Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/4ulcTWOQlka9-awhRdfx3HFPfjo.roa
File: 4ulcTWOQlka9-awhRdfx3HFPfjo.roa (raw, json)
Hash identifier: UmoIpuQZOuRKapTmVUk6bd7Wt/58krov25nQAOC26ik=
Subject key identifier: E2:E9:5C:4D:63:90:96:46:BD:F9:AC:21:45:D7:F1:DC:71:4F:7E:3A
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018A8FEDA3A3B36F5F465CA9B0D96163000E
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/4ulcTWOQlka9-awhRdfx3HFPfjo.roa
Signing time: Wed 13 Sep 2023 19:03:50 +0000
ROA not before: Wed 13 Sep 2023 19:03:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41324
IP address blocks: 82.222.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8f:ed:a3:a3:b3:6f:5f:46:5c:a9:b0:d9:61:63:00:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Sep 13 19:03:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2e95c4d63909646bdf9ac2145d7f1dc714f7e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:58:de:7a:06:75:ac:fb:9e:1c:0b:42:6a:
ac:76:54:da:32:76:6a:60:92:87:4f:27:dc:f3:c8:
35:33:16:f3:8a:4b:9d:3e:c8:d5:db:09:fd:8f:2c:
8b:d3:b9:58:b7:98:4f:15:2c:8a:d3:a8:49:9b:dc:
96:e0:de:31:e7:b1:2b:db:52:ce:32:32:0c:e2:b5:
1a:2e:d0:29:33:b0:b5:0c:75:09:ab:aa:6c:82:fe:
9f:51:64:7c:1b:3e:d5:72:ab:47:5e:4f:90:cd:88:
5d:c7:80:ef:b1:c6:64:8b:46:1c:6c:97:ea:f1:86:
40:ab:69:45:2b:ec:8a:6a:0f:ae:38:b0:63:8d:56:
a7:33:83:c8:2a:2d:2b:90:9b:a3:e7:b8:22:ee:eb:
59:b8:c7:95:be:a6:d3:ae:47:d3:45:38:d7:e2:3d:
fe:36:2c:cf:4b:4a:cc:2e:41:2e:e1:47:3d:ab:f0:
5e:70:d7:4e:65:22:7d:0f:d6:8c:97:8c:db:48:1f:
a7:37:79:a2:29:09:7a:e6:dc:af:90:b4:b0:29:87:
bc:83:e8:79:59:28:8c:1f:e5:d1:f9:42:a0:0c:81:
fb:8d:ff:7b:9d:81:24:da:4a:da:fc:69:2f:8e:6b:
b3:6c:d1:aa:57:11:6d:ad:89:90:4d:4d:f6:53:74:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:5C:4D:63:90:96:46:BD:F9:AC:21:45:D7:F1:DC:71:4F:7E:3A
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/4ulcTWOQlka9-awhRdfx3HFPfjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:7a:76:0a:1f:e7:aa:b7:a2:4f:3d:a8:ef:f1:0e:82:a7:9a:
58:7e:5e:7c:dd:29:af:d6:79:47:22:04:ee:6a:92:0d:13:66:
7f:36:89:16:17:39:ab:02:f4:ca:c9:04:b3:d9:43:9c:ee:d0:
d2:37:ca:84:d1:1f:3a:b7:3b:c3:e7:63:7a:6e:1f:d7:2c:16:
22:8f:70:5d:dc:e2:d3:5f:e2:af:0c:02:a1:b9:4a:b8:77:21:
1d:e2:8f:6c:56:ea:c4:a6:57:53:a5:37:02:4c:6d:a5:11:37:
d5:3a:e3:35:b9:cf:53:6d:69:14:e3:dc:64:bc:a3:38:32:7e:
79:5b:a4:b8:9d:cf:fb:72:b0:23:8e:a0:00:0a:38:a6:b5:f7:
e9:eb:fa:ca:55:09:5d:b6:96:3d:be:4d:b9:58:0c:1b:27:04:
13:c7:0c:cc:b3:28:e2:12:fe:8f:75:1f:9e:37:e9:34:ef:c3:
09:ff:2d:67:c4:c0:db:72:8b:f2:a3:ce:0d:5a:a7:b5:17:e8:
2f:68:f5:d5:11:24:20:b4:2e:56:ca:ad:29:03:76:d1:8a:40:
84:25:79:ad:bf:cc:60:32:35:93:f4:df:18:22:ab:54:24:65:
3e:af:ca:92:b6:c2:cb:ea:67:a9:e1:18:4a:fc:e5:bb:d3:83:
fa:d7:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:43:14 2025 by rpki-client