Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/8T0-29ybOxWX91KouCGewZSjCFc.roa
File: 8T0-29ybOxWX91KouCGewZSjCFc.roa (raw, json)
Hash identifier: MODm1z8hkOvhRJ4IFubUy3VB7seU4huf/DRjB+bN5Oo=
Subject key identifier: F1:3D:3E:DB:DC:9B:3B:15:97:F7:52:A8:B8:21:9E:C1:94:A3:08:57
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 01856CAF22C8CE42931D93B56A681E4C5AFC
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/8T0-29ybOxWX91KouCGewZSjCFc.roa
Signing time: Sun 01 Jan 2023 09:34:55 +0000
ROA not before: Sun 01 Jan 2023 09:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202606
IP address blocks: 185.54.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:22:c8:ce:42:93:1d:93:b5:6a:68:1e:4c:5a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Jan 1 09:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f13d3edbdc9b3b1597f752a8b8219ec194a30857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:21:98:09:76:24:e2:cb:a2:e9:f5:00:6a:
6a:79:2d:92:19:35:1b:4e:24:09:fe:1d:0c:9d:24:
75:ca:db:50:16:a8:81:1f:9e:da:ad:2f:06:e5:b3:
eb:d2:01:41:10:a9:cf:96:b5:3a:9a:03:db:61:94:
1d:7a:72:3e:6a:38:58:e3:f3:8d:1e:e8:cd:7f:d7:
0d:5a:e9:9a:d2:f6:27:b6:06:06:35:11:37:03:2c:
10:b3:af:f3:c2:ed:4f:6a:30:7c:70:28:2f:7e:5e:
8c:22:7d:72:6f:77:ff:98:27:fa:27:b5:72:ba:7f:
98:57:56:c0:8f:89:79:d2:0a:aa:c9:0b:0d:09:a9:
ef:f6:80:60:3b:ef:3c:3f:05:e2:cb:87:f2:e8:2b:
58:b9:2f:fc:ff:8b:62:51:c0:78:ca:0d:a7:1f:dc:
5c:ce:73:94:75:5b:df:88:84:dc:5f:e6:00:db:67:
df:75:7e:ca:83:84:4a:ee:ed:0d:2f:49:61:6e:ef:
67:08:96:bb:dc:dc:a6:f4:c8:5e:b6:26:d9:fe:4b:
b9:e4:ad:87:5d:7c:d0:ee:ff:7a:86:21:9d:8d:cb:
28:c0:ca:72:3f:d0:82:26:c3:cd:f0:00:38:1d:f0:
9c:54:5b:dc:f2:99:ab:b5:39:af:0d:24:4e:97:46:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3D:3E:DB:DC:9B:3B:15:97:F7:52:A8:B8:21:9E:C1:94:A3:08:57
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/8T0-29ybOxWX91KouCGewZSjCFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.216.0/23
Signature Algorithm: sha256WithRSAEncryption
73:1e:88:00:8e:e9:92:b0:03:0b:be:63:84:8b:8f:90:69:9a:
1d:1f:08:b0:a4:24:b5:c9:90:43:cd:ae:31:6b:d2:59:d4:dd:
8c:1a:dc:50:6c:f7:82:99:8e:fa:7c:a0:b4:bb:86:77:c9:38:
50:ef:14:a0:2f:e0:ae:37:a8:9b:39:79:ff:6d:b0:f0:a6:e3:
b4:35:11:5e:a4:ee:36:2d:9d:51:db:04:90:5c:fb:30:a8:41:
0e:64:b3:d4:97:4a:90:4d:2f:51:36:3c:0a:7b:1b:17:45:7a:
09:ac:18:a1:1c:68:81:5c:5b:63:f9:eb:17:bc:6e:31:6a:37:
25:41:91:8c:da:cf:28:13:a9:78:c3:e4:1e:3e:7a:c5:99:c3:
8a:f1:94:a9:53:15:f9:a5:5a:2d:2a:6c:a9:24:81:62:8a:02:
56:a9:f2:03:4b:6b:be:c6:c6:03:0e:e9:3f:77:33:e6:28:23:
4c:a1:10:2e:4b:9f:de:e8:d3:7f:c4:1a:d9:7b:f0:53:90:ae:
91:9e:79:67:94:8c:37:d7:9e:99:6f:8b:16:35:a0:8b:1c:c6:
d8:0f:b5:12:6e:4b:fa:44:35:64:c7:bd:b3:75:ae:e7:fb:fa:
db:73:1e:53:e6:0f:c0:c4:7a:32:ee:ec:85:00:28:4f:a1:4b:
da:6f:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:03:15 2025 by rpki-client