Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/mQNlClKrDXusLKQkB0l34AvcTpo.roa
File: mQNlClKrDXusLKQkB0l34AvcTpo.roa (raw, json)
Hash identifier: x/oV1VlVFuGmKMjD6cE/s420HyP8w3NCyshn3XTkzHc=
Subject key identifier: 99:03:65:0A:52:AB:0D:7B:AC:2C:A4:24:07:49:77:E0:0B:DC:4E:9A
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 095D666E
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/mQNlClKrDXusLKQkB0l34AvcTpo.roa
Signing time: Sat 01 Jan 2022 02:54:13 +0000
ROA not before: Sat 01 Jan 2022 02:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9116
IP address blocks: 82.102.161.0/24 maxlen: 24
81.5.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157116014 (0x95d666e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Jan 1 02:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9903650a52ab0d7bac2ca424074977e00bdc4e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fd:69:dd:0d:34:3a:31:40:a1:7a:b1:25:4c:
4d:01:9a:69:fd:44:76:fe:0e:10:14:d4:5f:94:be:
13:2a:69:d2:71:49:ae:45:d7:e2:5d:84:77:2d:59:
14:68:ae:91:fc:dd:31:34:9f:2e:18:b2:b4:3b:a3:
7c:d8:6b:49:d4:8c:f1:91:c1:70:c5:45:88:e1:c8:
73:0a:62:9e:d9:8c:5d:0e:86:10:0b:90:90:15:3d:
11:7e:c6:1f:41:5c:bb:ab:bb:01:a4:0f:a6:eb:ca:
4d:a1:4f:61:eb:d1:0c:5e:8a:34:d5:c6:27:de:bf:
bb:b9:87:9b:01:3e:60:ec:d8:4f:cb:c0:a0:51:a1:
89:25:af:03:71:cc:bb:1c:fa:7a:8f:57:1a:f5:c1:
e2:b0:93:c8:4a:47:45:db:29:20:63:76:a1:2a:ff:
bc:af:c3:b7:a9:0a:d7:40:0f:de:65:ca:40:d7:43:
40:12:f0:59:04:5a:c8:b7:4b:d3:79:a8:23:cb:db:
51:33:f9:f0:7c:09:53:89:c9:3e:01:a9:34:48:d4:
5e:a2:be:ac:66:e9:12:1a:3b:82:a2:06:1f:d4:0c:
94:8b:5b:ee:a3:c8:26:2d:9e:7c:cd:79:49:09:0c:
2b:90:21:a9:20:5f:5b:69:27:57:ee:eb:f8:af:5c:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:65:0A:52:AB:0D:7B:AC:2C:A4:24:07:49:77:E0:0B:DC:4E:9A
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/mQNlClKrDXusLKQkB0l34AvcTpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.16.0/21
82.102.161.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:75:4a:3e:76:e2:48:dc:f3:87:6f:67:f5:42:f0:ef:24:a8:
f4:7b:43:14:70:a1:c8:eb:5b:f8:ed:92:21:c9:65:62:3a:a6:
82:43:85:11:69:5d:6d:4a:bb:87:8e:02:be:3f:80:94:9e:f4:
6a:38:94:a8:bf:3e:a4:bd:e3:34:8d:77:95:20:09:a4:f4:a0:
3c:a6:10:b5:24:2d:35:70:97:95:80:fa:a5:29:9e:c0:91:90:
f7:55:95:f5:8c:bc:33:ed:c6:2a:f3:0a:28:77:37:c7:9b:28:
da:a0:d8:fd:ad:4a:2e:14:23:9a:d0:f6:23:68:80:bc:e7:00:
9a:18:12:72:85:f9:d3:24:a8:b0:52:5b:d8:87:aa:fb:db:63:
fa:1f:29:a3:20:cf:3d:12:e4:eb:fb:92:9d:38:28:25:a3:be:
5e:ff:9b:3f:bf:24:09:dd:65:53:56:e9:6e:d8:f6:c8:e5:ef:
3d:b0:86:20:e9:63:57:52:7e:d9:94:c3:0e:41:ba:97:e6:d4:
9f:df:1c:42:6a:6f:d4:9e:1d:03:f8:9a:30:a9:e6:c9:78:7e:
59:87:92:23:39:54:5d:f4:ca:44:4b:33:24:03:33:ed:11:bd:
7b:51:de:99:42:06:a0:24:d5:4c:ef:15:4b:55:87:78:fd:41:
6d:f4:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:32 2025 by rpki-client