:4b:1a:1e:f8:9c:7d:32:c6:64:59:a0:78:
22:fb:30:91:f4:92:56:e6:6d:fe:ff:4d:d5:78:8c:bf:e3:af:
76:7a:6b:70:77:22:ee:5c:f1:6d:96:f3:d4:c8:b2:ac:26:9f:
62:16:f0:34:c1:e8:16:f5:4f:25:15:83:b0:e1:47:65:ec:b0:
ef:54:ea:93:0d:31:80:c8:e7:64:2e:08:cf:90:a3:08:3f:63:
fd:b1:b1:4b:8d:8b:6d:d6:47:e7:92:b1:2f:05:8d:b3:32:73:
67:b0:97:9a:5c:0f:01:b4:a4:8a:84:97:82:77:09:cf:91:fb:
e6:2a:c7:19:62:50:0b:a5:b6:e9:1f:79:96:84:81:86:52:5c:
1c:2a:65:d0:e5:51:bf:f3:59:54:3d:44:b6:d9:c2:9e:a5:d5:
d2:81:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:06 2025 by rpki-client