Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/_DBFv7l8s1g7KyXvhLSd0cqbWXU.roa
File: _DBFv7l8s1g7KyXvhLSd0cqbWXU.roa (raw, json)
Hash identifier: JrgwCFvl3VdkVDOE4PW05hsQqvL7SY7daRAgLTzq+Hk=
Subject key identifier: FC:30:45:BF:B9:7C:B3:58:3B:2B:25:EF:84:B4:9D:D1:CA:9B:59:75
Certificate issuer: /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial: 02903E79
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/_DBFv7l8s1g7KyXvhLSd0cqbWXU.roa
Signing time: Sat 01 Jan 2022 13:55:23 +0000
ROA not before: Sat 01 Jan 2022 13:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205495
IP address blocks: 185.216.83.0/24 maxlen: 24
185.216.82.0/24 maxlen: 24
185.216.82.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43007609 (0x2903e79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Validity
Not Before: Jan 1 13:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc3045bfb97cb3583b2b25ef84b49dd1ca9b5975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b2:c2:7d:57:c2:0f:3d:88:4e:34:b9:3e:af:
93:00:fd:6b:44:a0:a2:f1:08:6f:34:7f:2d:7b:b2:
c3:e6:a5:92:4f:a9:a1:77:b7:9f:16:0f:18:4d:35:
31:c0:3f:ed:a7:7e:6a:ea:60:eb:43:50:58:51:88:
69:5e:77:0a:11:d6:bd:d1:1c:88:4c:09:48:02:e4:
33:c2:92:2c:58:a1:9c:5b:53:36:b6:f6:7b:f8:02:
a0:3e:15:38:12:b5:4c:1b:39:a7:8f:7b:27:69:1a:
b0:80:bf:43:78:2c:6a:5d:66:18:cf:1b:40:72:09:
bd:44:1d:a5:86:15:0b:7e:30:b0:ea:b4:22:d0:56:
ab:c0:fa:9a:f0:24:2c:33:4f:d5:2c:3d:82:60:0d:
20:26:11:34:55:7f:af:9e:d3:a8:6b:b1:f7:a8:aa:
90:4a:05:c3:55:12:b2:b8:e5:7f:f9:64:2f:2d:ce:
ec:39:fa:fa:19:16:34:76:6c:b6:f6:84:60:88:f2:
cb:a6:66:f4:87:62:69:e7:56:f0:84:22:2b:64:50:
62:ed:a5:d2:b6:33:32:03:1f:87:2f:d6:7c:c9:82:
e2:47:be:75:9e:9d:36:ff:3b:59:56:09:08:27:b9:
32:39:52:51:50:16:cc:3d:1c:b8:5d:03:78:92:b8:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:45:BF:B9:7C:B3:58:3B:2B:25:EF:84:B4:9D:D1:CA:9B:59:75
X509v3 Authority Key Identifier:
keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/_DBFv7l8s1g7KyXvhLSd0cqbWXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.82.0/23
Signature Algorithm: sha256WithRSAEncryption
76:51:e9:16:d5:fb:e6:f4:f9:20:ae:dc:ae:43:26:1c:3d:b2:
a9:bc:3e:d6:5e:4f:96:d3:e9:fc:e1:0e:27:94:dd:60:ca:0d:
ae:02:10:d2:11:42:9e:e7:7f:b8:ba:0b:04:06:fa:03:98:62:
45:23:16:d2:f5:e8:ef:c7:97:c4:43:79:9d:15:c1:42:ac:0c:
1b:d5:60:f7:60:b0:9d:91:b7:5b:67:91:12:2b:f7:9e:e2:3c:
48:cb:d7:c6:b7:61:89:92:c0:45:7d:f4:88:99:dd:dc:51:ac:
e6:9f:05:99:62:b0:06:a4:23:5c:3a:b0:ec:2e:aa:09:6d:40:
28:b9:e8:ce:a0:54:92:3a:41:ec:8f:87:15:5b:ca:5c:ad:66:
8b:68:8a:fd:38:9e:a5:d6:a9:92:a3:6e:14:1a:52:7f:33:6f:
9a:4b:f1:5a:f4:07:ad:a6:a3:13:e0:c0:bf:e4:33:30:fc:c1:
0d:26:64:87:4f:1e:52:10:a6:e6:d4:6b:54:69:d7:3b:eb:26:
c8:90:4f:ce:7f:62:73:e4:23:2d:15:11:53:28:67:f5:5e:8d:
5e:c0:4d:06:f1:d9:38:4a:0c:be:2b:57:f8:fb:ec:a2:06:4e:
66:02:15:73:8a:8d:24:b5:95:90:07:68:d8:16:1f:0a:67:f6:
d5:62:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:30 2025 by rpki-client