Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EaKsppNgt0Mlbr7B4sxdIZd7pjU.roa
File: EaKsppNgt0Mlbr7B4sxdIZd7pjU.roa (raw, json)
Hash identifier: iJ4yxI66XLUIip22u+V7pxZC1xKT1juotPr4P7RhqH0=
Subject key identifier: 11:A2:AC:A6:93:60:B7:43:25:6E:BE:C1:E2:CC:5D:21:97:7B:A6:35
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01890CCD228557492A441DE3791FAA3CBFDD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EaKsppNgt0Mlbr7B4sxdIZd7pjU.roa
Signing time: Fri 30 Jun 2023 14:55:17 +0000
ROA not before: Fri 30 Jun 2023 14:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 82.153.242.0/24 maxlen: 24
109.176.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:cd:22:85:57:49:2a:44:1d:e3:79:1f:aa:3c:bf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 30 14:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a2aca69360b743256ebec1e2cc5d21977ba635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:03:71:ed:2b:89:c8:27:bb:90:8d:fa:a0:
6c:55:4b:40:82:9a:31:13:31:d0:db:6d:e7:5b:80:
89:a5:01:65:d3:36:14:76:e0:d5:f4:bc:c2:0d:7c:
b8:ae:03:8c:08:73:50:76:cb:08:f5:04:63:8a:07:
59:ff:fc:32:ad:5a:69:7e:65:57:81:bc:16:f4:e4:
de:f1:e2:bb:b9:d5:29:ad:0f:c6:da:7a:1c:e2:a4:
19:93:05:89:6c:26:57:ff:10:0b:c1:27:93:89:21:
76:5f:ab:16:6d:9e:a9:63:a8:24:16:ca:56:a6:81:
be:07:23:fd:d5:c6:02:74:94:da:21:d1:e6:f2:80:
d8:ff:ee:b9:19:ed:58:63:56:01:ae:bb:25:85:d7:
95:05:0b:c7:2d:3b:f0:36:df:38:e2:e7:2e:23:71:
a4:ae:4a:71:16:3f:3c:db:1a:56:96:2a:d1:eb:e0:
34:78:4e:c2:7f:7a:95:b0:8e:77:3e:62:79:54:d3:
ce:06:a8:c9:ea:29:9e:e3:ac:f2:08:b5:22:e3:6a:
78:97:39:32:b0:50:d0:ff:dc:0c:5f:04:1e:42:26:
db:80:d1:f0:b4:5d:4f:a3:fc:dc:83:e1:5c:a8:aa:
ec:d1:5f:69:77:5f:74:54:65:c2:8b:c3:93:a4:84:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A2:AC:A6:93:60:B7:43:25:6E:BE:C1:E2:CC:5D:21:97:7B:A6:35
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EaKsppNgt0Mlbr7B4sxdIZd7pjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.242.0/24
109.176.210.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6f:63:a3:01:eb:3e:0f:21:99:04:db:8e:94:1c:10:e0:33:
79:03:09:7b:9d:42:d4:ef:79:7c:75:82:69:b8:9b:09:d0:7c:
b1:59:7e:2b:03:94:e5:b7:33:fc:cd:fd:dd:31:69:f9:88:a3:
87:23:84:6f:e9:28:03:a6:47:6c:1a:31:1b:ec:0c:b8:1f:ae:
bf:af:31:0e:61:7c:82:2a:ba:04:18:90:9f:fb:6c:b8:8c:ba:
4f:55:f2:60:62:8b:c5:f7:87:79:ba:4c:b4:02:07:a8:14:1d:
77:22:f6:05:7d:6a:04:94:f3:db:8a:29:34:35:b6:73:33:0d:
33:92:cb:64:0b:fb:06:7e:ea:ed:08:3d:61:94:e1:c7:d6:44:
46:fa:16:df:3e:e0:04:40:69:ec:e5:c5:af:96:e5:ee:dd:e7:
83:54:70:32:f7:d7:c4:34:91:f6:3c:12:f2:5c:9b:30:2a:9d:
b0:4e:fa:6e:0c:97:66:ec:b4:26:08:eb:a5:81:98:85:07:f0:
39:a9:e6:42:d3:16:4c:ec:cb:34:73:be:1f:67:3b:75:69:7d:
a8:34:5e:7a:f8:78:ea:b1:c7:09:8b:c3:d6:a9:0a:e2:74:bd:
52:b9:bc:3b:f6:9c:dd:72:0f:b7:6b:4b:ca:7b:9d:9b:ca:86:
db:93:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:26:52 2025 by rpki-client