Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/3F004PIXNIBFdBZDpD4SZXDbJmM.roa
File: 3F004PIXNIBFdBZDpD4SZXDbJmM.roa (raw, json)
Hash identifier: +H9DFWwnhkRrUJUS+GHz6T5cNCjqo/V0L7HhrecvBO8=
Subject key identifier: DC:5D:34:E0:F2:17:34:80:45:74:16:43:A4:3E:12:65:70:DB:26:63
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 018573717ED1797FFA4CF0FA531CD889188E
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/3F004PIXNIBFdBZDpD4SZXDbJmM.roa
Signing time: Mon 02 Jan 2023 17:04:55 +0000
ROA not before: Mon 02 Jan 2023 17:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44515
IP address blocks: 82.221.0.0/21 maxlen: 21
82.221.0.0/17 maxlen: 17
82.221.165.0/24 maxlen: 24
82.221.166.0/24 maxlen: 24
212.30.242.0/24 maxlen: 24
82.221.68.0/22 maxlen: 22
82.221.84.0/24 maxlen: 24
82.221.80.0/24 maxlen: 24
82.221.81.0/24 maxlen: 24
82.221.80.0/21 maxlen: 21
82.221.92.0/22 maxlen: 22
82.221.22.0/24 maxlen: 24
82.221.28.0/24 maxlen: 24
212.30.224.0/19 maxlen: 19
82.221.46.0/23 maxlen: 23
212.30.229.0/24 maxlen: 24
82.221.64.0/22 maxlen: 22
2a02:f48:2105::/48 maxlen: 48
2a02:f48::/40 maxlen: 40
2a02:f48:2100::/40 maxlen: 40
2a02:f48:2104::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:7e:d1:79:7f:fa:4c:f0:fa:53:1c:d8:89:18:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Jan 2 17:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc5d34e0f217348045741643a43e126570db2663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:d4:85:56:24:a6:94:b4:d9:ef:b9:7e:f6:
8e:e3:8a:90:6c:e3:4d:a7:f8:a0:2f:98:6f:8e:d3:
41:98:f3:8e:96:3a:52:1c:32:fd:25:3b:bc:bf:26:
19:97:56:5d:82:5b:d7:ff:11:3b:20:5c:30:0e:51:
ec:ad:4b:55:1f:7c:f5:98:62:04:48:e5:20:79:d7:
c1:4f:21:e7:6f:a8:9d:7e:ac:17:e8:ac:07:61:ea:
18:66:a8:f2:c8:21:a6:31:87:42:d4:0b:f1:7c:b2:
de:a4:75:3f:03:13:e5:61:81:bc:eb:e5:1a:8d:f2:
80:a2:5f:2a:79:5f:af:20:a7:84:ee:9b:11:42:52:
06:ee:0d:24:7b:47:3e:13:25:d5:a3:1f:32:48:09:
e3:62:52:73:eb:9e:ac:29:22:83:6a:02:80:1d:e8:
c2:f4:f6:3f:ae:0f:2b:3a:b1:bd:c7:3f:62:34:7d:
3d:82:d4:e4:eb:62:52:ff:7b:63:4d:ae:9e:f4:59:
40:19:4e:6d:10:b7:b6:9d:ea:5f:e0:5f:7e:22:85:
1c:f6:5a:02:c1:70:95:8a:18:82:ce:23:76:e7:13:
22:92:0d:f3:be:7b:1b:28:cd:07:8e:11:2b:ab:f1:
76:25:79:eb:ee:c5:72:cc:a7:d4:f8:e5:0d:d1:14:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:34:E0:F2:17:34:80:45:74:16:43:A4:3E:12:65:70:DB:26:63
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/3F004PIXNIBFdBZDpD4SZXDbJmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.221.0.0/17
82.221.165.0-82.221.166.255
212.30.224.0/19
IPv6:
2a02:f48::/40
2a02:f48:2100::/40
Signature Algorithm: sha256WithRSAEncryption
3d:d2:60:ec:cc:fc:a9:5e:9d:bd:92:5e:a9:07:53:8d:ab:9a:
13:8a:f4:e1:bb:58:92:c2:c3:b4:65:0a:6f:7f:4a:00:67:f1:
5e:48:6b:1b:90:7a:b8:64:f8:99:ba:6a:8e:14:69:b8:19:eb:
e2:c4:0b:32:d6:f3:3b:f4:6d:46:f4:ad:b9:9f:7c:1f:89:c4:
12:e7:cb:7d:ac:a6:fc:6b:98:af:67:d5:a9:45:89:1a:27:5d:
55:bd:f2:ea:92:92:97:69:f6:b4:33:22:e3:9c:31:d7:53:67:
7b:e5:e1:c4:ac:93:9d:c6:a4:09:62:9e:2a:97:74:02:58:e4:
8c:97:ae:4f:b1:97:a3:55:e5:e9:c4:2c:e3:0a:74:d5:51:51:
b5:3b:6e:d0:ea:4b:f0:b0:5a:e4:35:10:22:9a:48:dc:58:43:
db:3a:64:0d:96:1d:55:d7:9e:73:45:fa:53:98:3c:da:b7:2f:
d1:a1:7a:1a:37:cd:b5:7c:6d:39:23:69:f4:0f:e5:e2:a6:7b:
50:92:53:36:69:bc:c5:73:cc:ea:85:03:94:2a:87:e5:f0:63:
1a:96:dc:6e:4b:2c:39:fb:9b:9f:64:d6:87:08:b8:25:7d:f5:
43:e1:e1:f7:7c:bb:b7:16:57:d6:44:79:a3:c2:b8:3f:1b:46:
5a:0e:3d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:59:07 2025 by rpki-client