Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SENUI62n0XYlIgScx3eB1CZQ8u8.roa
File: SENUI62n0XYlIgScx3eB1CZQ8u8.roa (raw, json)
Hash identifier: jpOuYr5f792bVwlbNVwd2sHd51DDqluY/vDdQTTw6KA=
Subject key identifier: 48:43:54:23:AD:A7:D1:76:25:22:04:9C:C7:77:81:D4:26:50:F2:EF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018BDC73FD5C21A1A1B591068612530D2DF0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SENUI62n0XYlIgScx3eB1CZQ8u8.roa
Signing time: Fri 17 Nov 2023 08:44:30 +0000
ROA not before: Fri 17 Nov 2023 08:44:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 82.153.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:73:fd:5c:21:a1:a1:b5:91:06:86:12:53:0d:2d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 17 08:44:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48435423ada7d1762522049cc77781d42650f2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:6c:6f:e3:10:6d:f1:38:e9:8d:0b:ec:47:
d4:09:07:e4:2d:18:81:89:ea:59:5e:0d:1d:64:ba:
c3:f1:b5:5b:22:a6:87:67:db:0f:56:b6:c1:37:0d:
df:4e:d2:6c:d8:2e:b1:de:9e:53:17:84:c8:e1:91:
ca:7f:db:93:a8:48:b1:d4:d8:60:d6:00:0a:11:78:
61:49:d4:d8:fa:7c:a6:e1:ed:ab:d9:5f:73:2d:7c:
cb:a1:10:98:d9:13:c6:6a:96:a4:8e:6f:ef:4a:87:
f2:76:66:5c:95:51:cf:5b:16:fc:18:a2:70:f6:b3:
05:95:0c:da:b8:e2:b4:c9:56:47:5e:1b:2d:e5:e7:
72:19:ee:5d:e5:60:c8:b9:cf:39:59:bc:c0:94:b0:
11:2f:26:f2:11:ad:57:2b:a4:31:02:cc:7e:a0:f8:
cc:76:84:b3:12:bd:b8:e0:35:55:c0:62:0a:74:cd:
28:60:4b:54:90:8c:4d:43:bd:d3:2c:89:00:06:4d:
90:a0:a4:68:ec:df:33:0f:a1:f9:c7:4f:00:3c:39:
a0:f5:5a:e5:dd:05:fd:04:48:32:36:e1:58:5f:7b:
33:9c:b5:ae:0a:09:79:62:5c:55:4e:7e:0b:35:29:
25:c5:99:f1:62:4c:5d:9e:ab:02:49:7e:e6:20:48:
0b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:54:23:AD:A7:D1:76:25:22:04:9C:C7:77:81:D4:26:50:F2:EF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SENUI62n0XYlIgScx3eB1CZQ8u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.220.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e0:2c:f3:2f:46:3d:d1:76:d2:1a:ee:31:bd:dc:b3:6f:26:
67:28:99:26:f1:37:49:ab:7d:9b:63:10:61:69:b1:d9:7c:47:
71:32:e8:cd:89:7d:8d:3e:f5:f8:1b:20:ee:b3:05:0e:78:7c:
3f:4f:29:fb:49:59:51:63:e1:23:e6:67:88:05:93:0a:3c:1f:
7b:42:ea:40:59:3b:71:77:71:fd:b7:28:fa:5a:2e:7c:e0:d9:
86:ae:9e:c2:1e:6b:67:16:3a:e8:df:94:9e:9a:c7:90:32:97:
20:0f:f3:7f:3c:c6:01:5c:cb:db:e8:24:b2:c7:43:e0:f0:18:
21:9b:1f:ab:2c:84:80:d3:60:53:4d:8a:d5:91:e7:76:78:75:
0a:4b:64:f7:21:19:15:b6:7f:9f:99:a9:aa:ac:75:b6:72:4d:
97:85:e3:cc:f3:a4:01:62:5c:ee:46:6f:0c:0a:2f:22:d6:e3:
09:e2:7b:ce:69:20:bd:93:1c:c1:f6:c6:3b:79:2d:10:7a:79:
9f:c4:ac:7e:50:ff:78:79:65:4d:1f:09:6e:50:65:36:64:36:
fa:b6:68:8e:4a:67:7c:3b:1d:0a:99:dc:d1:b9:88:d4:76:f0:
9f:46:6b:d0:a5:3a:0b:f8:fb:27:d0:6f:0f:43:d3:a2:41:4f:
60:d2:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:22:22 2025 by rpki-client