Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gRm68UD_bS8IqCVyECA1sn3SU08.roa
File: gRm68UD_bS8IqCVyECA1sn3SU08.roa (raw, json)
Hash identifier: T8AhWJkr9PXpc2oWPKWM+lcGRImQAIaL5jrvGxQ7678=
Subject key identifier: 81:19:BA:F1:40:FF:6D:2F:08:A8:25:72:10:20:35:B2:7D:D2:53:4F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C005BBE1C94EF27C2B70E3CBD071F06FB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gRm68UD_bS8IqCVyECA1sn3SU08.roa
Signing time: Fri 24 Nov 2023 08:04:21 +0000
ROA not before: Fri 24 Nov 2023 08:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
89.213.180.0/22 maxlen: 24
89.213.182.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
82.153.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:5b:be:1c:94:ef:27:c2:b7:0e:3c:bd:07:1f:06:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 24 08:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8119baf140ff6d2f08a82572102035b27dd2534f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:95:52:e2:00:93:e8:9b:2e:49:2b:22:cc:
54:fb:63:3e:21:4c:de:6e:5b:4a:6f:32:3a:ca:20:
d2:d9:00:9f:e1:cb:5b:de:2b:6d:82:ea:e2:59:3b:
3d:35:58:d5:1d:ee:ef:2f:7b:03:4a:ef:dc:a5:65:
01:73:39:53:52:db:4a:ed:ff:a3:0b:aa:7a:4d:fc:
a5:fc:e0:2b:98:36:c1:79:33:74:ff:92:a6:47:00:
dc:e6:e2:42:cd:1f:5b:71:d5:d1:71:bb:7d:52:dd:
44:3c:3d:6e:c2:bd:46:08:7d:b6:4c:e4:e6:aa:6d:
e4:b9:da:ae:c3:5d:b2:23:6e:78:24:c1:d3:12:3c:
51:f9:2a:a2:56:48:a8:ae:c0:1e:39:04:cd:9b:ce:
cd:cd:3f:77:8e:46:02:cb:4c:e2:55:52:fe:bd:a0:
ee:7f:61:6f:08:f3:e4:c4:2b:38:d9:9e:97:f0:ae:
49:a8:25:50:b9:78:c8:0f:f4:3c:e7:3e:7b:cc:9d:
1a:89:a3:4e:b5:b8:f1:e8:7f:e8:85:bf:cd:64:8e:
81:32:28:dd:79:31:d4:90:98:8d:5b:e9:0f:fe:2b:
61:3c:f0:da:59:5f:89:cd:f7:b8:c9:ea:3e:0c:0c:
ba:54:d9:fc:be:95:51:2e:57:c5:57:e2:45:02:6c:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:19:BA:F1:40:FF:6D:2F:08:A8:25:72:10:20:35:B2:7D:D2:53:4F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gRm68UD_bS8IqCVyECA1sn3SU08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.153.10.0/24
82.153.136.0/22
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/22
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
28:16:cc:74:ce:60:ec:88:09:6c:13:f4:db:06:f8:c2:ba:36:
75:35:35:ac:67:47:df:5e:9b:4a:f9:f3:23:ba:06:0e:b6:d5:
86:ac:cc:af:29:90:38:ef:f9:0d:c5:88:96:ed:71:54:05:72:
50:80:cd:83:fd:ec:c3:60:e1:43:38:d1:0a:df:4f:a6:5a:15:
35:e8:cc:39:9d:e6:9e:a3:af:5f:5f:63:4d:cb:fd:71:6f:f6:
77:03:a8:d0:00:5d:d5:0d:b3:ff:c5:ef:34:f7:82:02:06:18:
61:7b:65:1f:f6:f0:4e:d2:53:9f:88:b5:34:d1:e4:35:12:c3:
4e:ef:75:f4:07:9d:cc:46:a7:fd:ef:bc:cf:dc:4d:f9:c8:3e:
8b:ae:0c:65:47:42:6e:ca:5a:ee:27:af:6e:1d:dc:69:6c:57:
69:f9:aa:5f:e0:a5:69:be:7f:06:38:7c:51:f0:65:67:06:45:
0e:fd:25:d1:e0:71:94:26:62:f9:22:69:be:bc:1e:d6:4d:b4:
e8:fc:23:3d:98:25:6d:87:62:b5:2a:1d:17:14:dd:7c:2b:19:
2f:3f:2d:95:87:40:a8:b3:a9:f8:32:0d:83:13:67:2e:43:4a:
77:e4:1a:ad:e2:18:e6:36:9c:08:3c:17:d1:e5:35:04:fd:e5:
88:78:be:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:34:31 2025 by rpki-client