Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fJwPUoZwKFLMRb2CpP3T74RsIPE.roa
File: fJwPUoZwKFLMRb2CpP3T74RsIPE.roa (raw, json)
Hash identifier: 4WeY52BYCzumTwrcU9aayxWpg0EMKM0kVeMgAG495yI=
Subject key identifier: 7C:9C:0F:52:86:70:28:52:CC:45:BD:82:A4:FD:D3:EF:84:6C:20:F1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01891FBCBEDB01332E293A67754201E29B75
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fJwPUoZwKFLMRb2CpP3T74RsIPE.roa
Signing time: Tue 04 Jul 2023 07:10:10 +0000
ROA not before: Tue 04 Jul 2023 07:10:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 81.161.231.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:bc:be:db:01:33:2e:29:3a:67:75:42:01:e2:9b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 4 07:10:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c9c0f5286702852cc45bd82a4fdd3ef846c20f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:09:16:3e:b3:13:be:15:57:58:54:54:5e:1e:
08:bf:e1:37:71:39:ae:c5:d2:dc:30:d7:75:5a:02:
10:f0:91:cb:20:ab:f4:cf:29:19:c0:64:ea:bf:4b:
f3:6e:ae:71:59:b6:24:3d:f3:ce:ea:c5:b6:26:96:
08:ba:a8:c6:a6:63:85:da:20:7f:ae:4d:89:aa:c0:
ae:81:23:b0:38:83:13:c4:8e:f3:2c:e6:e6:dc:fe:
86:9f:f7:5b:48:10:76:dc:12:f0:fe:ed:39:d1:19:
2a:fb:c6:ed:e8:51:11:cd:fb:a4:58:35:28:19:86:
8f:b0:79:2d:55:a6:e3:f5:64:04:56:c3:55:e8:27:
be:7e:77:b6:9f:b9:cb:88:3d:99:ef:ff:8e:15:37:
03:e5:e9:65:c2:33:d7:d9:0d:d3:4c:14:c8:28:e0:
0a:41:eb:d3:42:a7:47:1d:b4:b3:3a:70:4e:c8:d1:
45:2e:f0:34:f0:30:b7:e8:45:fe:48:79:63:d5:24:
70:8a:19:b5:51:d4:45:78:3d:4f:ca:9c:93:e8:d6:
b2:db:25:99:d0:c8:e1:5e:8e:a1:04:b4:68:98:52:
c8:65:3e:09:8b:6a:b0:d5:b6:6b:80:34:5e:15:54:
33:ff:3f:08:7b:4c:42:a1:4b:03:0a:6e:43:de:dc:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9C:0F:52:86:70:28:52:CC:45:BD:82:A4:FD:D3:EF:84:6C:20:F1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fJwPUoZwKFLMRb2CpP3T74RsIPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.231.0/24
93.123.85.0/24
Signature Algorithm: sha256WithRSAEncryption
26:17:49:9e:55:b9:03:c1:61:75:f6:2a:9b:3d:c9:da:1f:30:
4c:9b:0e:7d:2a:cf:02:48:17:35:a5:15:9b:9c:0b:17:ea:dd:
ea:87:14:9a:40:4f:87:03:c3:a7:1a:7e:24:3e:d0:0b:d3:b5:
30:c2:2b:c1:2d:56:2f:6e:ba:b3:3b:ab:dc:85:29:a5:89:cc:
dd:87:8e:09:4e:c5:eb:d7:a7:6f:46:0b:d9:48:37:2d:77:27:
d9:aa:a1:78:e7:ed:1b:9a:6e:97:9a:45:35:ca:fc:7b:d2:c1:
ab:ca:bd:23:ee:7f:e2:f7:af:8c:6b:8a:3a:c2:6d:e1:13:c8:
f7:01:6d:02:06:9d:78:bf:17:c8:b5:bc:3e:68:ef:18:fd:bf:
a0:2b:55:dd:95:36:d1:8b:0e:83:66:26:57:82:a2:d8:76:a6:
ec:9a:de:3b:1e:34:6d:09:80:25:dd:e9:79:d6:6a:36:b3:53:
16:23:6e:ca:55:9a:3b:8e:13:47:17:c3:0c:d4:c8:0c:5c:50:
24:e6:59:e4:6a:3a:64:1a:63:7a:cd:fc:ae:a9:b0:31:d2:7e:
95:f5:9c:cb:d5:2a:2f:ac:0c:00:b1:2e:32:4f:e3:9f:c7:26:
c2:58:93:1d:c8:03:33:7d:e1:bf:84:11:45:b7:95:b6:16:a3:
e9:9f:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:21:01 2025 by rpki-client