Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9n3fJ5YSP-EVFoP_H5riYXTLAZ0.roa
File: 9n3fJ5YSP-EVFoP_H5riYXTLAZ0.roa (raw, json)
Hash identifier: 5uNsUC4n8P9pWMOT147zGe8Zy2H+mAMZobSzYAHyHAg=
Subject key identifier: F6:7D:DF:27:96:12:3F:E1:15:16:83:FF:1F:9A:E2:61:74:CB:01:9D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0188C46C7E6EE58E87FC91F723BA323E54B9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9n3fJ5YSP-EVFoP_H5riYXTLAZ0.roa
Signing time: Fri 16 Jun 2023 13:37:04 +0000
ROA not before: Fri 16 Jun 2023 13:37:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 82.153.240.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
82.153.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:6c:7e:6e:e5:8e:87:fc:91:f7:23:ba:32:3e:54:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 16 13:37:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f67ddf2796123fe1151683ff1f9ae26174cb019d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:03:d7:42:4c:d1:40:a8:b2:7e:df:7e:89:
a5:71:bf:70:3e:e8:47:ec:4e:e2:c1:2e:27:ec:ee:
4d:78:83:29:b1:9c:99:84:89:d7:26:f1:3d:71:32:
2d:4f:6f:9e:41:93:02:5b:15:ac:e3:b2:86:e5:ce:
3c:14:1e:a3:b5:84:f6:e3:e6:d9:7c:27:9e:df:6f:
83:39:e7:f2:2a:01:7d:ef:fd:38:c6:3b:fe:a6:43:
33:81:53:0f:64:68:f9:ec:81:87:ce:ef:4c:33:e9:
ad:b8:e6:e5:f9:64:4c:1b:5d:13:48:b7:65:3f:28:
ef:43:ef:83:b1:9a:2d:84:0c:5c:0f:64:62:fa:15:
1b:80:01:db:be:60:ef:3e:6b:e4:8d:41:b6:a8:3a:
7d:7e:dd:c9:72:0f:01:72:52:02:d8:3d:b0:8a:dd:
2f:8e:9f:b7:99:c4:b8:28:83:ec:55:bf:5c:25:80:
84:bf:49:c7:56:7b:f4:0f:07:11:26:e3:df:f2:0d:
df:29:46:91:4b:76:1e:93:1a:31:ac:de:91:8e:c2:
dd:c0:5e:4e:7c:85:e8:92:08:cf:25:d1:1c:5e:a9:
66:8c:1b:fe:52:81:bd:09:69:0a:2a:10:43:8d:53:
eb:cd:84:d3:6a:ad:25:58:e0:e4:d7:4f:b9:ff:b3:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:DF:27:96:12:3F:E1:15:16:83:FF:1F:9A:E2:61:74:CB:01:9D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/9n3fJ5YSP-EVFoP_H5riYXTLAZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.178.0/24
82.153.240.0/24
82.153.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7d:e9:be:93:0d:d6:19:11:e5:ea:b8:44:32:71:a0:59:6f:
f7:c2:2b:f2:80:00:d0:12:1e:0b:9a:01:b2:a5:d8:df:41:42:
87:93:39:27:ff:ae:69:dc:bc:3b:96:ad:7f:a8:7b:ce:81:3a:
cb:a3:73:74:15:70:18:81:c0:9b:5e:3f:20:91:cc:91:17:98:
60:77:8f:ae:29:2e:e7:a4:48:04:53:4a:aa:71:35:ce:a0:aa:
47:1d:b9:bf:98:b3:02:a2:ab:b9:dc:75:30:59:6c:63:3b:ca:
c4:7f:99:7c:76:bf:ab:f4:02:79:c8:f0:48:63:bf:94:29:fc:
83:a0:4f:a7:2b:9e:c6:97:77:d2:a3:32:e6:cf:b9:42:65:5c:
63:8d:cf:77:aa:d3:f4:2d:77:45:2d:39:33:67:38:c2:47:93:
6e:f9:c3:e4:66:b4:a4:fc:00:8a:d1:2d:2f:81:62:1f:24:ad:
81:7a:be:36:39:e8:bb:8f:cb:db:88:a1:b8:c7:35:a1:4c:d5:
4a:62:2b:5d:cf:b5:77:64:6a:a1:a9:15:c0:e7:1f:0a:8a:7e:
bc:10:41:36:4f:98:08:7e:83:c3:b2:20:be:d6:90:e5:c7:2f:
06:29:30:0d:be:fb:67:13:93:41:c6:62:d4:d5:1d:15:17:ff:
e7:a0:f0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:26:40 2025 by rpki-client