Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BiT2SlgiT29-dizpn6KvV5vhtvw.roa
File: BiT2SlgiT29-dizpn6KvV5vhtvw.roa (raw, json)
Hash identifier: ITt9hKFwmx8dY1HdbHhgsMk0hNxL4tYa0aDe1IxoFAg=
Subject key identifier: 06:24:F6:4A:58:22:4F:6F:7E:76:2C:E9:9F:A2:AF:57:9B:E1:B6:FC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018BDD955B093F8218EDA92F84D43DA88DE4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BiT2SlgiT29-dizpn6KvV5vhtvw.roa
Signing time: Fri 17 Nov 2023 14:00:34 +0000
ROA not before: Fri 17 Nov 2023 14:00:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 109.176.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:95:5b:09:3f:82:18:ed:a9:2f:84:d4:3d:a8:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 17 14:00:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0624f64a58224f6f7e762ce99fa2af579be1b6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:f2:37:0c:6b:26:f5:d8:a8:65:d1:1c:7a:
b8:90:cd:3f:ba:c2:c1:db:e0:76:1d:70:0d:ee:e6:
6b:47:31:a9:0f:80:66:47:5a:b2:0c:8f:9b:72:77:
c4:0d:bf:af:a1:ce:76:52:60:28:c6:43:a8:85:18:
b4:92:81:18:66:ca:f6:77:5a:ff:70:5e:13:2a:1c:
bf:0d:65:9a:dd:4a:12:0f:d3:55:f9:bc:29:18:37:
0c:e7:d2:85:4a:bc:43:63:c3:6e:41:71:bf:70:39:
fc:5d:b4:46:7a:0b:43:60:bd:e5:f5:34:1a:ff:01:
29:99:a3:45:ea:e5:8f:f8:11:c3:ad:04:3d:e6:a6:
2b:53:ac:fe:db:24:3e:38:d1:8b:c8:f8:ac:72:f2:
f3:b6:32:9d:b0:d6:63:a1:67:69:36:ee:3b:0b:a1:
a1:e6:b5:20:03:97:d4:0f:0a:fe:4f:2e:81:34:f6:
13:0a:ea:dd:c2:70:2c:28:13:fb:f2:af:dd:47:97:
97:56:bf:bc:ff:24:4b:a4:48:64:46:58:3f:b3:6b:
8f:2b:54:3c:11:22:48:89:fa:73:0a:b3:00:8c:c6:
e2:50:30:2e:2a:49:27:30:a7:76:c2:30:15:e6:17:
aa:86:5d:33:38:66:54:a2:5e:81:89:c4:83:57:e9:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:24:F6:4A:58:22:4F:6F:7E:76:2C:E9:9F:A2:AF:57:9B:E1:B6:FC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BiT2SlgiT29-dizpn6KvV5vhtvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:85:cf:f0:4a:2e:d6:2e:2f:db:3e:38:af:e1:b5:1c:e6:4a:
33:49:4b:c0:57:6d:37:e3:bd:6e:47:63:ac:dc:77:60:d1:e9:
d3:e4:36:19:fb:90:47:67:22:3a:ac:ca:ba:c8:4b:dd:c6:8a:
3e:b2:4c:99:74:bf:0f:05:62:3c:68:93:b3:b1:e1:70:cc:ba:
48:d2:79:57:42:6c:bb:1f:9d:a9:31:8b:34:02:5d:cb:ae:21:
e1:90:a1:dd:73:a4:5e:0f:f6:6a:6c:64:d1:bb:41:f3:87:52:
47:76:3b:ec:bb:5f:43:21:2f:fa:b6:00:54:77:cf:50:7a:27:
29:5b:14:cb:6d:80:9a:66:2a:32:80:22:ac:f3:e8:11:c2:15:
69:4e:a5:ff:dd:5b:a4:43:35:f1:c1:b5:d8:24:e9:95:c9:e2:
74:72:d5:aa:b2:fc:eb:f7:57:f6:2b:a7:b8:38:6f:07:23:d6:
e9:db:3b:e6:c7:f4:d7:f7:87:02:e1:60:2e:09:bc:1c:f9:38:
32:fa:4a:99:1d:d2:af:d0:92:66:79:ac:bf:a9:40:95:d2:4a:
cc:1f:89:1a:8f:89:03:74:ee:b2:7b:58:38:98:eb:9e:48:63:
84:44:85:a4:2b:b4:f8:23:66:33:bd:3b:3a:73:9e:0f:c8:53:
ed:db:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:08:19 2025 by rpki-client