Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jj4CLkTTbVHdOuCobYMcOReB-Qw.roa
File: jj4CLkTTbVHdOuCobYMcOReB-Qw.roa (raw, json)
Hash identifier: 6FtxEkYELU4b9hDA4ls3P3ls9yPBYsf4YP7sqdcQ/7Q=
Subject key identifier: 8E:3E:02:2E:44:D3:6D:51:DD:3A:E0:A8:6D:83:1C:39:17:81:F9:0C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018688710B828C35FFFA40B7ED3F59D2778C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jj4CLkTTbVHdOuCobYMcOReB-Qw.roa
Signing time: Sat 25 Feb 2023 11:59:15 +0000
ROA not before: Sat 25 Feb 2023 11:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 81.168.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:88:71:0b:82:8c:35:ff:fa:40:b7:ed:3f:59:d2:77:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 25 11:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e3e022e44d36d51dd3ae0a86d831c391781f90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:cf:c4:b1:60:d0:06:c9:3c:fd:99:b4:b8:
ce:13:41:e3:c6:e6:2e:e1:a5:2b:60:b7:81:dc:7d:
35:9e:54:e0:a8:0f:07:da:d9:55:1c:3b:fb:79:04:
46:77:05:dd:61:0d:2d:ca:8c:06:cb:ff:34:3c:85:
e5:ee:0b:ba:b4:72:9e:12:b1:8c:d7:18:7b:d0:2a:
b1:0d:03:ac:66:ba:f8:55:70:b6:f0:07:c2:23:90:
ee:b8:6d:aa:6e:a8:e3:1a:2e:6c:87:21:1d:e2:76:
dd:46:05:26:38:37:c8:43:12:fe:dd:62:d5:9a:cc:
97:61:6d:c9:11:bc:8c:6d:9b:4d:79:52:d7:7e:fe:
35:de:3c:e7:60:3c:5f:a1:20:fd:bb:ad:56:70:1e:
b6:7c:fe:36:75:9c:5a:e7:90:a5:8b:99:75:fe:92:
20:dd:a5:34:c7:b7:c2:32:31:e6:a8:51:ea:0b:b3:
72:58:a0:a3:7a:19:d9:b6:03:bb:74:87:b7:37:04:
28:34:2f:9c:7f:56:1f:78:ee:be:85:55:64:9b:43:
a6:00:82:5e:79:04:dc:c5:5f:f7:91:7c:c3:48:a4:
36:6b:eb:79:b0:21:0d:85:a3:4d:1e:87:91:8f:34:
4f:ae:6d:d8:c5:11:85:3c:7c:6d:25:d3:41:e6:f6:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3E:02:2E:44:D3:6D:51:DD:3A:E0:A8:6D:83:1C:39:17:81:F9:0C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/jj4CLkTTbVHdOuCobYMcOReB-Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e0:fe:87:69:dd:60:cf:fa:0a:2d:ed:4a:a0:55:71:bc:95:
90:d4:80:9e:cc:dc:40:e7:2d:46:99:45:f7:cb:56:f0:05:4d:
a7:47:6b:fd:6d:e4:db:61:2f:bd:0c:4d:40:2e:5a:3c:69:ce:
eb:00:28:14:80:8b:7a:d4:96:46:77:0f:2b:40:b7:a8:dc:7c:
9c:dc:fe:e3:c9:f0:1b:46:58:71:0e:fb:8c:a7:44:c5:a7:9f:
cd:7b:40:f5:95:d1:59:25:62:1a:1f:ef:5c:a0:79:78:5d:63:
87:a3:8a:c9:98:1f:a8:91:90:83:56:8b:e6:2c:9a:da:06:48:
c1:64:6b:be:24:12:1d:82:6b:d2:90:e6:e8:69:bc:eb:ce:90:
e0:63:c0:f7:59:b0:31:d5:33:94:b6:46:ea:5d:e5:1d:91:b8:
a5:08:3b:2c:6b:13:06:8e:1e:14:4b:67:69:7d:9c:a5:11:45:
8e:df:3c:d9:da:d5:69:f1:81:fc:9c:e5:b3:1a:5f:c6:95:ad:
31:80:bf:a6:ed:f0:c7:6a:e7:84:39:dc:d2:63:82:4e:ce:63:
f2:05:19:c7:7e:4b:f2:60:3e:e7:17:97:ee:68:9e:23:da:a8:
89:57:6d:bb:e5:3f:22:da:a5:22:f8:38:70:0c:4e:2f:d0:f3:
6c:f3:b0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:04:37 2025 by rpki-client