Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9OUMevB4cvFy655qNAcBtzMGoGs.roa
File: 9OUMevB4cvFy655qNAcBtzMGoGs.roa (raw, json)
Hash identifier: DOHHFYEuctChmqA+CkrrNtTwZFJjv1JaEOWbS6wHMa4=
Subject key identifier: F4:E5:0C:7A:F0:78:72:F1:72:EB:9E:6A:34:07:01:B7:33:06:A0:6B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0185C945F74D92E1BA8FBB4017D26D8E457D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9OUMevB4cvFy655qNAcBtzMGoGs.roa
Signing time: Thu 19 Jan 2023 09:04:43 +0000
ROA not before: Thu 19 Jan 2023 09:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 81.168.116.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:45:f7:4d:92:e1:ba:8f:bb:40:17:d2:6d:8e:45:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 19 09:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4e50c7af07872f172eb9e6a340701b73306a06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:24:25:e2:d6:a7:7f:27:09:28:f5:e5:4f:
f3:2b:3b:16:48:fb:ba:0f:65:b5:c2:d3:ae:17:23:
1b:05:fd:03:f3:73:99:f7:af:6c:d6:36:02:7c:bb:
7f:c2:52:9b:92:1d:63:26:06:20:77:25:4b:1a:ba:
b8:d1:0e:e6:fc:9f:ae:48:44:44:e1:b5:72:7f:7a:
33:5c:be:e1:79:23:c0:f9:f6:cc:d5:ac:e0:dc:b2:
df:b3:3f:73:ff:f2:42:1b:ae:59:c0:a4:6a:45:13:
0c:a4:bd:1a:86:90:62:b5:58:8b:52:73:b6:03:85:
3a:68:95:d4:82:47:fa:ba:3c:b9:1c:59:c5:30:0a:
a0:0c:ee:1f:27:9a:da:41:a5:b7:fe:17:d7:fb:42:
a4:ec:e0:8f:73:ef:52:fc:ec:50:dc:5c:38:9b:a7:
a4:fe:14:08:b3:a4:8a:ee:9e:03:a1:21:6a:bb:6e:
30:98:c2:e0:1b:66:57:1c:2e:e1:23:dd:88:f7:61:
ee:ab:dc:c1:e5:fe:98:9a:e5:22:01:55:a8:f5:c6:
a8:f9:d0:14:d0:36:34:1b:9e:84:ea:5f:5c:f7:9a:
d1:1a:83:28:25:c0:65:db:b7:ad:5a:4c:04:72:1e:
45:ee:23:c7:9f:fa:96:1f:dc:07:52:d0:09:9c:68:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:0C:7A:F0:78:72:F1:72:EB:9E:6A:34:07:01:B7:33:06:A0:6B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9OUMevB4cvFy655qNAcBtzMGoGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
82.153.79.0/24
Signature Algorithm: sha256WithRSAEncryption
71:11:ae:11:73:ca:49:2f:c8:de:e8:b9:11:8d:60:d9:eb:13:
c2:35:cc:f3:f7:f8:40:7c:58:c9:e6:c3:f2:02:9a:26:13:21:
b2:0a:ba:4c:6d:94:24:6c:e5:ea:47:52:d2:42:63:9f:37:2e:
cd:7c:cd:c3:9b:ac:53:21:1e:8b:76:07:2e:05:f9:5e:bd:b5:
0d:5a:82:c8:80:48:40:30:45:a5:e7:ce:b0:ba:e1:e8:b3:fd:
f3:b5:8f:33:67:9d:67:64:3f:77:ff:ae:d3:d5:8e:07:45:e2:
4b:43:4e:52:39:ba:c9:e2:a6:2a:59:5e:f3:dc:4b:da:73:27:
6f:e6:c2:56:a5:6d:d2:b8:b8:0c:7f:4f:bc:a3:da:b9:5d:31:
e8:4b:b3:c0:7b:2f:f1:52:b0:37:bc:d4:f9:93:55:73:13:d1:
d9:81:57:f6:d5:6d:fb:24:a8:6c:7b:2f:73:c6:12:8b:ed:d1:
59:e3:d3:30:ea:ba:44:81:a0:65:98:de:b3:17:82:c1:86:eb:
54:ab:b3:62:07:2f:5e:5d:0f:1a:96:fc:a3:69:83:c5:4c:28:
62:8b:10:20:02:b5:4f:b9:1d:7a:47:f5:02:39:4f:75:b9:2d:
11:f5:9e:c5:d0:e7:bc:63:b1:92:43:7b:a0:a4:de:b0:76:ac:
49:c2:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:18:38 2025 by rpki-client