Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8AgH6eanPTl8MesY8xWj2whvmjU.roa
File: 8AgH6eanPTl8MesY8xWj2whvmjU.roa (raw, json)
Hash identifier: mxfP/6fi6Vo/mfxoH1wQ5MjBqhNzR0u7Rv6ysNmylwA=
Subject key identifier: F0:08:07:E9:E6:A7:3D:39:7C:31:EB:18:F3:15:A3:DB:08:6F:9A:35
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018267E517B881A0D6B606C6E70B6C32574D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8AgH6eanPTl8MesY8xWj2whvmjU.roa
Signing time: Thu 04 Aug 2022 08:07:23 +0000
ROA not before: Thu 04 Aug 2022 08:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134176
IP address blocks: 81.5.189.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:e5:17:b8:81:a0:d6:b6:06:c6:e7:0b:6c:32:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 4 08:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f00807e9e6a73d397c31eb18f315a3db086f9a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:87:d0:0a:c0:d9:77:1d:57:1e:9d:05:cf:
8b:98:3c:6a:42:f1:1f:06:dc:ff:a2:f1:c7:df:dc:
e6:e3:92:45:d4:fb:5c:45:17:3a:aa:6d:a6:5d:da:
d2:70:91:fa:e7:9f:71:70:0c:4c:b9:04:77:44:ef:
9f:d4:41:8e:2c:6b:e2:57:e4:36:a6:a9:4c:42:d6:
df:61:90:1f:ff:cc:d4:c0:61:01:95:21:8d:4e:79:
78:fa:58:37:81:6d:74:83:9b:df:ee:00:e0:28:a5:
d6:ea:cd:c9:cc:cb:c9:ce:3a:6d:44:be:e0:7a:74:
76:b8:32:40:4d:06:5e:0d:fd:7b:bd:02:2e:27:c5:
ad:68:f5:09:8e:5e:7c:7e:7f:f1:86:35:18:96:d0:
a1:77:de:73:7f:a8:83:76:0c:25:9c:a4:10:37:34:
18:e5:ef:8c:1a:bf:b8:dd:96:42:32:b0:47:84:21:
18:e8:a4:b5:2d:59:8d:9d:71:79:01:6f:c1:ce:41:
8a:17:c9:a9:bd:08:3f:53:0e:33:24:67:a7:f8:e8:
a9:bc:99:40:4c:19:e3:77:52:85:36:af:90:d6:21:
d6:b2:7a:39:81:01:f9:ab:b2:78:2d:f6:68:af:d5:
54:72:7b:88:42:58:62:df:5e:3d:dc:52:c6:04:60:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:08:07:E9:E6:A7:3D:39:7C:31:EB:18:F3:15:A3:DB:08:6F:9A:35
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8AgH6eanPTl8MesY8xWj2whvmjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.189.0/24
82.153.250.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ef:25:01:7f:dd:ea:3a:26:f4:61:43:93:4a:80:47:51:64:
25:c8:5e:17:71:ad:bb:61:14:75:81:d0:13:e3:b5:63:b4:80:
24:0f:7b:eb:09:96:d3:cf:47:9d:7b:13:ec:92:61:4c:81:0e:
cc:93:9c:b7:f8:9b:01:ae:00:e4:51:ee:c3:5e:68:75:24:a1:
1e:b6:98:d9:aa:bd:be:8c:5d:0b:51:cc:b2:7e:fa:e8:c6:19:
8f:c3:5c:69:6a:a7:e5:e8:80:84:b5:b2:11:f8:d8:b6:67:af:
96:b8:b5:a2:16:7b:ba:0d:46:0d:47:bf:47:56:50:c8:a3:49:
cc:73:b5:27:f9:84:bd:d8:4a:df:fb:59:38:fe:0e:2a:14:4d:
2e:8e:85:50:62:f5:c7:22:4a:0d:5b:45:df:d9:f6:5f:83:b8:
0b:11:15:23:35:68:d9:bd:ee:d1:78:a8:17:c2:64:8c:25:09:
c9:e1:b0:a6:a1:f7:92:de:ca:9a:c7:a6:2e:43:73:b2:c1:6a:
1f:36:a8:0d:b6:6c:96:52:da:51:92:f7:ce:54:b6:35:81:92:
4f:5d:3e:f9:12:79:6a:c7:70:88:8b:be:4a:22:fb:57:1f:41:
66:a3:23:10:9e:d1:da:59:53:05:10:c7:36:96:15:77:92:ce:
68:87:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:30:02 2025 by rpki-client