Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/1h8G-fsoQdlinrOs2RB-J7XFn3c.roa
File: 1h8G-fsoQdlinrOs2RB-J7XFn3c.roa (raw, json)
Hash identifier: kQwmL4saTUXvwbCfaqSP7seAY61mGWLBYvLjAcT9Uf4=
Subject key identifier: D6:1F:06:F9:FB:28:41:D9:62:9E:B3:AC:D9:10:7E:27:B5:C5:9F:77
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DDA90DBC3610D62DFA45E764BB7E4
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/1h8G-fsoQdlinrOs2RB-J7XFn3c.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34462
IP address blocks: 82.119.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:da:90:db:c3:61:0d:62:df:a4:5e:76:4b:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d61f06f9fb2841d9629eb3acd9107e27b5c59f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:12:21:46:c6:94:1f:f0:d1:1f:1a:84:a3:8e:
99:ee:41:20:16:9d:dc:6b:4b:c7:78:67:2b:cb:23:
99:ae:36:d7:fc:3e:69:97:39:d2:c6:61:18:87:ca:
e9:03:f2:50:bc:4e:89:ed:d1:c1:36:b9:88:3b:27:
f0:0e:9f:31:b3:3f:fc:80:57:cd:34:1a:91:9d:18:
b4:5d:6e:a5:a5:6c:8f:42:8b:8b:42:c1:18:14:0c:
16:08:3b:42:a3:fb:1c:e2:28:4b:a0:c6:f8:ba:b1:
d7:3d:76:ed:2b:64:92:c8:46:04:ec:55:5f:9c:84:
7d:8f:31:6c:a0:a4:2d:40:9e:23:62:04:0f:ba:09:
f7:e5:c5:c0:64:fa:bb:b6:c8:18:ef:31:18:dd:2b:
3c:01:cf:96:2f:79:d2:5f:64:b6:31:59:ec:8d:32:
43:fc:2a:08:f7:1a:ef:41:27:ff:a5:c4:dd:a4:30:
38:b3:02:08:c3:0d:8b:45:ba:44:9a:c8:a9:d4:23:
63:fd:e4:e0:2d:ed:1e:9e:c2:08:c3:16:0c:be:2d:
d5:07:92:cd:10:c2:c6:84:77:c3:a4:32:37:ee:6b:
9b:c0:da:ec:bc:df:de:c2:bb:ae:a4:b8:42:9b:db:
c5:ff:2b:e7:e1:c7:b8:7a:b6:87:1e:21:a4:8a:ec:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1F:06:F9:FB:28:41:D9:62:9E:B3:AC:D9:10:7E:27:B5:C5:9F:77
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/1h8G-fsoQdlinrOs2RB-J7XFn3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.228.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:3f:9a:1f:a3:df:40:23:a9:1b:a1:ec:e0:f6:19:ec:23:57:
32:25:22:69:cb:3d:67:c8:1c:0e:49:2e:62:bb:9a:73:00:3d:
21:83:22:b3:42:0e:0a:00:cc:5e:b3:f7:62:73:47:d4:6a:59:
f6:11:02:34:1b:8c:4a:01:89:db:a2:81:bd:a0:b0:d4:44:f9:
fd:22:7e:f2:d1:cf:53:99:01:a5:42:06:f2:ba:80:4f:df:28:
cd:4e:9c:ec:53:60:c6:28:28:9f:b6:7f:6d:63:97:7f:c0:05:
b7:a5:05:59:62:f8:1e:7c:d8:00:dc:bd:91:a7:4d:fa:9a:66:
77:b1:bd:5c:b8:b6:5a:fb:1e:59:fa:35:c7:c3:b7:09:7f:99:
54:b6:8a:52:28:31:c5:be:84:c0:10:b5:f8:9e:19:48:63:57:
af:d2:80:a3:2e:83:25:98:e7:c9:5a:2d:8f:ba:e1:9a:21:dc:
3a:37:6a:00:2e:34:5e:c3:d0:42:0d:9f:ad:76:4c:5a:6a:9e:
b4:55:34:bf:35:68:5e:2e:69:a6:27:3e:1c:57:b6:0b:af:a7:
d8:2d:f0:e6:4b:a9:23:19:52:76:15:76:76:be:2f:d2:22:29:
6e:82:d2:b4:08:96:45:dd:50:4d:3f:54:aa:35:63:1c:04:a4:
00:ea:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:47:07 2025 by rpki-client