Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xOG2gg9aPzMa4i8QSIcH8doixqY.roa
File: xOG2gg9aPzMa4i8QSIcH8doixqY.roa (raw, json)
Hash identifier: 9Q2QEIeqwfjt9aG3tb4QDLJuDLqNekIcE6hkepz/yXM=
Subject key identifier: C4:E1:B6:82:0F:5A:3F:33:1A:E2:2F:10:48:87:07:F1:DA:22:C6:A6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B03EAD6CD342A56C56E6DECE706965CA3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xOG2gg9aPzMa4i8QSIcH8doixqY.roa
Signing time: Fri 06 Oct 2023 07:36:43 +0000
ROA not before: Fri 06 Oct 2023 07:36:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 89.213.176.0/22 maxlen: 24
89.213.180.0/22 maxlen: 24
185.49.126.0/23 maxlen: 24
82.153.136.0/22 maxlen: 22
82.153.66.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
109.176.240.0/24 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.148.0/22 maxlen: 24
213.152.42.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:ea:d6:cd:34:2a:56:c5:6e:6d:ec:e7:06:96:5c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 6 07:36:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4e1b6820f5a3f331ae22f10488707f1da22c6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:94:59:4e:60:60:92:a0:f8:6f:bd:aa:ea:
51:0c:13:31:31:0e:5d:0e:4a:a3:d7:8e:b7:25:62:
d5:3e:90:08:37:11:a6:ba:b1:29:0e:bd:c9:26:2b:
5e:86:9c:59:ae:d9:c1:d2:6c:cc:b5:dc:88:41:3f:
9d:75:b1:66:5e:27:5c:86:c4:8f:70:6f:f0:57:6d:
99:51:1e:00:47:69:d7:a9:16:e2:7c:4a:0b:96:22:
a8:83:63:ee:76:34:62:c7:5a:6e:d5:04:bc:f0:28:
a2:36:10:55:90:e1:b9:96:27:b7:ef:ad:03:37:ec:
4c:e8:2f:50:2e:bf:71:e4:cb:58:59:95:56:33:7b:
fe:9a:18:77:26:20:1e:74:16:62:cd:2e:53:9c:62:
d0:a9:75:e7:36:a6:bb:92:1e:d1:ce:2b:f4:1e:6c:
e2:d3:ff:34:85:47:92:56:34:a9:3a:84:89:1e:95:
52:f1:72:df:35:fe:e9:02:21:66:da:e1:34:c3:af:
72:0e:5a:00:33:7d:23:ae:de:a5:23:6d:75:c9:56:
5a:78:bc:5b:6a:ea:77:71:88:e9:f8:6b:77:5e:7e:
52:7f:ef:38:d0:4a:6a:0c:d3:9a:d1:9d:91:cd:b0:
45:ec:d3:91:a0:a7:d4:c4:72:4e:8e:99:6d:71:eb:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E1:B6:82:0F:5A:3F:33:1A:E2:2F:10:48:87:07:F1:DA:22:C6:A6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xOG2gg9aPzMa4i8QSIcH8doixqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
81.168.123.0/24
82.153.66.0/24
82.153.136.0/22
89.213.148.0-89.213.155.255
89.213.167.0/24
89.213.176.0/21
109.176.240.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
27:56:41:14:6a:4f:0c:03:17:56:d6:fa:9f:9e:bb:c6:0f:ac:
71:c4:dd:88:55:c6:4a:94:77:65:31:9b:0e:5c:0d:e0:21:da:
51:e1:79:f8:78:48:3f:ae:19:bd:93:80:39:78:b2:d4:95:c7:
76:f4:6c:46:08:ba:4f:9b:4f:bf:1f:9d:39:51:d7:80:c3:a2:
e4:c4:97:cd:b7:b9:e5:ab:d4:a7:ac:fa:7e:ff:fc:cc:3f:93:
f8:8b:e5:98:b6:75:97:ac:d7:40:97:97:9e:74:22:22:4f:c1:
2e:db:83:2d:c7:bf:22:aa:17:c1:1e:21:07:98:88:c4:7e:41:
c8:19:35:3c:d9:09:aa:d5:ba:09:98:95:47:8e:60:82:35:2a:
b9:fa:fe:20:db:92:95:c0:36:fa:47:05:50:d0:11:79:b3:37:
8f:9b:ea:82:65:e5:3d:17:07:78:70:84:48:f7:0b:52:ce:6e:
0a:ba:c5:76:41:a8:38:38:a1:44:e9:95:24:77:a8:6f:e5:9b:
7c:1e:62:15:c1:83:10:c6:6e:74:dc:ce:19:4f:5f:14:27:87:
e4:e1:cf:0b:c9:65:a7:c0:d7:2b:76:90:52:fa:fe:0b:88:b5:
52:37:68:a1:7f:1a:e7:8b:4e:04:1f:e3:16:00:be:25:45:f8:
05:ed:3f:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:28:28 2025 by rpki-client