Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sblt6HBiG77alAz9hrpZrsU9WEQ.roa
File: sblt6HBiG77alAz9hrpZrsU9WEQ.roa (raw, json)
Hash identifier: PGVggKsPcvtvzvmdq6D9+ZQAp6CMIB2DwVaBX8MDWzs=
Subject key identifier: B1:B9:6D:E8:70:62:1B:BE:DA:94:0C:FD:86:BA:59:AE:C5:3D:58:44
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CB6A94F8C122CFD0E42CC2E09575ADE81
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sblt6HBiG77alAz9hrpZrsU9WEQ.roa
Signing time: Fri 29 Dec 2023 17:39:58 +0000
ROA not before: Fri 29 Dec 2023 17:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 89.213.181.0/24 maxlen: 24
82.152.174.0/23 maxlen: 23
89.213.143.0/24 maxlen: 24
89.213.147.0/24 maxlen: 24
109.176.246.0/24 maxlen: 24
82.153.208.0/22 maxlen: 22
89.213.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b6:a9:4f:8c:12:2c:fd:0e:42:cc:2e:09:57:5a:de:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 29 17:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1b96de870621bbeda940cfd86ba59aec53d5844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:5b:f6:a5:17:47:91:bc:10:b7:37:f9:5f:
00:02:2b:e4:26:24:e3:7e:11:f9:b7:de:eb:c0:2a:
c6:15:0c:bd:32:7f:6e:dc:e6:40:4f:6f:27:79:92:
a5:5b:d7:f5:91:d8:26:3e:23:0e:8e:1c:df:0e:cc:
45:85:df:4c:69:10:45:5f:39:e1:83:6a:a4:0b:cf:
5e:52:d0:94:6d:ee:fd:2d:03:61:5a:e7:8f:a0:ae:
77:21:8b:d7:24:a4:50:fd:fe:19:08:35:ed:3c:cb:
79:e1:de:fb:9f:f9:5e:53:e2:83:5c:be:cc:29:0f:
c7:b4:e5:ef:4d:42:b1:2b:5e:b1:73:fc:be:81:05:
68:38:e5:84:e8:f1:d0:3d:e2:9e:8f:f1:1d:15:10:
ac:4a:bc:62:49:44:58:de:34:55:e9:4b:03:4d:fb:
45:c4:39:1d:92:88:e2:af:2e:cc:50:fb:bf:8c:9a:
bf:95:e7:25:b6:0e:9b:f9:e6:3f:8b:4e:5e:76:5e:
09:32:9a:25:d1:97:af:19:d5:43:fe:09:31:bf:ae:
b5:32:08:1d:26:f1:0b:89:83:c0:97:03:8a:bd:3f:
21:c1:31:9a:b7:8e:a7:d3:1a:b9:00:0c:b2:f2:6e:
8c:d8:1a:0f:15:2c:36:ba:4d:a8:d7:4d:ba:8c:6b:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:6D:E8:70:62:1B:BE:DA:94:0C:FD:86:BA:59:AE:C5:3D:58:44
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sblt6HBiG77alAz9hrpZrsU9WEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.174.0/23
82.153.208.0/22
89.213.143.0/24
89.213.147.0/24
89.213.158.0/24
89.213.181.0/24
109.176.246.0/24
Signature Algorithm: sha256WithRSAEncryption
18:80:87:5f:f6:9f:67:6c:a0:bf:98:05:84:d9:0e:c7:2b:90:
b0:31:a6:9a:4a:ed:2a:12:cf:aa:9d:a3:bc:09:55:3b:13:bd:
4d:d1:f7:d9:16:ce:0a:bf:4d:55:72:5f:2b:90:ed:81:3e:8b:
88:7c:43:50:27:e1:cf:c7:95:5f:9c:57:29:8f:ba:22:17:e2:
c0:f8:84:46:d0:08:8b:92:cb:2a:a9:94:c7:69:6f:56:33:c5:
f9:65:b3:7d:9f:24:05:2d:d8:98:60:d5:d4:a3:b7:45:2a:ae:
3b:59:c7:9a:55:b0:eb:5f:9a:a2:08:d1:32:bf:e3:8c:d0:d3:
b3:87:fc:8e:b2:82:e8:09:de:c9:e5:2b:04:fb:16:11:65:c8:
8d:ee:2c:50:79:40:d6:4b:2a:c3:c9:5c:d9:49:b2:34:e4:4b:
5f:00:07:38:bd:14:db:49:5d:d8:0d:7c:c5:13:c4:78:09:3e:
84:c5:dc:84:91:ef:43:6b:83:8a:f1:30:46:d8:b1:cf:fd:04:
74:b0:5a:f5:cc:84:24:b7:40:5c:a1:bb:f4:ab:83:31:65:61:
0a:ec:18:f7:d6:fa:e1:8c:11:e6:e7:37:6c:34:f2:6c:fc:9c:
5c:63:6a:55:8f:6b:df:77:64:f9:12:bb:67:6b:c9:58:d1:92:
cd:20:15:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:03:06 2025 by rpki-client