Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/DIO3qLDC81QOy_wdBG8HUoqptMM.roa
File: DIO3qLDC81QOy_wdBG8HUoqptMM.roa (raw, json)
Hash identifier: xYdBIAxkue1sRGFMT5bGtZn5GmMb4P1N/XZOSt49q+o=
Subject key identifier: 0C:83:B7:A8:B0:C2:F3:54:0E:CB:FC:1D:04:6F:07:52:8A:A9:B4:C3
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 0185719E7BBB68119D45C5095EC17C3C906A
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/DIO3qLDC81QOy_wdBG8HUoqptMM.roa
Signing time: Mon 02 Jan 2023 08:34:49 +0000
ROA not before: Mon 02 Jan 2023 08:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203331
IP address blocks: 82.144.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7b:bb:68:11:9d:45:c5:09:5e:c1:7c:3c:90:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 2 08:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c83b7a8b0c2f3540ecbfc1d046f07528aa9b4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:86:13:98:19:6d:07:2c:cf:31:ee:68:ff:
29:61:f6:8b:b4:37:63:c1:51:76:45:69:13:2d:66:
00:31:0e:07:00:ee:2a:68:98:78:2e:d1:e9:7e:75:
c3:cb:a0:89:42:61:5d:ea:85:97:99:eb:46:31:b9:
2b:74:69:04:90:52:41:cd:10:a5:03:32:b2:c8:fe:
d8:32:16:30:d8:98:dd:62:17:03:27:63:1b:df:18:
3c:d0:36:98:a7:83:db:23:67:ed:74:42:32:72:06:
a4:47:36:34:5d:12:77:6c:e9:d0:97:b6:91:a2:e0:
98:59:7c:7d:bd:d7:04:89:02:e4:af:f6:ba:4b:d5:
63:e7:95:8e:79:1f:d2:1a:ed:03:f6:4d:ae:af:13:
e2:88:99:79:ff:1b:32:a0:15:56:18:af:46:ad:38:
24:88:fd:85:c3:e5:95:d2:d2:fa:63:65:7d:0a:82:
ff:52:50:5e:f7:f0:f3:d3:13:46:b9:4e:ea:a1:e2:
26:b7:3b:de:12:75:05:42:e3:a6:e6:32:aa:df:af:
3f:34:84:f7:a5:0d:15:4d:2c:ca:01:18:ee:69:6f:
ef:61:92:11:7d:61:e5:f1:9d:96:a9:40:90:1c:1e:
7f:5b:b9:09:98:dc:0d:73:74:33:5f:f7:1a:62:47:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:83:B7:A8:B0:C2:F3:54:0E:CB:FC:1D:04:6F:07:52:8A:A9:B4:C3
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/DIO3qLDC81QOy_wdBG8HUoqptMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.186.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:dd:2f:9e:21:f6:d5:79:02:35:00:80:6d:1b:b4:f6:46:9c:
28:00:b9:07:b9:64:f5:b3:ba:86:c7:09:10:12:19:4b:d6:63:
82:44:78:5e:ff:6e:73:86:ed:91:a4:a9:0a:22:2b:f4:d5:df:
f0:83:88:b3:0f:9b:a4:21:5b:dd:52:cd:c4:3b:78:3f:63:19:
6f:93:b9:b6:51:29:0b:63:35:0b:53:9b:32:0f:9c:eb:42:15:
ff:55:67:68:c9:a6:77:d9:61:92:81:25:f3:6d:26:76:8a:69:
88:ea:eb:ae:56:95:95:1c:a5:d9:e8:95:c1:83:9b:60:ca:b3:
db:f0:b8:ba:a8:5b:94:78:72:b0:97:82:3d:83:51:e4:48:6f:
96:92:b5:7b:61:85:23:51:a5:16:6a:68:29:41:6c:f9:9b:53:
f2:de:26:39:24:e9:7c:1e:9c:9e:6f:9b:d9:d9:2d:79:75:74:
c1:cf:c0:a7:5a:b1:bf:c3:00:ce:1f:b8:3a:91:c1:1a:38:63:
8f:7e:17:b0:95:b9:14:a4:5f:35:63:3b:38:d6:17:42:5a:2a:
e6:62:d5:b6:ae:d2:88:b3:23:98:9b:20:30:73:be:cd:46:5a:
fc:5b:ba:7a:d9:9b:4c:75:0f:41:8f:af:e6:38:79:0b:5a:7e:
57:70:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:15:27 2025 by rpki-client