Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qbpuPmziQr0tdgmRI7p-aHR9pUA.roa
File: qbpuPmziQr0tdgmRI7p-aHR9pUA.roa (raw, json)
Hash identifier: tyAO/FUJXlXZEsG78O77e+B9WxlZJiYe5IHtbs2Wu7U=
Subject key identifier: A9:BA:6E:3E:6C:E2:42:BD:2D:76:09:91:23:BA:7E:68:74:7D:A5:40
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018C7C6867C05723D840AFEBDD926090ED62
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qbpuPmziQr0tdgmRI7p-aHR9pUA.roa
Signing time: Mon 18 Dec 2023 10:11:06 +0000
ROA not before: Mon 18 Dec 2023 10:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.153.136.0/22 maxlen: 22
81.168.116.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
81.168.126.0/24 maxlen: 24
89.213.176.0/24 maxlen: 24
89.213.177.0/24 maxlen: 24
89.213.180.0/22 maxlen: 24
89.213.182.0/23 maxlen: 24
185.49.126.0/23 maxlen: 24
89.213.180.0/24 maxlen: 24
82.153.246.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:68:67:c0:57:23:d8:40:af:eb:dd:92:60:90:ed:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 18 10:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9ba6e3e6ce242bd2d76099123ba7e68747da540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:79:28:6f:5b:ec:6d:75:c1:3a:fe:c8:e6:
7c:67:9a:3c:3f:a6:6d:38:31:b2:fb:61:57:b3:ca:
d4:35:21:21:16:7f:0c:83:e9:80:e4:23:3a:09:61:
05:cd:2e:44:ac:50:e3:76:ff:58:03:b1:dd:3a:8d:
c4:06:ac:12:96:b1:97:46:26:63:55:96:f2:b7:f3:
67:92:38:e2:20:a5:78:ed:df:76:b6:9c:3d:f5:7a:
86:b4:9c:b5:13:8c:1d:7c:79:8a:a6:77:99:cb:72:
bc:42:ac:79:16:43:39:cf:b7:f3:cb:19:e8:30:17:
bf:83:9b:8f:17:c7:ee:a0:22:19:3e:9a:8d:c0:28:
c5:18:e0:65:5e:7a:74:0e:3e:cc:2f:7a:1e:b9:b2:
5a:e0:82:f6:0f:78:74:5a:24:18:96:55:53:2b:f8:
b8:22:16:d3:83:34:db:5c:ac:3e:79:98:0e:e9:b7:
b8:00:e1:7a:81:11:a7:43:15:a9:4e:5a:69:12:d7:
94:fc:99:8d:34:c3:08:0b:e6:64:81:c1:ba:94:69:
a5:99:4f:f5:72:83:f5:24:2c:aa:8b:66:df:f4:1f:
a1:ca:67:d4:bc:f7:41:75:98:a2:e1:e8:cd:01:90:
7f:9c:92:bd:5f:45:28:cb:00:db:13:f5:f0:89:25:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:6E:3E:6C:E2:42:BD:2D:76:09:91:23:BA:7E:68:74:7D:A5:40
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qbpuPmziQr0tdgmRI7p-aHR9pUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
81.168.119.0/24
81.168.126.0/24
82.153.136.0/22
82.153.246.0/24
89.213.148.0-89.213.159.255
89.213.172.0-89.213.177.255
89.213.180.0/22
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:04:7f:23:9f:01:1f:bf:49:b5:f0:6d:b3:b6:d0:05:c3:9c:
2d:13:e3:c7:6c:62:f3:9a:3c:e2:09:64:9e:30:3f:89:63:c1:
04:66:cd:56:ad:9d:49:d4:27:35:51:3b:d1:69:c7:45:ad:15:
ab:61:32:61:92:b8:26:39:81:63:42:e2:e3:0d:b6:05:5d:29:
3c:ac:91:31:2f:dc:79:d6:d8:33:c8:80:71:1c:6f:f5:ef:4f:
a2:33:d6:de:62:73:4d:56:82:a1:a4:77:f3:6e:7b:b1:7b:3d:
2c:69:c9:75:a3:01:f5:94:0f:2a:fe:65:60:eb:95:d4:f5:0b:
51:1b:a8:01:d0:ed:41:95:2a:7b:09:2e:b3:eb:89:66:ea:3d:
71:b1:11:7d:e9:b1:e3:d7:44:2e:d8:83:28:05:68:10:1f:8f:
e2:a3:22:18:f7:8b:ac:d7:fb:06:ea:10:3a:1e:ab:f1:92:7f:
bf:6d:df:e7:4e:21:29:00:96:9d:87:35:59:28:af:ef:c2:50:
7a:2b:3a:03:5f:89:ad:1d:a4:88:b2:45:44:7f:b1:86:24:d2:
5f:25:d4:cc:df:74:63:8a:4d:82:58:3f:48:4a:1e:31:4a:13:
12:dd:4e:aa:35:a9:12:db:9a:2d:3d:d3:46:0e:3f:88:bc:6b:
3f:44:16:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:12 2025 by rpki-client