Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/8jNAin-F94LbsriKAb76H4Ebpjs.roa
File: 8jNAin-F94LbsriKAb76H4Ebpjs.roa (raw, json)
Hash identifier: dzCu30grlZfhHbfQa+xe3l6bmIkq50IGwmEWforNkSo=
Subject key identifier: F2:33:40:8A:7F:85:F7:82:DB:B2:B8:8A:01:BE:FA:1F:81:1B:A6:3B
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018B4D64D6BB763071187700D61FBD76D51C
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/8jNAin-F94LbsriKAb76H4Ebpjs.roa
Signing time: Fri 20 Oct 2023 14:02:15 +0000
ROA not before: Fri 20 Oct 2023 14:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216127
IP address blocks: 194.28.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:64:d6:bb:76:30:71:18:77:00:d6:1f:bd:76:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Oct 20 14:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f233408a7f85f782dbb2b88a01befa1f811ba63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d8:6f:5e:5d:8b:f8:13:a1:57:f5:b4:26:06:
41:fa:49:2f:33:8a:38:d5:07:68:13:d4:ac:ee:d9:
90:01:83:dd:f8:c5:d4:51:bb:71:6a:dc:1b:6f:06:
dd:ac:0c:c5:e2:03:b3:84:1a:a8:c6:7d:fc:d6:37:
f8:c1:8c:4a:7a:31:d2:d1:e3:67:19:29:5f:9a:af:
a0:d5:af:e6:65:4b:cc:c4:e1:c0:3e:dc:69:bc:b4:
99:2f:95:ac:f1:52:79:6f:59:7f:a1:09:bd:91:04:
f0:d9:4e:de:b8:38:87:31:5b:ef:11:bd:45:30:94:
c1:f6:1b:de:a0:cf:f0:07:f0:9b:27:ed:2e:71:ee:
87:78:e8:14:86:5f:4b:23:06:b0:97:e5:18:18:29:
7f:01:7c:79:a4:ce:4c:e6:f8:4a:e1:4d:36:26:73:
32:4d:00:44:21:41:81:cf:3e:fe:60:6f:12:61:b9:
8c:d4:29:1d:f8:39:05:3b:39:15:0d:a7:35:0e:fe:
32:6b:ca:3a:3b:a8:08:a1:79:ef:3e:ab:49:b1:57:
17:bb:db:ef:e6:ed:f1:d2:73:7e:79:fc:27:c0:b8:
72:ad:fa:28:3b:87:5a:f0:48:e7:25:37:a0:0f:27:
df:ac:d1:c9:f0:5f:68:88:ba:2e:13:7c:d6:be:72:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:40:8A:7F:85:F7:82:DB:B2:B8:8A:01:BE:FA:1F:81:1B:A6:3B
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/8jNAin-F94LbsriKAb76H4Ebpjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.226.0/24
Signature Algorithm: sha256WithRSAEncryption
52:11:69:ee:73:19:27:26:41:54:c5:93:d1:b7:07:f1:3b:ef:
65:f2:a0:2f:98:8e:f4:2b:6f:b4:b5:e6:5b:5a:6f:a3:18:d0:
33:a7:1e:ee:17:ed:d6:a2:7d:3b:9d:c7:ef:a3:96:56:ea:f3:
6a:46:2f:af:9c:e4:55:66:50:cf:75:85:66:18:6f:3e:76:a2:
54:68:da:ac:ab:e5:8e:65:f5:a2:30:ed:91:1f:1b:22:af:aa:
69:d7:b7:b3:2f:20:d3:6d:ad:55:df:dc:c8:40:e8:85:cf:58:
9f:87:3c:8e:a8:d6:f5:a8:e5:fc:71:80:78:a0:df:ec:6a:b8:
10:e5:6a:0c:6f:af:b3:20:6f:9e:70:1f:05:ac:05:ec:b1:58:
f5:09:df:07:5c:9d:88:6c:a3:f9:71:c9:be:73:a0:02:60:81:
a5:ec:4a:dc:81:74:84:c0:45:01:e5:cf:fd:5c:fd:fc:19:f9:
8f:37:31:51:7b:26:4c:3e:0a:08:15:e5:ba:42:e0:74:e4:0e:
7f:8a:27:5d:25:ff:2d:92:43:9c:fc:13:cf:76:fd:d1:c0:1d:
4d:18:8b:4b:06:bc:aa:38:f4:cf:8a:c1:9f:65:a4:06:6b:f0:
4e:4d:9d:82:1d:31:48:93:ce:f3:3a:80:65:36:fd:a9:06:93:
3d:23:a5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:49 2025 by rpki-client