Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3g0adhSVwYy9GPFKk3wNszTW53c.roa
File: 3g0adhSVwYy9GPFKk3wNszTW53c.roa (raw, json)
Hash identifier: kgtstXvBBGlDnQf97LKUr0E70yz2YFYhNcRPxv70WtM=
Subject key identifier: DE:0D:1A:76:14:95:C1:8C:BD:18:F1:4A:93:7C:0D:B3:34:D6:E7:77
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0185E3F5786B0412721A53710F622DEB346A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3g0adhSVwYy9GPFKk3wNszTW53c.roa
Signing time: Tue 24 Jan 2023 13:26:33 +0000
ROA not before: Tue 24 Jan 2023 13:26:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 81.5.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:f5:78:6b:04:12:72:1a:53:71:0f:62:2d:eb:34:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 24 13:26:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de0d1a761495c18cbd18f14a937c0db334d6e777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:05:4d:a5:39:dc:2a:dd:c9:a1:b3:f2:94:
83:8b:0d:a8:15:19:98:8d:9b:07:47:dd:f3:df:75:
f5:75:f5:02:ca:5b:9c:0d:ce:8a:40:51:f3:17:ac:
78:50:2f:cf:b4:cb:3e:36:ea:46:ae:7f:b6:d5:eb:
7c:14:51:20:05:03:71:6f:14:fa:5f:16:14:59:42:
6b:7c:e1:7f:2a:ff:90:14:50:28:b6:23:55:a3:a8:
9b:10:03:07:1a:c3:8c:32:6d:04:7b:de:b8:64:08:
90:7a:bf:21:f5:e8:7e:4b:c5:ad:f7:e8:ce:2a:bc:
6f:45:13:0f:03:59:84:0b:dd:2b:3b:7e:2b:0c:73:
49:30:54:0e:8c:77:af:51:72:6f:b3:83:ac:f6:97:
2b:51:6e:ec:e8:2d:a1:1f:e4:43:23:a1:10:bb:02:
5c:78:30:fe:98:b9:50:66:27:71:6a:45:5e:c9:f9:
4c:90:52:80:8c:55:f5:d8:1c:a9:8e:ab:65:76:af:
d2:02:15:5f:b0:dc:67:6b:e3:0b:20:b3:6a:4a:af:
e7:6a:1b:4c:75:6d:64:f4:08:15:36:8c:f4:54:8d:
12:ce:f5:9b:19:18:b6:11:b7:52:bd:e3:b2:56:f2:
39:84:45:be:a8:40:61:0e:f7:fd:be:11:b8:69:94:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:1A:76:14:95:C1:8C:BD:18:F1:4A:93:7C:0D:B3:34:D6:E7:77
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3g0adhSVwYy9GPFKk3wNszTW53c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a5:da:1e:1d:40:f8:af:04:d3:14:77:11:bd:bf:a7:50:a2:
30:ea:1f:ce:0b:9f:48:6b:2f:2d:7d:38:a8:3e:3a:89:17:fa:
4f:66:55:54:8a:4a:a1:5c:3e:5a:23:11:17:71:ff:d4:ba:e5:
93:48:17:84:53:f5:d4:01:b8:2f:04:0e:90:30:11:87:2a:8f:
f5:86:65:13:dd:da:ee:f9:e4:86:79:71:6e:da:8a:c5:c4:cf:
7e:b5:5e:fc:0a:fa:03:eb:b8:34:5f:d6:dd:87:62:c8:04:87:
39:37:1a:0e:07:b0:62:5b:e5:4f:3d:69:9c:09:d5:bb:16:8b:
4e:b8:7f:43:c9:8d:cf:05:3d:7e:12:3a:3a:b2:49:48:73:26:
40:5a:08:43:81:2d:20:22:a7:c8:68:2d:d6:c3:72:d6:76:88:
68:81:ec:41:08:5f:f0:0c:db:93:ba:04:74:30:14:22:f5:2f:
b6:89:79:64:62:b6:de:cb:27:1a:85:b0:cd:c5:a9:73:c5:5e:
b0:24:4a:d2:3f:cb:06:b7:65:3a:08:f3:f1:0b:eb:7f:fe:b4:
0c:7f:86:24:4a:2b:3e:d2:75:13:54:6c:b6:c9:6e:03:4f:d6:
02:48:c7:59:36:a6:62:c6:90:5b:f3:2b:41:a4:ef:e9:a5:4a:
23:80:33:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:24:55 2025 by rpki-client