Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/0e3artqiAs0i_TsFidHAwMky3Bw.roa
File: 0e3artqiAs0i_TsFidHAwMky3Bw.roa (raw, json)
Hash identifier: jM4d5+SXJ77Iyp0E+3GdfxXiiB0RC3/vIXUEDP/cvTs=
Subject key identifier: D1:ED:DA:AE:DA:A2:02:CD:22:FD:3B:05:89:D1:C0:C0:C9:32:DC:1C
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 01856F42BC8FE356EB2C62B95247752A3843
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/0e3artqiAs0i_TsFidHAwMky3Bw.roa
Signing time: Sun 01 Jan 2023 21:35:22 +0000
ROA not before: Sun 01 Jan 2023 21:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209287
IP address blocks: 82.199.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:bc:8f:e3:56:eb:2c:62:b9:52:47:75:2a:38:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Jan 1 21:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1eddaaedaa202cd22fd3b0589d1c0c0c932dc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:01:29:4c:10:3e:9c:76:ed:6d:09:a2:aa:
20:d9:ba:50:e5:51:68:de:e5:36:de:e7:67:b7:65:
52:18:71:df:27:79:c3:75:31:62:b6:60:ed:0e:31:
99:c1:87:95:36:6e:cb:ce:99:e6:f7:c6:b5:a6:92:
c9:fa:59:d1:22:1a:4d:35:78:d2:cc:4a:fa:ed:90:
7b:1f:9d:03:22:0d:13:9c:94:81:e2:e9:0b:e4:ee:
70:4c:b1:74:cc:41:9d:91:5c:52:27:b7:ca:77:8c:
78:c9:d5:89:3e:69:1b:8c:44:b3:f1:65:fb:24:74:
b6:64:e2:10:a0:38:24:0a:ab:99:99:7c:80:e8:6c:
6d:83:7e:6b:75:49:49:7c:ed:71:25:db:eb:40:2b:
f9:b8:1e:0b:a3:fe:2c:08:96:17:f4:3c:34:2d:09:
98:82:0b:26:02:36:1a:01:e2:7e:bf:45:e5:4e:d7:
93:d0:94:fc:c5:83:c4:8e:04:33:26:72:5c:a4:ba:
28:c3:63:84:88:5a:80:bd:00:0f:c8:5f:3d:df:6b:
df:41:bb:e5:df:b9:62:b7:5b:d8:56:fa:7a:98:a2:
ea:2d:a9:9f:f8:82:cb:2f:ac:7e:b4:8d:d6:c9:52:
05:bf:3d:7c:4c:6c:c4:56:15:12:54:68:09:d2:8a:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:DA:AE:DA:A2:02:CD:22:FD:3B:05:89:D1:C0:C0:C9:32:DC:1C
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/0e3artqiAs0i_TsFidHAwMky3Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.199.62.0/24
Signature Algorithm: sha256WithRSAEncryption
26:85:4b:16:4b:3b:b6:77:3c:ff:7c:a4:05:c5:3a:ac:8c:69:
80:02:07:9e:f9:3e:3b:c1:ba:8c:a7:fd:f2:6a:25:9e:93:4e:
66:50:4a:6e:05:cf:40:ab:42:8b:ad:66:48:7e:f6:ca:ac:f9:
66:85:a2:e4:06:6c:73:4f:96:1e:b0:d6:cf:62:35:74:37:13:
a5:4b:0a:25:73:6c:3a:57:dc:6f:2d:c5:98:49:ac:9d:ba:95:
4c:05:2a:8a:f3:c3:f1:23:e6:bc:58:ca:2b:ac:6b:4e:d0:06:
ea:f2:28:5a:a3:ef:7a:bf:c7:6d:93:cd:8e:2a:18:13:26:83:
41:c4:d3:ea:59:08:62:89:8c:54:d8:ce:d8:30:10:b8:95:31:
72:2a:4a:c1:99:7b:cc:2b:c6:4b:e3:92:b9:37:9a:d6:ed:7a:
8f:6b:2c:7d:9c:b4:c0:f4:76:cc:3a:ee:2c:2c:5c:f4:38:ec:
8b:f9:0d:5f:4b:40:d1:c0:5e:15:04:f3:02:31:f6:ee:b2:34:
18:82:0c:6c:2c:47:70:d6:5f:7c:82:d2:fd:e2:e7:88:b8:cf:
91:ed:52:28:13:cf:3e:b9:ff:d2:56:ac:5a:4a:b0:03:eb:0d:
4b:74:60:dc:7a:fe:c0:ff:37:a7:35:8c:15:9d:a5:c2:e7:5a:
dc:d8:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:30:27 2025 by rpki-client