Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/PHpp7irUf8UB3M8rGpK0BnoPWz0.roa
File: PHpp7irUf8UB3M8rGpK0BnoPWz0.roa (raw, json)
Hash identifier: OjjrdhiRa3PjHQ1PXpWFHglKY2Wn1Wf9EAbUwjBr4h8=
Subject key identifier: 3C:7A:69:EE:2A:D4:7F:C5:01:DC:CF:2B:1A:92:B4:06:7A:0F:5B:3D
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 09233575
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/PHpp7irUf8UB3M8rGpK0BnoPWz0.roa
Signing time: Tue 26 Apr 2022 09:25:22 +0000
ROA not before: Tue 26 Apr 2022 09:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35699
IP address blocks: 82.199.40.0/24 maxlen: 24
82.199.43.0/24 maxlen: 24
193.42.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153302389 (0x9233575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Apr 26 09:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c7a69ee2ad47fc501dccf2b1a92b4067a0f5b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:01:ca:dc:0a:cf:bb:8d:d3:15:e4:9a:3a:
6d:9c:47:66:2f:80:11:38:b7:bf:fc:38:3f:46:1a:
0f:69:20:1c:5a:28:73:9d:22:e3:41:cf:e9:cc:42:
45:39:d0:4b:69:ff:f1:74:74:c0:60:d2:35:8b:3f:
1e:5b:84:5f:c7:84:4b:04:68:ee:b8:7b:6f:eb:d1:
43:24:4d:ab:3f:a5:f8:1a:55:4e:bf:22:0e:d0:44:
7b:2d:5a:7a:45:71:88:0a:30:35:06:cb:ce:38:cb:
10:38:bc:0d:59:07:0d:e3:a7:21:74:44:63:e9:12:
e2:9f:af:95:31:73:1a:83:b9:23:4b:00:4f:65:fe:
dd:55:9a:4b:31:be:b0:0c:7c:55:c9:5c:e6:10:96:
e2:d4:63:b0:66:4e:18:3f:fb:1b:36:86:cf:37:4c:
90:29:b6:5b:3a:a6:c7:8d:b1:29:8a:ca:77:ac:2e:
be:36:1d:be:77:d1:e6:27:b9:57:d0:b5:66:65:3d:
60:5c:7f:85:ba:16:83:9e:f0:64:5d:c1:9c:de:42:
b6:4f:f7:ab:26:06:38:38:49:0e:d0:ba:4b:e9:50:
83:ed:a8:77:83:7a:6c:8e:14:20:7f:e3:e4:77:45:
34:5c:b1:66:35:eb:3e:86:f6:5b:38:c8:9a:63:a7:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:69:EE:2A:D4:7F:C5:01:DC:CF:2B:1A:92:B4:06:7A:0F:5B:3D
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/PHpp7irUf8UB3M8rGpK0BnoPWz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.199.40.0/24
82.199.43.0/24
193.42.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:d6:fc:67:75:61:9c:b5:db:5e:d5:b7:3f:17:54:3b:0a:27:
72:60:c1:cb:4f:35:8d:8d:67:b5:dd:28:20:d5:45:14:1e:49:
dd:34:87:77:58:08:44:17:53:27:9d:b5:81:1f:b2:57:94:b8:
b3:86:9a:b9:ac:1f:9e:79:27:70:a9:fc:8e:b8:8d:2d:5f:52:
ad:e0:be:04:ed:cf:ea:57:86:3a:18:fc:2a:e5:1a:da:ba:4b:
fd:65:5a:f0:01:92:8d:68:3a:f4:5e:0c:07:33:93:9c:b2:a4:
53:7f:9c:04:48:38:32:bc:3a:a4:0b:0b:47:58:d1:17:d3:3c:
9f:87:e3:19:4e:fb:dc:f6:6c:5e:8b:63:8b:8c:10:b2:05:36:
85:99:d2:a5:00:1d:7b:fb:01:11:f2:e4:aa:d9:33:e9:5b:a3:
f2:1b:49:8e:65:3e:ea:61:73:2b:0b:66:c5:15:c1:1a:e4:a9:
ad:c2:ed:dc:dd:54:86:63:90:63:0a:e2:c0:6e:65:5f:2c:82:
3b:7b:6b:d2:a3:76:0d:a8:7b:48:1f:fc:cd:03:10:18:55:98:
fb:aa:3c:f2:b1:c4:ba:54:c1:63:97:1d:e5:71:19:6e:eb:f9:
67:3a:af:6b:29:b6:bf:90:c3:e8:fc:9c:98:75:65:08:a9:83:
72:6c:4b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:17:03 2025 by rpki-client