Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yRXH9eGqvrl5EXoMk1kpCvF_Elc.roa
File: yRXH9eGqvrl5EXoMk1kpCvF_Elc.roa (raw, json)
Hash identifier: q0zjdUyKPwFUQV85PJ3lBhLy9CjgofPjwiD4CwtqBLU=
Subject key identifier: C9:15:C7:F5:E1:AA:BE:B9:79:11:7A:0C:93:59:29:0A:F1:7F:12:57
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01855D0EFEA2D250BADD61FDF9429DF36E99
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yRXH9eGqvrl5EXoMk1kpCvF_Elc.roa
Signing time: Thu 29 Dec 2022 08:45:41 +0000
ROA not before: Thu 29 Dec 2022 08:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 82.153.240.0/24 maxlen: 24
82.152.176.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
82.153.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:0e:fe:a2:d2:50:ba:dd:61:fd:f9:42:9d:f3:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 29 08:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c915c7f5e1aabeb979117a0c9359290af17f1257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ee:75:fb:91:3b:02:23:30:19:1d:00:a3:4d:
76:a7:e2:a2:2b:88:00:7c:d2:35:5f:b7:a4:da:91:
a8:f6:32:ce:fd:5d:e5:e9:65:12:b7:17:30:81:19:
63:08:eb:15:37:95:db:29:e2:21:a5:94:24:62:5d:
8c:12:95:37:3d:26:23:65:a6:0b:e3:84:2d:8e:67:
83:10:a0:b0:26:ce:26:e7:00:ef:45:62:32:64:20:
6d:b4:0e:0f:b6:7d:87:37:c4:40:2c:77:30:60:94:
03:72:a3:9c:f7:34:26:d3:0f:c0:6e:52:a6:9c:61:
78:87:43:65:76:9b:f1:ce:8a:23:3e:40:05:bc:2b:
55:42:64:1a:df:cf:01:f9:59:3d:a1:b9:de:37:81:
d1:0b:f4:04:8c:cf:c5:be:bf:74:04:93:b1:12:f1:
71:af:e5:39:19:88:92:9b:76:4d:92:36:48:fe:be:
eb:07:be:c3:9b:54:a3:1c:a1:49:a2:9f:44:6f:c0:
62:e1:99:2a:6b:50:82:7e:fa:0c:cc:fb:b3:28:21:
f4:75:05:96:77:65:bd:95:01:93:ad:48:4a:76:d6:
8e:71:9d:44:d9:e7:97:4e:f4:c2:f7:43:c4:c6:2e:
8e:bb:9b:45:ef:7a:c8:74:d2:f6:2c:bc:41:f5:70:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:15:C7:F5:E1:AA:BE:B9:79:11:7A:0C:93:59:29:0A:F1:7F:12:57
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yRXH9eGqvrl5EXoMk1kpCvF_Elc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/24
82.153.68.0/24
82.153.240.0/24
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7b:d1:52:fc:02:0a:c6:88:10:8d:95:89:09:86:28:ff:0f:
70:12:e0:07:fc:ef:5a:53:b4:02:0a:fd:0c:e7:37:34:af:8b:
aa:b5:01:2d:81:d1:97:b9:b1:44:2f:4c:ea:66:cf:4b:52:c4:
fd:80:3a:ae:ac:dc:0f:48:2b:28:3e:e6:da:76:26:d4:3c:1d:
b0:7e:51:f1:67:8d:37:6a:0a:89:88:bc:48:82:ba:39:e9:1c:
a2:f9:41:7f:b3:25:79:e9:b1:92:af:f6:70:56:ee:c9:52:dd:
8c:67:5a:6f:af:69:c6:f7:2f:0f:21:1e:de:16:4c:10:df:df:
7c:f5:4e:52:a1:3b:c6:a0:d2:d5:c3:1e:e8:f4:58:45:a9:41:
54:2a:94:d2:72:31:cf:10:00:3f:ce:d8:63:e5:77:c6:40:98:
1f:d1:c3:32:fc:65:83:eb:0f:7f:45:8d:8e:1a:13:35:8d:39:
91:eb:16:c0:05:0f:07:29:a2:e9:6f:36:6b:b7:ca:83:6f:e9:
49:c4:2a:b2:e8:dc:b1:7f:f8:ff:cd:ac:60:f7:10:e1:4d:d5:
3c:26:67:06:99:08:3d:5d:76:db:1f:2f:8a:c4:29:ec:46:11:
d8:ce:94:02:6c:0a:aa:a1:f9:83:62:c2:54:cf:5d:b8:63:b1:
90:0c:eb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:06:05 2025 by rpki-client