Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ihEJn0_jie5fpejtg7M_K2WkxEE.roa
File: ihEJn0_jie5fpejtg7M_K2WkxEE.roa (raw, json)
Hash identifier: iymQjD4TAFn6QdJ8AqSzILUxElQCGegvKEgX+whWbjI=
Subject key identifier: 8A:11:09:9F:4F:E3:89:EE:5F:A5:E8:ED:83:B3:3F:2B:65:A4:C4:41
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018871C9854F76B669943A453D0B1C05E7F0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ihEJn0_jie5fpejtg7M_K2WkxEE.roa
Signing time: Wed 31 May 2023 12:30:12 +0000
ROA not before: Wed 31 May 2023 12:30:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 82.153.132.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
82.153.68.0/24 maxlen: 24
82.153.71.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
82.153.72.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.120.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
81.168.126.0/24 maxlen: 24
82.152.251.0/24 maxlen: 24
82.152.248.0/24 maxlen: 24
81.168.35.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
82.152.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:c9:85:4f:76:b6:69:94:3a:45:3d:0b:1c:05:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 31 12:30:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a11099f4fe389ee5fa5e8ed83b33f2b65a4c441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:da:6d:5c:02:c1:53:1e:56:5c:a9:eb:ff:
0a:b6:7e:b5:a6:2b:fb:e3:c8:63:22:7e:a2:3a:b1:
71:df:84:39:12:98:d4:85:44:3c:08:d1:37:ae:ab:
2b:bb:2f:18:2a:a5:4f:91:c9:82:9d:1e:8b:dd:a9:
45:f2:de:f1:5f:94:c8:53:86:49:27:91:0e:59:16:
41:8f:52:88:55:b4:40:0c:63:b4:c5:27:1c:c1:b8:
88:73:3b:1f:da:a3:21:a1:fa:52:06:17:2c:e6:ae:
66:41:fd:cb:bb:06:aa:96:14:e6:30:93:2f:65:3d:
be:ee:ed:d8:e9:19:90:1a:46:a5:37:c0:09:69:c4:
72:0e:02:78:73:da:e4:ee:d7:55:03:b6:a2:be:c0:
68:00:21:1e:cc:16:64:ec:ee:79:c2:ed:23:13:4a:
dc:6f:34:51:1e:46:38:f8:a9:cf:0c:53:ff:92:bf:
1b:7c:45:de:be:6b:5e:e0:42:54:eb:85:44:15:61:
8d:fd:2d:e9:7b:e2:5f:d5:90:1e:e6:01:24:fd:f1:
06:bf:1b:34:49:08:ec:60:d2:c5:bc:34:1e:46:18:
f2:ce:19:83:51:eb:55:27:4f:30:00:d6:11:21:77:
40:0d:fd:5a:85:52:1d:c9:62:d0:58:71:17:75:55:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:09:9F:4F:E3:89:EE:5F:A5:E8:ED:83:B3:3F:2B:65:A4:C4:41
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ihEJn0_jie5fpejtg7M_K2WkxEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.35.0/24
81.168.119.0-81.168.120.255
81.168.123.0/24
81.168.126.0/24
82.152.248.0/24
82.152.251.0/24
82.152.254.0/24
82.153.1.0/24
82.153.68.0/23
82.153.71.0-82.153.72.255
82.153.78.0/24
82.153.132.0/24
Signature Algorithm: sha256WithRSAEncryption
14:06:a1:1c:32:ec:6b:a3:fb:c0:41:bc:5a:6a:6c:7f:d1:5b:
2c:1f:99:14:06:a1:df:f6:60:9e:cf:9a:30:7e:43:e3:cd:cc:
b0:ce:d6:c1:27:65:97:3e:d1:eb:06:38:e6:1a:ef:d1:67:79:
a9:4b:1c:60:7f:6c:39:cc:f6:95:62:e9:b8:ce:8d:a3:ae:dc:
7f:b3:8b:4a:22:e2:ea:5a:1c:3a:95:0a:d8:d9:29:1b:84:c1:
f5:23:3c:d7:5e:dc:67:ce:c0:f7:48:ac:12:e2:a4:2c:23:a1:
ec:13:2f:2b:98:2e:e9:e9:91:84:fa:4d:26:5c:11:32:10:ad:
2b:d6:3a:96:67:83:f2:53:a6:f7:57:97:e3:ec:7c:cd:81:d5:
5f:af:09:59:3d:21:29:83:2c:89:89:9e:94:1a:ff:7d:26:c8:
0d:02:c3:51:bf:72:9c:12:a4:96:5b:33:18:a6:79:2f:f9:e8:
0b:ae:a6:01:b3:3f:8a:7a:98:fe:31:8f:bd:03:39:c9:96:02:
91:87:42:cf:ee:01:6c:a1:b8:1f:69:0e:df:0f:ea:1a:d6:8a:
03:62:f8:eb:01:9f:4d:cc:30:95:74:ef:68:12:f8:6b:ff:ab:
45:7e:1c:57:1e:c9:0c:53:0e:fe:10:ae:16:b5:1f:53:74:37:
c9:f7:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:28 2025 by rpki-client