Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MDj5v_j7hYhOcMqHKkyOOSIZfnc.roa
File: MDj5v_j7hYhOcMqHKkyOOSIZfnc.roa (raw, json)
Hash identifier: J5MHY9O/Xv6WNy72Y5T6Vq6c/dG29jhzmILsUzmXFXU=
Subject key identifier: 30:38:F9:BF:F8:FB:85:88:4E:70:CA:87:2A:4C:8E:39:22:19:7E:77
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0182F9788975A86616A3DA26769314DD53B8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MDj5v_j7hYhOcMqHKkyOOSIZfnc.roa
Signing time: Thu 01 Sep 2022 14:33:22 +0000
ROA not before: Thu 01 Sep 2022 14:33:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 81.168.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:78:89:75:a8:66:16:a3:da:26:76:93:14:dd:53:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 1 14:33:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3038f9bff8fb85884e70ca872a4c8e3922197e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:ad:7a:2f:52:c4:13:f9:4a:a1:81:95:46:
08:0f:5f:d8:0f:4d:6f:88:6b:24:7c:4e:74:40:40:
95:58:1d:7e:64:21:6d:90:e9:bb:9f:5e:78:e3:f2:
49:fa:6d:06:8d:4d:5f:98:22:a3:63:f4:80:94:26:
06:94:2a:01:f8:35:11:cd:fa:12:4c:5e:64:78:76:
91:9d:ba:4d:20:7c:6e:96:48:f8:41:89:1e:30:0c:
26:2d:4a:bb:e3:c9:72:8d:44:c9:d5:96:76:7a:1f:
93:30:1f:8e:4a:23:90:4d:c6:0b:4f:99:88:d4:e2:
92:21:10:b6:1c:97:95:04:8d:a3:6f:55:ec:65:70:
a8:8a:46:91:18:d2:62:f1:e6:a2:c7:35:ff:08:c8:
8b:c6:36:59:15:0d:45:a7:06:76:e4:48:fe:6a:7d:
fe:d7:ef:f3:70:ba:b8:7b:26:69:d1:7e:05:36:12:
e9:4b:92:20:79:28:9a:c1:46:6f:1d:b7:4c:ed:21:
4d:d8:79:a7:47:27:cf:c6:63:b7:17:c9:86:bd:8d:
2e:ab:ea:8f:cd:22:2c:d2:b3:05:02:80:d5:43:27:
f9:ff:ec:1a:85:80:7d:5d:ea:1e:c9:6e:07:14:45:
7d:ed:bd:ff:0e:e1:ab:5d:e7:25:70:c0:ae:18:22:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:F9:BF:F8:FB:85:88:4E:70:CA:87:2A:4C:8E:39:22:19:7E:77
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/MDj5v_j7hYhOcMqHKkyOOSIZfnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.41.0/24
Signature Algorithm: sha256WithRSAEncryption
13:58:e7:4a:86:fc:04:5d:49:ba:22:ab:92:66:b8:f5:5b:91:
ea:50:05:93:31:fb:49:19:c8:34:91:8a:8f:d0:c0:03:ab:b6:
5f:71:21:ca:fb:f0:c2:94:61:6f:ae:d9:c5:90:54:ca:6a:94:
0b:8f:d6:b0:b1:1e:03:e0:0a:07:18:e0:d5:9d:bc:dd:0f:10:
1b:6a:f0:29:a7:a6:f6:d3:75:47:d5:5a:94:2f:fa:dc:7c:f6:
5a:51:a2:6a:fc:ca:f1:9a:dd:06:90:a0:8c:ea:49:b0:b9:24:
f5:1e:40:68:c5:59:b4:34:8a:6f:76:13:c9:1b:15:38:c2:b8:
1e:83:33:a8:d0:95:dc:d5:ad:6c:de:8b:ca:73:06:38:66:b0:
86:32:a4:c4:b1:d0:f4:8e:10:be:f7:e1:4d:ab:34:0b:d4:16:
94:b4:37:b8:01:42:77:d0:f7:48:06:d1:a8:cb:6d:cb:57:31:
a1:b8:5b:10:d1:e7:be:6c:99:16:90:f6:6c:c8:54:c1:cf:29:
77:66:3c:f7:b4:e4:cd:05:3b:b2:9a:24:7a:81:83:9c:53:a6:
de:db:72:d0:87:00:ba:b9:be:ed:8f:54:35:da:20:6a:4f:87:
13:a2:1b:d4:a2:37:94:ae:1c:ca:24:e4:c0:d6:ac:6c:1e:ab:
01:f6:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:25:08 2025 by rpki-client