Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B38P794oY-JY-D5baDjGzfu0Ojk.roa
File: B38P794oY-JY-D5baDjGzfu0Ojk.roa (raw, json)
Hash identifier: ALdLBci53saSg4x0iH8hMIjF3PirI6U/HAoeAh6LPUo=
Subject key identifier: 07:7F:0F:EF:DE:28:63:E2:58:F8:3E:5B:68:38:C6:CD:FB:B4:3A:39
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01863689876922C617CEB6A5D65B288FC94E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B38P794oY-JY-D5baDjGzfu0Ojk.roa
Signing time: Thu 09 Feb 2023 14:17:08 +0000
ROA not before: Thu 09 Feb 2023 14:17:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 81.5.191.0/24 maxlen: 24
82.153.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:89:87:69:22:c6:17:ce:b6:a5:d6:5b:28:8f:c9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 9 14:17:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=077f0fefde2863e258f83e5b6838c6cdfbb43a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:12:2c:1b:ac:3d:7f:42:3a:fa:9f:3d:cb:
47:82:06:b3:7c:09:91:93:36:5c:ea:91:50:a5:5c:
da:bd:a3:e3:60:36:28:e9:83:7a:50:17:4b:99:83:
21:b2:19:4a:5d:a1:f5:6c:a8:6d:c5:d8:9e:a6:f4:
a0:a2:c1:ef:6f:bf:92:4d:8f:75:91:7a:e1:5e:73:
d8:99:6c:a0:63:d4:80:4d:e9:63:14:ae:2a:3f:37:
0b:31:d0:5e:f6:71:20:34:62:cb:0e:a7:ef:15:27:
5e:da:d1:f9:7b:57:e4:32:04:f8:c2:fe:c6:c0:ed:
a7:0f:c0:ae:9b:85:85:30:a7:e5:b7:9a:3e:44:2c:
13:35:fa:ff:23:c2:75:a4:83:10:80:28:2c:b2:87:
db:5a:c6:49:0a:ea:04:b4:24:a2:02:92:05:9d:ea:
e5:47:77:be:39:fd:c5:90:e4:ef:d5:72:82:4b:95:
95:27:53:bc:25:8e:be:ba:29:4d:2a:5e:66:8e:e7:
7a:6e:77:34:d8:d8:0b:a5:4d:79:6f:6c:2f:5f:13:
8e:32:5d:6b:99:a2:fd:e1:60:bb:65:80:90:bf:c6:
e4:dc:4f:69:37:7c:2c:2f:0f:e2:0a:f2:c9:e6:ba:
f7:39:2a:4a:92:84:9d:da:0c:a9:b4:93:c7:07:79:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:0F:EF:DE:28:63:E2:58:F8:3E:5B:68:38:C6:CD:FB:B4:3A:39
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B38P794oY-JY-D5baDjGzfu0Ojk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
82.153.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:52:70:8f:c9:44:b5:b7:5d:8c:ae:62:f0:ce:07:13:c7:c9:
bc:11:54:1f:bf:41:db:22:50:1a:14:cc:49:83:f7:fd:e5:48:
63:ae:85:09:04:97:0a:44:81:51:31:18:3d:d1:43:b5:a3:4d:
7d:29:34:9a:d2:0e:2c:cb:57:4d:b6:f3:3e:01:eb:99:15:1e:
50:49:04:bb:66:d1:c2:10:8b:63:3f:07:14:03:2d:aa:92:89:
06:f8:a6:6c:d3:f1:c4:f6:40:4d:d3:0d:d7:e6:62:bb:19:b9:
4d:d7:e5:1c:a4:b6:1e:f9:41:6a:88:0c:d5:da:fa:ab:d9:54:
a6:15:00:e5:84:da:96:8a:5a:f7:c4:7e:2b:08:33:fd:4d:bc:
fb:4e:f1:54:1d:0a:85:79:f6:66:9d:77:0b:59:be:0e:3f:fd:
a7:c9:a1:cf:f2:0f:33:11:20:aa:a3:38:34:c7:80:c6:13:ae:
0f:8b:07:e3:c0:d2:38:26:bb:6b:2b:db:cf:c1:cb:a4:58:a6:
2d:c6:c0:da:bb:09:73:86:0c:1c:20:65:b9:e3:13:ce:f4:f1:
e5:b9:b5:da:f1:85:c9:dd:68:0f:c8:b3:17:33:a4:5e:cb:ed:
7e:e6:f1:03:b1:17:89:fc:11:70:01:fe:1f:0c:d8:93:5c:ad:
ad:39:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:32:05 2025 by rpki-client