Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/uOiSqt8FsbXK1kpp2rj_RyVd190.roa
File: uOiSqt8FsbXK1kpp2rj_RyVd190.roa (raw, json)
Hash identifier: /LrAKoTDeaZOz7KPn+IZC9wsGMb4XGVEzTygcqR9za4=
Subject key identifier: B8:E8:92:AA:DF:05:B1:B5:CA:D6:4A:69:DA:B8:FF:47:25:5D:D7:DD
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 018A3C539529D1F19118D97E6E5DCC1AECFE
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/uOiSqt8FsbXK1kpp2rj_RyVd190.roa
Signing time: Mon 28 Aug 2023 13:27:05 +0000
ROA not before: Mon 28 Aug 2023 13:27:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31549
IP address blocks: 185.110.245.0/24 maxlen: 24
185.110.244.0/24 maxlen: 24
185.110.246.0/24 maxlen: 24
185.110.247.0/24 maxlen: 24
87.236.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:53:95:29:d1:f1:91:18:d9:7e:6e:5d:cc:1a:ec:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Aug 28 13:27:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8e892aadf05b1b5cad64a69dab8ff47255dd7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:5c:7b:c6:62:60:78:fb:24:cc:9d:f8:da:
4c:04:26:f0:41:f9:8f:98:0f:85:fb:6a:89:99:ff:
03:ea:4a:ba:d4:39:58:33:4b:c6:4c:2c:8f:b2:cd:
46:7c:2e:96:18:15:55:6e:cc:fd:53:ff:6a:4e:7b:
55:8c:0e:6b:32:e8:e5:ad:ef:8a:da:d3:4e:2f:8b:
be:e9:52:2a:d4:4b:04:d4:97:05:c0:3e:2f:7a:f0:
bb:be:31:51:0c:fd:64:9c:84:3f:08:e2:64:15:5c:
a3:5e:a0:4e:b3:92:16:6a:77:4a:92:32:1e:6d:a9:
72:0d:b6:61:6d:09:62:e8:88:0b:43:11:2a:f4:9a:
05:0b:93:10:54:19:05:ff:3a:05:25:bd:d8:3e:fd:
b8:b3:62:97:04:9d:9b:30:dc:42:d4:9d:5a:d9:ed:
b9:5c:07:eb:d3:65:ee:ea:3f:4f:c3:6a:1e:6b:e1:
1a:bd:47:eb:7e:89:17:2e:ba:cf:e7:46:0b:67:5d:
75:4f:64:d5:e0:b4:6a:99:05:1d:d2:96:d0:8d:1a:
93:d2:a4:b3:e7:21:39:67:ce:7c:45:30:4d:86:28:
2a:ec:d6:10:80:01:11:31:e0:a4:8d:c6:f8:3c:50:
30:3d:eb:3b:9e:ab:3b:7f:e3:24:46:3c:fa:1a:08:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:92:AA:DF:05:B1:B5:CA:D6:4A:69:DA:B8:FF:47:25:5D:D7:DD
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/uOiSqt8FsbXK1kpp2rj_RyVd190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.39.0/24
185.110.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:47:88:9b:74:dc:ff:98:21:92:a2:37:93:d2:d4:74:eb:fd:
cd:3b:df:04:c9:aa:9a:5f:08:15:7e:50:89:62:54:78:0c:4a:
ca:56:19:d7:88:b5:38:5a:26:3a:cd:2e:99:a4:7c:92:a1:6d:
78:1a:48:27:c6:54:c3:55:69:b8:48:1a:33:f4:cd:b7:26:c8:
5c:b0:b0:89:04:e2:75:94:99:a6:19:31:bc:c8:d9:aa:a4:80:
9d:f0:76:b9:79:18:2d:2f:89:73:9a:d9:a5:68:e1:fe:5b:c7:
05:16:23:70:0b:26:79:be:99:f8:8e:69:96:55:70:c2:b4:80:
7d:59:3d:0d:24:a1:8f:9a:b9:fe:23:6b:a0:00:63:07:24:c7:
dd:2c:e3:1d:61:f7:c4:a6:b7:e4:00:5d:be:4f:bb:7d:e4:b2:
d2:c4:e3:56:b0:04:7e:1a:3b:de:b0:f7:87:74:e6:7f:09:6c:
3e:df:50:60:15:b1:ad:bb:3b:d8:3b:74:c1:47:81:54:16:90:
43:b6:bf:d4:08:a1:3b:0d:69:83:24:cf:b3:72:0e:17:18:eb:
b9:5b:c7:71:9b:9e:d4:3f:e1:2b:db:e6:99:23:24:d5:25:3f:
cc:65:d6:b2:47:33:09:d2:db:a6:c8:65:5a:7c:97:9a:c3:ef:
bf:d6:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:16:01 2025 by rpki-client