Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8CmMsgnKbSM5jWQ-2k_F3FJ72eo.roa
File: 8CmMsgnKbSM5jWQ-2k_F3FJ72eo.roa (raw, json)
Hash identifier: uiEDV5VtIDcFFneDsTGnZgsXVeAY7wa0ZnpHIJNixp0=
Subject key identifier: F0:29:8C:B2:09:CA:6D:23:39:8D:64:3E:DA:4F:C5:DC:52:7B:D9:EA
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 0184AA0910B01385F9DF259D31481048F22E
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8CmMsgnKbSM5jWQ-2k_F3FJ72eo.roa
Signing time: Thu 24 Nov 2022 14:27:11 +0000
ROA not before: Thu 24 Nov 2022 14:27:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35176
IP address blocks: 185.252.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:09:10:b0:13:85:f9:df:25:9d:31:48:10:48:f2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Nov 24 14:27:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0298cb209ca6d23398d643eda4fc5dc527bd9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:de:df:3f:6e:84:8e:dc:b9:2d:ec:e0:e8:
3c:53:42:bd:56:fb:da:2d:2f:0b:36:d6:c8:1b:55:
c1:48:9e:c2:7c:f0:80:9e:43:b0:f2:ae:28:b0:de:
3a:37:5f:c2:df:45:08:0e:a7:10:1f:2b:6a:56:29:
73:b5:65:29:5a:ea:63:53:dc:7e:24:ce:65:a7:d9:
06:6d:ac:3e:77:d2:e0:7b:70:54:52:26:93:b9:cc:
ba:29:bc:fe:dd:02:e3:1c:45:69:fa:02:6c:87:2d:
dc:c9:1e:72:83:f7:c5:aa:8d:98:fe:5b:40:78:32:
fe:b4:13:e7:0e:c2:7f:04:31:77:b2:db:cf:d5:b5:
3f:d4:12:e1:80:36:b7:f3:82:d3:1d:35:c8:1f:9e:
d8:7b:b0:28:69:4e:3a:f5:88:36:70:b3:2a:94:d4:
a3:cc:24:ac:4b:75:ed:fd:fe:69:a9:11:56:96:11:
3e:93:56:de:d0:8b:c9:81:64:21:6a:e4:c3:90:20:
14:d5:d8:8e:97:28:af:74:4f:e5:bf:51:18:1e:45:
01:28:17:17:19:f3:d8:37:7d:d1:ff:2e:09:7f:66:
b0:02:a7:db:5e:1b:d8:58:b7:4e:e4:e1:83:26:20:
e7:4b:3f:5e:62:b1:66:56:c0:56:d1:73:b4:e4:d8:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:8C:B2:09:CA:6D:23:39:8D:64:3E:DA:4F:C5:DC:52:7B:D9:EA
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8CmMsgnKbSM5jWQ-2k_F3FJ72eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.21.0/24
Signature Algorithm: sha256WithRSAEncryption
34:16:45:66:81:f1:5a:a9:f7:b0:87:41:33:9d:62:9f:6a:51:
7a:28:a6:e1:00:ec:8c:b5:2b:2d:30:35:f3:8b:f0:cd:51:17:
45:da:67:a5:b7:52:73:a0:fd:df:fe:d1:64:99:7b:e8:6d:e2:
04:99:0f:33:e1:de:9a:9e:43:5b:ba:c1:56:e7:53:f1:97:e3:
52:6c:35:ce:7e:37:2f:47:b9:f3:ac:d1:75:36:a7:31:0e:35:
cc:87:79:3c:12:53:a7:24:bd:91:20:b2:9e:a3:de:65:b9:57:
8c:1b:72:e6:0c:e4:2d:be:47:6d:28:5f:98:b7:d6:13:ff:0f:
9b:cf:eb:bf:9d:70:08:4a:a9:53:f9:6a:4d:54:8e:1d:b6:5d:
66:57:f3:89:27:71:7e:4a:9a:14:c1:9c:a8:67:7e:37:18:bb:
4f:14:44:b3:f3:90:10:09:11:61:01:7a:74:14:6e:d9:e3:f8:
a4:fc:f3:06:dd:24:9b:24:80:5b:36:07:53:76:50:f6:50:75:
d8:77:95:cd:79:cc:3c:7a:f3:42:40:52:45:fb:ef:59:04:6b:
a4:e3:a4:3f:a7:f7:9d:c0:5b:7f:d0:7c:77:e8:f5:81:b4:8c:
28:f5:40:0a:00:cd:62:23:37:fa:36:8f:1a:a0:40:95:4c:3a:
50:1b:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:08 2025 by rpki-client