Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mGJlgY5ACz8yNS3OlrBws2aHbc8.roa
File: mGJlgY5ACz8yNS3OlrBws2aHbc8.roa (raw, json)
Hash identifier: gbwlLIvQJVWtF5PX82DGz1wky8d5oN0HP792e4Dvfj0=
Subject key identifier: 98:62:65:81:8E:40:0B:3F:32:35:2D:CE:96:B0:70:B3:66:87:6D:CF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0187FF9F19E26867437E72D2F808FB297F4B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mGJlgY5ACz8yNS3OlrBws2aHbc8.roa
Signing time: Tue 09 May 2023 08:27:09 +0000
ROA not before: Tue 09 May 2023 08:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 82.152.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:9f:19:e2:68:67:43:7e:72:d2:f8:08:fb:29:7f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 9 08:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=986265818e400b3f32352dce96b070b366876dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:96:ab:76:6f:f8:c8:f1:eb:8c:a9:b0:ba:
68:17:aa:64:8c:7e:d0:0e:ed:2a:1e:76:dc:89:dd:
33:c3:27:f1:59:c8:b4:5f:3a:92:f8:29:c6:74:e2:
b5:fd:b2:92:3a:69:2c:6e:e5:13:0b:41:32:0f:59:
6b:6d:40:90:e9:50:c6:0c:64:27:52:da:cf:bb:7b:
b1:99:e5:27:32:97:d9:14:4d:bb:5a:32:7f:f9:46:
fe:dc:32:75:c8:1f:f3:af:30:b7:68:a4:62:01:be:
be:7d:41:53:64:56:20:62:06:04:6b:dd:bc:13:c4:
bb:07:de:97:5f:6f:63:83:df:46:7d:50:e2:8e:68:
a9:3c:21:66:06:36:85:eb:86:5b:57:41:ce:f3:c4:
cf:05:b8:5f:b6:83:d4:d6:f8:56:89:f3:17:80:6d:
0d:98:d8:33:80:e4:24:65:cc:db:ec:d8:b8:4d:11:
0a:36:16:8c:a2:20:6b:7b:8c:28:48:e2:65:ac:93:
25:6a:c7:b3:99:bc:c3:8a:e1:94:82:34:1f:bb:30:
9b:40:9f:39:f1:4a:d3:e0:84:da:ac:80:be:82:04:
cb:e0:69:09:15:81:18:ad:0e:a8:ce:ea:fa:89:65:
1c:ed:15:bc:65:5d:b3:f0:27:3a:1d:f6:73:19:54:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:62:65:81:8E:40:0B:3F:32:35:2D:CE:96:B0:70:B3:66:87:6D:CF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/mGJlgY5ACz8yNS3OlrBws2aHbc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:13:4c:8f:99:53:ac:00:27:84:45:05:3c:d7:cb:7c:b0:c0:
18:71:92:a5:df:59:04:40:b4:96:b8:cb:21:4a:8e:87:ac:b1:
44:6b:34:72:32:3a:cc:5e:cb:6f:97:9b:76:f9:f2:d8:47:ff:
82:2e:39:e6:73:56:4f:04:05:58:61:b1:22:84:72:91:97:6f:
9f:fc:1c:a5:c0:28:d3:3c:59:99:af:9d:16:a1:e2:ff:9c:d4:
61:44:e2:bd:e5:05:33:a5:f3:dc:3a:96:d9:69:ea:22:1d:57:
f1:55:f8:a2:e2:08:3e:a6:08:0a:3d:8b:69:6b:c1:03:9d:6a:
d9:c4:aa:79:80:ac:cd:4a:e9:15:62:90:6c:69:bc:d5:cd:69:
44:a8:88:0f:92:0b:7b:42:2f:f2:0a:d1:0d:48:b8:ba:2c:8f:
b3:18:ea:01:0c:4c:72:6f:d1:af:4f:91:5d:b0:71:78:bc:ec:
24:4d:ea:6b:76:37:b7:74:e5:2c:84:dc:43:e3:39:c9:4c:20:
4f:c4:65:d6:eb:fd:ad:7f:d8:cf:0a:4a:28:2c:fd:19:2a:a2:
a7:7a:94:f3:eb:52:78:f6:64:52:b5:61:17:55:31:d3:bc:29:
d5:e6:37:87:9e:0a:b3:c9:45:ad:cc:f2:03:f3:9f:32:a5:14:
28:83:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:16:17 2025 by rpki-client