Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kP6d5ADxq5gGMvbRbROdWvPcIQA.roa
File: kP6d5ADxq5gGMvbRbROdWvPcIQA.roa (raw, json)
Hash identifier: uV0qkLtIFfeOEknusaoGL7WG0rqXrklEtb55NZv6GXU=
Subject key identifier: 90:FE:9D:E4:00:F1:AB:98:06:32:F6:D1:6D:13:9D:5A:F3:DC:21:00
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01895DEF500EF77F899AC0368F6E30256DD7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kP6d5ADxq5gGMvbRbROdWvPcIQA.roa
Signing time: Sun 16 Jul 2023 09:01:51 +0000
ROA not before: Sun 16 Jul 2023 09:01:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
82.152.108.0/24 maxlen: 24
82.152.111.0/24 maxlen: 24
82.153.73.0/24 maxlen: 24
82.153.78.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
213.152.62.0/24 maxlen: 24
82.153.242.0/24 maxlen: 24
82.153.248.0/24 maxlen: 24
82.153.249.0/24 maxlen: 24
89.213.131.0/24 maxlen: 24
82.152.253.0/24 maxlen: 24
82.152.252.0/24 maxlen: 24
81.5.156.0/24 maxlen: 24
82.152.255.0/24 maxlen: 24
82.153.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5d:ef:50:0e:f7:7f:89:9a:c0:36:8f:6e:30:25:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 16 09:01:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90fe9de400f1ab980632f6d16d139d5af3dc2100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:68:9a:85:63:13:34:66:de:52:f4:3a:ba:
0a:c5:29:b1:f7:35:b1:78:9c:23:b4:4b:ca:dc:e3:
69:89:5c:bc:ad:aa:ee:84:e4:bd:8a:95:25:69:a5:
51:fa:48:cb:21:ee:56:b3:b7:ce:31:0e:98:05:d0:
d1:25:9f:5c:1d:60:e7:1b:ac:ae:4a:93:47:05:db:
32:af:a1:13:3a:13:e0:bb:83:15:df:9f:c3:24:40:
f7:60:8b:3e:35:1e:0e:a3:c1:e3:b7:6d:55:32:f4:
a2:cd:3e:be:09:4e:b5:17:4d:e8:4c:fc:0a:22:3c:
f2:5a:4e:01:82:33:d2:18:2b:2c:60:80:02:46:49:
9b:c0:ab:30:7b:34:48:f2:2d:c5:78:cc:90:c7:ce:
4d:08:a8:74:ff:02:b3:e0:e0:ea:9f:c7:7c:49:0c:
d6:e5:65:05:1d:10:e9:5d:05:63:7f:87:0c:ac:97:
70:ef:58:63:b0:02:2d:50:00:31:fe:d3:97:ab:0f:
6c:b5:4d:53:2f:0f:34:5e:df:e7:7d:2b:d2:05:d8:
f9:84:70:0a:7e:8f:f2:8b:f3:59:64:07:46:74:04:
da:4b:45:03:8c:89:a3:50:2b:47:ec:b9:8c:79:c6:
25:0d:e3:97:79:87:14:ff:97:5e:8b:32:45:cb:68:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:9D:E4:00:F1:AB:98:06:32:F6:D1:6D:13:9D:5A:F3:DC:21:00
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kP6d5ADxq5gGMvbRbROdWvPcIQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
81.168.119.0/24
81.168.123.0/24
82.152.108.0/24
82.152.111.0/24
82.152.252.0/23
82.152.255.0/24
82.153.73.0/24
82.153.78.0/24
82.153.136.0/22
82.153.223.0/24
82.153.242.0/24
82.153.248.0/23
89.213.131.0/24
213.152.62.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a4:11:6e:79:19:03:3d:29:9f:f7:c9:df:75:0b:d7:f7:46:
e9:f3:49:1c:39:2d:5c:70:cf:95:0c:ba:ef:28:66:d3:b5:ed:
37:68:18:77:31:60:9c:af:18:4a:60:80:c3:70:b5:88:be:cc:
69:a5:f1:8e:55:1b:4c:64:d3:33:90:06:ee:3e:c7:8a:9c:f9:
d9:df:58:b0:82:00:fa:ba:fc:02:e1:da:ad:8f:f7:56:31:f8:
f6:da:f4:0c:a2:84:95:6d:e2:1f:c1:5b:c7:eb:87:be:62:2f:
49:3f:49:9d:2e:f5:f9:e5:b4:e8:9d:6b:e2:42:3a:c5:a8:a9:
42:60:dc:1c:4f:b0:82:e2:b4:f1:f2:57:89:0a:d9:0a:a5:6f:
57:af:07:e9:eb:e9:79:ff:99:cf:e4:a3:69:a8:3c:fe:89:a6:
82:65:80:01:55:0e:5d:9d:99:08:dc:44:13:b9:8c:62:e1:83:
69:de:56:99:4b:d1:a6:db:0f:6e:09:fe:ac:51:1b:2e:4b:cb:
4a:a4:9d:79:c8:0f:23:7f:b8:14:13:d5:1e:d1:58:6e:35:c0:
57:c7:57:cd:c5:c6:03:d0:6e:04:55:d8:79:2a:a8:3c:f5:be:
28:83:85:38:30:b6:d2:cf:f0:c5:54:ff:0c:83:48:b4:18:c8:
8a:71:7b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:25:56 2025 by rpki-client