Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O_I87j0ga3T2JZVy0cJ55G6k_Gc.roa
File: O_I87j0ga3T2JZVy0cJ55G6k_Gc.roa (raw, json)
Hash identifier: xkiqy7e1MKEN7NCSqYcSmEzGYJeUIR4mfzznPMom6LI=
Subject key identifier: 3B:F2:3C:EE:3D:20:6B:74:F6:25:95:72:D1:C2:79:E4:6E:A4:FC:67
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01890CE409C44F9A339877C31A7171780890
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O_I87j0ga3T2JZVy0cJ55G6k_Gc.roa
Signing time: Fri 30 Jun 2023 15:20:18 +0000
ROA not before: Fri 30 Jun 2023 15:20:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 82.153.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:e4:09:c4:4f:9a:33:98:77:c3:1a:71:71:78:08:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 30 15:20:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bf23cee3d206b74f6259572d1c279e46ea4fc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:c2:f5:6c:68:0f:90:5f:c0:69:9e:8c:de:
15:20:d9:33:75:44:95:0c:a1:2f:cc:a9:95:98:7d:
e9:85:ea:b0:22:4e:d1:be:5f:a7:c7:af:0f:a3:84:
f1:cc:8f:f4:1a:7a:07:82:20:97:75:ed:1d:21:10:
e3:c2:fd:bc:11:50:97:36:38:b2:fb:f0:53:50:b4:
9c:67:f4:da:c5:fb:a3:c9:be:a1:f9:66:b7:72:06:
84:03:d3:ea:36:0d:b4:28:7c:42:72:36:b3:06:1f:
cb:d1:39:d2:f5:c2:52:c4:37:a7:e4:d5:f5:5e:fd:
e5:26:84:bd:49:c3:2b:17:93:54:94:8d:dd:ee:33:
c0:fb:1e:09:58:6d:fb:e3:e3:1f:53:2f:e0:68:d7:
20:79:89:c3:f4:80:b7:65:d1:a3:34:3c:dc:da:6d:
33:d0:5e:99:a9:73:cf:f1:bd:76:49:56:a2:76:bc:
04:e7:3a:94:b1:46:4d:b5:a2:e0:39:4f:02:93:aa:
6a:a8:e8:6a:c6:b2:80:3f:e4:df:a2:78:06:53:8a:
ae:dd:af:d5:3b:0e:08:2e:2d:47:8d:bf:18:d4:d2:
f2:02:1b:82:82:5b:f2:06:c0:45:0e:a5:98:85:eb:
b9:48:c5:ef:37:d6:d6:4f:b5:20:6c:66:93:06:4a:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:3C:EE:3D:20:6B:74:F6:25:95:72:D1:C2:79:E4:6E:A4:FC:67
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/O_I87j0ga3T2JZVy0cJ55G6k_Gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.65.0/24
Signature Algorithm: sha256WithRSAEncryption
30:43:0e:a0:a2:bc:16:fd:b8:c6:12:b3:37:1b:83:94:73:b7:
3f:50:2d:cb:8c:81:96:68:b4:40:42:d6:36:6a:cb:31:a2:52:
dc:1a:a4:74:78:01:38:25:a2:75:17:99:ca:db:7a:de:63:0d:
3a:ee:6c:ed:b4:bb:40:a7:67:9a:32:ec:c1:a4:9f:04:68:17:
9c:1c:28:c6:7b:70:64:06:b4:80:a2:27:9a:0f:c8:e9:41:30:
57:88:d0:fb:8b:b9:64:ef:dc:32:67:e4:ec:ec:7f:7b:38:0c:
cd:e1:68:be:c8:05:b8:45:d8:56:87:c4:d8:d4:7e:48:8d:44:
a2:bd:50:e9:a9:04:9c:10:16:54:73:cc:80:be:bf:81:3e:8d:
e3:63:4a:71:8f:2c:77:47:f9:7e:da:42:b9:08:33:64:a4:8b:
56:34:cd:6e:68:4d:7c:06:33:f2:db:3d:ea:d7:a4:88:3b:1a:
d9:46:37:27:0d:3d:cc:b4:0f:eb:be:eb:5e:62:24:c9:22:32:
2f:37:5c:b4:9b:d7:39:a6:97:57:47:fb:bd:cf:23:78:9a:63:
ab:4d:f5:dc:89:75:97:41:d2:75:fb:76:6c:49:a9:db:36:2b:
70:d9:5d:cb:a5:1b:aa:e9:bd:13:2c:26:36:21:5a:a4:cb:c1:
41:3e:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:25:42 2025 by rpki-client