Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1bba3UmOY8KcY5SDcd_fT-fRbJg.roa
File: 1bba3UmOY8KcY5SDcd_fT-fRbJg.roa (raw, json)
Hash identifier: 5eoucuHLylJFeknj8jsmRbR8DIpOcmha+Lv9kOYM2TU=
Subject key identifier: D5:B6:DA:DD:49:8E:63:C2:9C:63:94:83:71:DF:DF:4F:E7:D1:6C:98
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 018C59272375D2DD979932151457AB2C461B
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1bba3UmOY8KcY5SDcd_fT-fRbJg.roa
Signing time: Mon 11 Dec 2023 13:53:06 +0000
ROA not before: Mon 11 Dec 2023 13:53:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28958
IP address blocks: 82.146.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:27:23:75:d2:dd:97:99:32:15:14:57:ab:2c:46:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Dec 11 13:53:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5b6dadd498e63c29c63948371dfdf4fe7d16c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:fd:7b:cc:e5:e3:95:cc:69:f2:b2:37:c0:
ac:52:a2:f6:c3:48:bb:e1:ac:84:13:2d:88:a9:50:
13:70:8a:5d:97:75:5d:71:f4:95:36:05:b4:73:1c:
81:17:78:e8:25:9b:a9:22:2c:e8:55:79:41:cf:53:
7b:91:d5:13:3e:6b:f6:b5:4c:21:a1:86:d8:24:45:
8e:36:18:66:d0:dc:8b:79:61:b8:a4:70:72:04:ec:
76:8f:e0:71:a2:b1:6c:98:9d:df:df:ab:16:9b:f4:
33:ab:a8:eb:73:fa:69:04:2a:24:de:88:73:7f:cb:
43:e3:c5:f3:bc:a3:af:32:f2:8e:b2:3d:3c:1d:6f:
94:fe:23:f3:48:d7:56:74:58:db:75:ea:64:40:f3:
d3:23:aa:f5:3f:87:30:e8:41:4c:dc:77:23:66:fd:
29:ab:d6:5e:9c:18:86:60:60:3d:50:e1:43:8b:28:
c4:03:fd:cc:a5:f8:47:32:dc:61:97:db:e6:ee:a4:
02:0b:bb:73:69:21:22:12:44:5b:de:78:d6:d1:7f:
c5:05:5a:c2:1b:5c:07:69:62:7b:ab:f9:dd:66:0e:
c4:e5:39:93:81:a1:63:db:1d:b1:9d:c5:4a:93:32:
f0:15:d5:a8:95:c2:3d:d2:d2:ed:93:bb:1f:d2:95:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:DA:DD:49:8E:63:C2:9C:63:94:83:71:DF:DF:4F:E7:D1:6C:98
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1bba3UmOY8KcY5SDcd_fT-fRbJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e5:ce:e1:02:fc:13:bc:76:ac:78:32:1e:73:76:92:91:1f:
50:3b:df:9c:c7:c4:03:3a:50:f1:89:4d:50:0e:42:2a:c3:fe:
a0:3c:e0:2f:a3:e2:57:c6:eb:e2:6c:1c:5f:bb:33:95:c5:5f:
2f:35:0c:dc:5b:d8:05:ec:c5:d9:b7:6d:57:3f:f7:35:50:29:
00:19:17:ec:5a:e0:66:16:fd:28:34:8d:e6:9b:7e:f2:3c:1c:
d9:f2:61:84:27:7e:38:57:9c:5c:55:68:27:5d:64:cc:69:d9:
f5:08:45:fe:c8:24:7c:fa:04:8d:e8:85:69:91:72:9a:ab:f2:
05:58:82:ce:49:97:6f:41:14:cc:76:9e:04:89:bb:e1:fa:00:
a7:a0:17:6d:55:91:6f:f1:6c:5a:77:3f:73:a1:99:07:bc:5f:
4b:67:87:c8:dd:98:60:13:77:e1:37:b9:a1:ee:a5:fb:88:49:
dc:49:b4:6a:4e:24:54:d6:d7:b0:46:4e:7f:ca:46:90:35:64:
2a:90:89:a2:98:d6:16:eb:bb:1a:2b:71:e8:a8:3a:a9:75:5c:
d7:08:c4:4e:8d:d4:87:e7:9b:b1:0a:42:40:b7:6d:1d:95:79:
88:d9:65:b0:c5:79:1f:ba:63:a5:69:f4:b5:08:e5:ab:4b:36:
66:3d:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:10:55 2025 by rpki-client