Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/i0zvz7lISQXdRk92fNn6FMAbF5E.roa
File: i0zvz7lISQXdRk92fNn6FMAbF5E.roa (raw, json)
Hash identifier: bVjjYnZyazR5w2SBvaNXOOKMtX800DvzEiekNeBYFnE=
Subject key identifier: 8B:4C:EF:CF:B9:48:49:05:DD:46:4F:76:7C:D9:FA:14:C0:1B:17:91
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 01880ED2164B4A8E312B2F2C0FBA0D37359B
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/i0zvz7lISQXdRk92fNn6FMAbF5E.roa
Signing time: Fri 12 May 2023 07:17:09 +0000
ROA not before: Fri 12 May 2023 07:17:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51175
IP address blocks: 188.123.199.0/24 maxlen: 24
188.123.204.0/22 maxlen: 22
188.123.212.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:d2:16:4b:4a:8e:31:2b:2f:2c:0f:ba:0d:37:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: May 12 07:17:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b4cefcfb9484905dd464f767cd9fa14c01b1791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:c0:92:da:be:6d:06:9f:69:ba:70:d3:2a:
c8:0a:24:ae:d7:ad:41:a6:bf:2c:ab:2f:61:41:bf:
34:05:ae:8c:a2:9a:6b:ca:78:c0:52:48:12:ad:04:
71:50:7a:58:df:72:05:6b:e4:f2:e0:dc:0c:dd:a2:
9a:4c:31:95:51:15:73:c9:54:fe:bd:14:5a:cb:d0:
d4:9e:a0:62:47:20:05:3b:18:2b:4f:66:e4:fe:fd:
58:79:d1:67:71:47:a3:e7:f3:23:94:3a:c7:95:55:
11:cd:1b:7e:e9:3b:73:86:8e:e0:9b:5e:25:a0:21:
4d:81:62:1d:31:39:cb:dc:57:c9:f5:e8:26:61:e8:
98:43:b3:9b:98:a4:73:e6:89:de:36:be:d1:7e:86:
eb:3a:8f:f7:72:32:7d:4d:d6:f5:a7:00:6d:1b:90:
87:41:1a:f4:18:37:61:53:69:41:77:f1:02:fa:51:
03:c2:e0:41:a2:fd:ce:06:56:da:f1:11:bc:48:12:
c2:bc:7c:61:24:18:f4:6f:c2:bf:20:e7:d6:ec:5a:
c8:ae:02:80:da:64:8e:a2:a4:9d:fb:31:a5:93:bf:
7e:60:a7:de:1d:a8:94:f8:d5:d1:74:17:45:21:9b:
7a:e6:b8:ee:9b:4f:dd:7b:76:7d:74:06:df:f3:e1:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4C:EF:CF:B9:48:49:05:DD:46:4F:76:7C:D9:FA:14:C0:1B:17:91
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/i0zvz7lISQXdRk92fNn6FMAbF5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.123.199.0/24
188.123.204.0/22
188.123.212.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:fa:54:38:78:15:54:fc:cc:c9:18:b7:a8:86:74:60:e2:b3:
3c:90:9f:20:47:bb:4f:19:21:28:c0:1f:b3:91:ea:6f:f1:b8:
6e:c3:e6:45:8a:f5:e6:4d:9f:e4:a6:dd:5c:a6:ab:e9:a9:14:
42:a1:f1:81:58:2b:d7:aa:06:e8:4d:a4:3e:c3:07:8e:7c:b7:
5b:0c:51:f2:b6:57:35:5d:42:bb:df:22:23:bc:48:55:d3:62:
0a:f7:93:ce:44:7b:fe:50:dd:97:f5:a7:6a:b7:d7:64:d0:6d:
17:50:21:e9:37:de:4e:2b:2a:c2:b0:06:2a:ff:69:3b:db:8a:
ff:d0:ba:37:b8:0a:db:7e:40:69:b4:c6:f1:3d:86:38:91:56:
2e:88:90:a4:df:99:0a:67:a4:6f:20:d1:d5:f1:d7:92:f1:c2:
b9:67:42:05:70:ff:a1:dd:64:01:1e:33:7d:0e:a3:b5:b7:b5:
3b:8c:ba:9f:cf:ab:5b:6d:47:50:76:23:e9:30:e6:f2:4e:90:
f9:35:67:a1:ec:7d:67:d9:4e:4b:4b:eb:b9:60:1f:1f:a9:27:
67:09:4e:4d:57:e0:95:d3:29:9b:31:d5:b5:42:1e:b2:91:75:
30:60:fd:16:86:75:07:2c:c1:98:f0:ed:e8:5f:d1:0a:71:57:
48:d6:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:49 2025 by rpki-client