Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FyiHAtLm6yceQ4ADJOtZQuneYZo.roa
File: FyiHAtLm6yceQ4ADJOtZQuneYZo.roa (raw, json)
Hash identifier: K9pweQ1EyZLQF9GO6p/S2wLativiGuN+bbaNJnyj/Dk=
Subject key identifier: 17:28:87:02:D2:E6:EB:27:1E:43:80:03:24:EB:59:42:E9:DE:61:9A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018571FA2C66E9C6958AE6238225F7358BF9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FyiHAtLm6yceQ4ADJOtZQuneYZo.roa
Signing time: Mon 02 Jan 2023 10:14:58 +0000
ROA not before: Mon 02 Jan 2023 10:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 81.168.116.0/24 maxlen: 24
82.153.79.0/24 maxlen: 24
81.168.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:2c:66:e9:c6:95:8a:e6:23:82:25:f7:35:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 2 10:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17288702d2e6eb271e43800324eb5942e9de619a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:c0:f1:8d:b3:8c:b4:aa:3d:04:1f:a2:fb:
7e:91:72:08:d0:7b:15:18:a1:78:47:1d:fb:e7:c1:
59:06:71:96:48:cd:73:15:54:9d:1c:99:79:36:97:
91:29:ff:44:f2:1f:30:53:b5:c8:67:cd:74:8c:c0:
34:63:f2:52:0f:30:37:4d:e5:44:5e:0d:19:0d:df:
d1:5f:76:07:f5:f9:aa:a5:f8:49:3a:b5:60:8e:0f:
58:20:e3:0f:cf:1d:71:eb:f1:e1:2f:fd:8f:13:7c:
07:75:07:4b:3e:56:a5:bc:2e:69:d3:21:7a:29:9c:
64:ae:9b:0a:1b:2e:59:c5:8b:3f:b1:f6:44:c4:09:
95:b3:ea:d3:b1:51:93:54:ef:bb:12:ce:89:9f:7c:
9a:69:4d:08:ee:90:0e:47:83:70:88:cf:cb:d5:4a:
f9:c2:19:9a:ad:54:9a:52:ae:34:be:cc:67:3e:f1:
97:b3:43:32:cb:c6:53:7b:88:a5:5e:c6:b0:5f:94:
76:45:9c:d5:bb:4f:a1:d1:17:d7:2d:7e:d8:f9:fd:
ca:e1:fa:aa:4c:19:60:7b:0f:17:89:e5:58:42:86:
0e:89:5e:ab:86:6c:a9:58:2b:62:a5:e9:0f:16:88:
c7:56:82:7b:57:b9:29:32:d8:8b:f7:14:65:0d:10:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:28:87:02:D2:E6:EB:27:1E:43:80:03:24:EB:59:42:E9:DE:61:9A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FyiHAtLm6yceQ4ADJOtZQuneYZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.35.0/24
81.168.116.0/24
82.153.79.0/24
Signature Algorithm: sha256WithRSAEncryption
23:5f:7b:44:3e:5e:04:28:69:a3:20:c2:78:18:e4:b5:78:41:
b8:f4:c7:98:80:b3:ad:c4:04:61:84:68:4d:9a:e2:b9:cf:17:
b4:d8:73:51:bd:69:e6:5a:2e:37:6a:88:e0:fb:83:e3:40:e4:
ea:33:18:2e:88:56:1b:ff:23:d2:54:dd:a8:57:5b:5d:4f:4f:
1b:a6:6b:43:0b:28:63:21:57:60:4b:67:09:e5:b9:25:8d:1c:
6b:a9:e1:a7:e2:df:87:fc:dc:79:31:08:ad:d4:a4:1c:14:63:
5c:60:d1:6a:81:38:61:a8:a9:47:09:61:15:7b:cc:84:39:1d:
cf:71:61:42:17:02:17:7b:dc:2b:18:62:60:28:52:17:94:f8:
a9:a0:d2:71:aa:76:23:92:d7:19:7d:42:1f:1e:0a:73:41:e0:
08:31:e8:8e:74:a8:a7:5a:60:cf:c2:be:68:b4:e8:28:55:5e:
f3:5a:27:25:ff:33:80:02:98:27:a2:2e:2a:27:92:8d:52:7f:
d3:4d:63:a5:11:50:4d:d3:46:47:ca:8f:44:bf:a8:25:af:1d:
a7:20:3b:be:95:0a:a5:a1:19:a4:9f:8b:65:3f:34:05:9b:ed:
c7:85:53:6e:87:a9:77:2b:83:46:6b:91:a5:a7:a5:23:e8:73:
a2:cf:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:17:24 2025 by rpki-client