Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HOdicIinexfbqdgAdT_xlCRu_IU.roa
File: HOdicIinexfbqdgAdT_xlCRu_IU.roa (raw, json)
Hash identifier: L7eAJ1VUrLsdh0EUh/onW929ohsFoLyh0GdXvPUpzsk=
Subject key identifier: 1C:E7:62:70:88:A7:7B:17:DB:A9:D8:00:75:3F:F1:94:24:6E:FC:85
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189F3B451A6D1796C21AF28024731F2D725
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HOdicIinexfbqdgAdT_xlCRu_IU.roa
Signing time: Mon 14 Aug 2023 11:00:28 +0000
ROA not before: Mon 14 Aug 2023 11:00:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202704
IP address blocks: 82.153.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:b4:51:a6:d1:79:6c:21:af:28:02:47:31:f2:d7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 14 11:00:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ce7627088a77b17dba9d800753ff194246efc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:14:ee:88:42:af:16:8d:05:93:bb:34:fd:
8d:1a:7e:14:aa:c8:9a:49:bf:df:38:9d:69:bf:35:
86:74:51:eb:c5:ee:7e:4f:60:98:3c:5b:1c:6a:49:
05:4e:df:e1:14:ce:64:3a:1a:18:00:23:e8:1c:1b:
12:3d:5c:6e:44:87:3b:55:83:aa:1f:61:27:ac:4f:
f9:0e:dd:19:80:70:9d:39:dc:20:a2:7a:51:f3:2a:
4e:78:18:17:bb:8e:90:41:b6:c4:11:f7:2a:88:99:
a0:dd:32:dc:7a:48:d2:92:8b:e1:e5:63:60:39:06:
4d:8e:26:23:7c:6d:e1:8c:ad:47:ef:75:55:01:9e:
6d:4c:ad:98:15:ce:16:81:e0:ed:7a:84:fd:6f:3f:
bc:9a:63:bd:ba:38:24:1f:27:50:09:50:69:dc:ab:
57:d9:31:54:e0:cc:a0:7a:f6:4e:e7:4f:74:8a:1b:
77:82:68:ae:2c:09:af:01:16:e0:de:74:52:fd:30:
78:de:b3:45:63:a6:62:16:30:d5:fd:7f:39:88:1e:
70:32:5c:86:d5:23:b1:53:ac:db:23:29:57:41:c6:
82:2a:48:f8:0d:f3:bf:41:0b:37:dd:92:d4:ed:76:
b7:f1:4c:44:b8:53:e9:7b:d6:db:cf:4e:ff:67:ef:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E7:62:70:88:A7:7B:17:DB:A9:D8:00:75:3F:F1:94:24:6E:FC:85
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HOdicIinexfbqdgAdT_xlCRu_IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:18:a8:fc:1c:de:52:89:e9:77:8b:91:06:60:dc:6c:88:de:
20:74:94:d3:ce:68:bd:8f:67:6e:66:54:71:99:46:6c:e6:d7:
28:f8:13:ba:a3:28:12:3b:bd:ee:00:6e:83:0a:b1:dd:39:1e:
51:b5:7d:0f:17:35:c6:62:da:24:3e:29:34:0e:bf:5f:bd:fd:
36:38:f0:04:2e:2f:34:98:b6:12:10:5d:5e:c7:78:ab:bd:29:
7d:4a:6a:f9:ac:38:1c:46:17:2f:6d:e0:02:03:9c:b7:ae:5e:
42:96:f3:8c:8d:f6:7f:d1:4e:27:67:f3:cc:03:21:45:f0:0f:
e1:79:d8:bf:f4:4f:d7:f2:db:de:90:90:51:cd:53:38:34:3f:
fc:41:e1:28:82:30:73:c0:4d:8c:81:a4:b2:cc:d7:c0:9d:55:
cd:28:8d:39:6a:a3:e6:c5:b4:88:9c:7a:d3:4c:53:cd:e4:75:
23:78:30:bd:fd:7f:17:c2:16:31:9f:a8:b1:9c:e4:74:f5:36:
fc:64:32:32:c8:7b:73:37:fa:ff:c8:11:bf:28:84:78:e5:05:
72:31:51:fc:a4:87:ab:8f:48:0c:ea:d6:63:2d:22:97:5f:9e:
c3:73:3c:c9:35:66:89:82:06:2d:eb:46:64:a0:c2:3c:fd:a2:
3b:ac:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:03:57 2025 by rpki-client