Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5pEK9v4w19cPcbX5CGQvSl40EsY.roa
File: 5pEK9v4w19cPcbX5CGQvSl40EsY.roa (raw, json)
Hash identifier: 9uI5eo+YMrrLFe7L7paD/PJrjPSdeOjXa3V2rysY3YU=
Subject key identifier: E6:91:0A:F6:FE:30:D7:D7:0F:71:B5:F9:08:64:2F:4A:5E:34:12:C6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C1B6521178A44BE6F0DB3CB41634434A8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5pEK9v4w19cPcbX5CGQvSl40EsY.roa
Signing time: Wed 29 Nov 2023 14:04:21 +0000
ROA not before: Wed 29 Nov 2023 14:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
82.153.70.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.180.0/22 maxlen: 24
89.213.182.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
82.153.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:65:21:17:8a:44:be:6f:0d:b3:cb:41:63:44:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 29 14:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6910af6fe30d7d70f71b5f908642f4a5e3412c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:22:a6:c2:14:89:cf:e4:69:99:9b:7e:2e:
70:6f:2a:6d:cb:2e:f6:dc:0d:00:b0:e6:0d:a5:80:
bc:32:15:cb:e7:86:25:c2:30:86:6c:74:19:3c:67:
1d:fa:d7:11:14:76:51:3b:b3:94:8e:a9:ab:8d:22:
d9:5c:22:ce:1d:42:92:d4:c0:6d:43:5b:bd:5b:7a:
19:ca:93:22:dd:a8:43:70:51:c6:90:de:b1:db:f2:
d6:0f:c9:13:8e:53:ff:c2:90:76:5b:90:b9:77:eb:
1c:6c:65:c7:4b:c7:23:df:5a:96:25:30:1b:e7:01:
92:97:29:d1:bd:87:fb:d4:16:cd:23:a8:1c:2a:79:
a6:82:97:c9:67:c1:2e:6b:b5:e9:d3:7d:9d:79:e2:
a3:75:97:5f:bc:90:24:76:7d:55:b4:f7:b1:46:88:
12:77:ac:b0:fb:77:80:b9:65:4e:6e:d3:e3:de:53:
80:87:9a:f7:40:e7:0e:8a:30:fa:a2:db:15:47:29:
80:da:2a:03:85:7e:3c:85:9e:93:5a:6d:95:2d:5e:
58:77:10:1b:40:ca:7b:31:71:78:35:ea:5d:a1:db:
fd:51:73:1b:d8:6a:1b:5b:ba:a9:2f:9e:22:df:64:
d8:fc:3d:1a:86:0a:4b:78:d6:1c:89:28:c4:c9:81:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:91:0A:F6:FE:30:D7:D7:0F:71:B5:F9:08:64:2F:4A:5E:34:12:C6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5pEK9v4w19cPcbX5CGQvSl40EsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.153.10.0/24
82.153.70.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/22
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c2:9a:da:80:28:18:a1:ef:80:c2:93:6c:fa:ec:22:3c:81:
2a:12:8d:07:f7:9f:3b:e3:8e:3d:69:fc:1e:0b:2f:d8:a4:d3:
41:ee:72:2d:c8:ea:c4:af:b0:e4:ac:95:9b:7e:11:73:e2:60:
0f:3c:d4:3c:23:e6:4e:35:22:1e:76:42:1f:83:6c:3d:af:2b:
17:8b:9a:bc:67:3d:23:9a:d0:ad:67:fb:6a:bc:14:07:59:99:
62:d0:f2:02:19:e4:13:67:09:b3:3b:e2:41:64:81:5c:cb:32:
b3:97:37:65:92:4f:49:5b:e8:3e:e8:4c:1e:c7:82:05:0c:a2:
72:44:97:63:cc:02:46:6e:60:32:93:b2:8b:01:ad:43:19:3c:
3b:7b:10:ef:b4:9e:76:86:ae:23:0c:fe:78:fa:90:d4:6d:9c:
b4:c9:92:42:31:56:30:2c:e7:f8:72:66:26:43:46:6d:24:d0:
d3:f7:f9:15:94:f0:43:c8:a5:7b:f2:b6:47:10:34:71:9d:0f:
4c:4c:36:e8:16:92:82:3f:cd:d7:97:06:84:e6:60:dc:33:9b:
4d:8c:e0:74:8b:ab:16:26:81:35:ef:d6:dc:f9:3c:59:55:97:
0a:a3:b8:97:1d:56:94:36:01:51:c6:1d:49:f5:8a:b1:6a:fe:
d6:b6:da:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:07:09 2025 by rpki-client