Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/9OhGAENh08RF7neerRKQWEEqjL4.roa
File: 9OhGAENh08RF7neerRKQWEEqjL4.roa (raw, json)
Hash identifier: aHRjESyOFj3Dq1wEY3Sfws28w6MZwBhGLChwJoikYUE=
Subject key identifier: F4:E8:46:00:43:61:D3:C4:45:EE:77:9E:AD:12:90:58:41:2A:8C:BE
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01856F14E832F86F911908758AA9B7B8A30D
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/9OhGAENh08RF7neerRKQWEEqjL4.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12741
IP address blocks: 82.160.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e8:32:f8:6f:91:19:08:75:8a:a9:b7:b8:a3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4e846004361d3c445ee779ead129058412a8cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:b8:68:51:2c:d4:a4:36:0d:6e:be:b6:6d:
7b:f0:69:0c:33:aa:4e:cc:d0:d1:86:2d:ea:0f:8a:
14:9d:ba:82:35:6d:da:4f:9b:bc:6a:3f:0c:0d:4b:
7e:a1:27:d2:23:d3:02:13:5b:62:45:19:08:a1:05:
ba:0a:a5:73:80:dd:e3:90:e9:28:68:6d:86:72:7c:
20:9c:42:3c:7f:41:b7:bd:32:e1:bc:82:1b:d6:74:
f3:b5:12:8c:d2:4f:91:8e:0a:cd:25:d0:dc:be:8b:
f4:be:c5:7f:54:52:76:66:d7:bb:38:58:31:16:59:
02:46:19:9f:74:c6:5b:0f:4c:d9:db:f0:77:57:b1:
c1:43:a8:f5:0b:94:44:d2:e2:c9:e7:39:29:99:82:
83:4f:f1:d2:fc:35:a2:21:e6:d1:42:7c:36:e8:7e:
9f:ee:21:c5:c8:f3:c4:21:7a:a3:80:ee:40:0f:ef:
6f:73:36:54:de:08:76:d3:68:87:6d:1d:5e:ac:af:
aa:4e:b1:7a:7c:1b:d2:21:0a:c5:28:ea:4c:01:2a:
6e:bf:18:97:b2:4f:01:75:4f:16:f9:33:7a:7b:c7:
f4:93:c3:f1:23:23:d0:b4:8d:96:f4:38:28:53:71:
e6:00:3e:49:cd:4f:86:7c:c4:66:0d:b7:7a:6a:92:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:46:00:43:61:D3:C4:45:EE:77:9E:AD:12:90:58:41:2A:8C:BE
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/9OhGAENh08RF7neerRKQWEEqjL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.112.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4c:72:13:3c:6e:e3:bf:22:97:b5:2f:f8:3b:d2:58:8c:60:
74:c8:86:38:b4:85:21:1c:c4:21:41:84:9e:2f:b4:26:e9:18:
b9:b3:89:92:36:59:1a:cf:6b:11:d6:ca:e2:d5:67:96:d6:d2:
41:b0:6a:cf:4d:ee:a5:06:67:c6:24:47:7e:65:2d:7b:a0:a9:
c1:ab:5d:5f:d4:43:ec:00:2b:ef:ae:bc:30:0e:e4:aa:b6:ff:
a7:92:c9:81:7e:51:d0:e2:b5:41:ef:f8:64:b3:fc:64:1b:35:
c0:b7:78:ab:61:f4:68:97:70:ae:76:e7:53:70:e9:c8:3d:6a:
48:bf:bb:a5:50:8e:2d:a3:52:80:3f:68:0c:51:27:18:62:be:
4c:09:64:fa:8e:fe:f3:3f:6d:d3:2d:9a:fc:9f:05:4a:eb:13:
96:34:77:a1:77:cf:2d:62:b9:35:4a:ce:db:c6:f8:6e:f7:3c:
6e:49:f9:ca:59:d3:0f:b4:9a:82:da:b6:6b:02:ff:bf:fa:ef:
33:9c:ba:0e:bc:92:c5:14:4f:a9:f1:75:a7:f0:ad:04:74:fc:
83:66:5b:79:34:a6:66:f8:d2:c3:49:2e:a3:23:d5:bd:6c:2d:
33:ca:4d:cf:c6:bf:6b:24:c2:0d:11:9d:69:81:35:16:34:9d:
46:d2:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:49 2025 by rpki-client