Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/odEpIa2lSGp-L5tNou9BBizE1dM.roa
File: odEpIa2lSGp-L5tNou9BBizE1dM.roa (raw, json)
Hash identifier: PNUj4bzPS+qQntlIjiU/2UEx6rnG09220y5+u2DtYEw=
Subject key identifier: A1:D1:29:21:AD:A5:48:6A:7E:2F:9B:4D:A2:EF:41:06:2C:C4:D5:D3
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 018B4254F7CA61A0598FA604C37EAF58DD4E
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/odEpIa2lSGp-L5tNou9BBizE1dM.roa
Signing time: Wed 18 Oct 2023 10:29:06 +0000
ROA not before: Wed 18 Oct 2023 10:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197972
IP address blocks: 82.144.95.0/24 maxlen: 29
82.144.95.0/28 maxlen: 29
82.144.95.16/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:54:f7:ca:61:a0:59:8f:a6:04:c3:7e:af:58:dd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Oct 18 10:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1d12921ada5486a7e2f9b4da2ef41062cc4d5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ea:84:1a:6d:6d:f3:9d:39:ab:a2:d6:12:90:
68:61:cb:42:c3:56:c6:b3:eb:54:85:8e:fc:ab:ad:
67:88:df:f6:36:e7:69:9c:50:62:50:07:36:fe:35:
13:c7:07:5b:e2:6e:17:88:0e:d8:fe:bf:5c:18:b0:
89:44:96:e6:9c:ce:8c:1c:10:b4:fd:2e:1b:6e:12:
06:07:f4:9c:51:b5:58:e2:34:30:f8:21:19:68:ed:
0c:80:26:72:b6:07:f6:51:bf:6d:5d:87:66:a6:be:
0d:e4:90:47:ec:ad:9a:8c:31:79:ed:75:1b:3d:8f:
41:b4:e2:9d:91:9a:24:4e:f8:30:c5:34:d2:37:26:
40:0e:a9:7c:e8:1f:e5:a2:8b:07:9d:5f:4d:b2:73:
be:8f:96:98:e3:1e:a4:e1:91:b8:7c:20:08:01:73:
60:c0:af:a1:1d:c9:86:d5:c9:f1:3b:7f:e5:d5:93:
67:4d:43:b0:1f:1a:b5:de:cc:84:33:b8:b0:a4:64:
eb:78:a0:43:4e:70:b6:da:0c:14:21:e2:96:94:07:
a6:84:ab:f3:70:a2:99:b2:91:29:aa:23:77:96:f9:
2e:01:64:85:4d:28:9e:97:f3:3e:02:1e:93:5b:94:
90:d3:25:3a:97:5b:7a:6a:0f:ad:72:f3:ba:43:d5:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:29:21:AD:A5:48:6A:7E:2F:9B:4D:A2:EF:41:06:2C:C4:D5:D3
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/odEpIa2lSGp-L5tNou9BBizE1dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.95.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:30:a4:29:30:d2:54:37:02:63:71:6b:a7:94:3a:41:e5:ea:
db:a2:23:b9:50:70:b9:74:fe:3b:cf:97:fd:89:9e:9c:58:92:
91:a0:2e:aa:d6:a3:2a:fe:fa:a3:b3:81:47:43:f6:df:14:db:
53:73:69:90:6b:a8:9f:ef:d9:9c:44:ac:f4:09:68:fe:e0:72:
94:3b:31:ae:12:01:59:7c:fa:92:8e:a1:25:92:5d:c6:ef:ed:
a6:59:ce:2b:10:46:9d:9b:c0:54:a8:a2:83:72:2d:44:9f:78:
87:66:b9:be:d8:35:54:32:34:05:3b:0a:da:58:6e:8d:95:ee:
82:04:33:cb:48:fb:3a:c8:60:89:2c:b0:71:45:00:3b:c4:6c:
56:a9:8c:79:a1:fc:fc:c1:08:a2:c3:46:80:0f:37:2b:f8:19:
11:83:fd:f7:ef:fa:1b:85:3d:bf:67:b6:d0:6b:21:6d:ef:92:
e5:b5:a4:cd:e9:0f:97:0e:c4:ee:71:77:64:10:65:13:d3:74:
38:3b:81:3a:1c:50:b5:2d:b9:8e:d1:33:4d:1a:85:b0:d1:1f:
99:58:4e:ff:48:78:fa:53:16:c2:f2:54:39:35:2d:85:3a:15:
66:a3:02:45:06:40:2a:2b:a6:41:b8:68:10:73:01:80:13:be:
88:dc:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:19 2025 by rpki-client