Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Osc22hXx-Thlxs8f8tESb8TwYY.roa
File: 2Osc22hXx-Thlxs8f8tESb8TwYY.roa (raw, json)
Hash identifier: x/RkdIhn3Vps9xl5um+mppW/mVfqOwMcgxSMahIr4Fo=
Subject key identifier: D8:EB:1C:DB:68:57:C7:E4:E1:97:1B:3C:7F:CB:44:49:BF:13:C1:86
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0189CEDB31F25548A38DD311002B10262999
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Osc22hXx-Thlxs8f8tESb8TwYY.roa
Signing time: Mon 07 Aug 2023 07:16:58 +0000
ROA not before: Mon 07 Aug 2023 07:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 109.176.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:db:31:f2:55:48:a3:8d:d3:11:00:2b:10:26:29:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 7 07:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8eb1cdb6857c7e4e1971b3c7fcb4449bf13c186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:3f:74:a8:b2:60:f6:34:aa:9f:37:a5:4a:
5c:88:a6:7b:8f:86:93:7a:91:a1:b1:9d:d1:9f:27:
89:d3:e5:12:36:5e:61:ea:98:c0:64:55:93:e9:fc:
30:92:50:37:75:a9:b1:e4:2a:5d:33:ef:d4:6c:00:
f0:68:c2:92:db:f2:c1:2b:cc:a1:cd:bd:6a:82:ec:
9a:d4:32:fc:57:af:93:95:7b:b4:f5:86:ff:ea:e7:
19:58:5d:2e:f6:ad:10:9d:e5:36:a6:cc:cc:e2:82:
5d:7a:23:c4:d4:24:38:75:20:f9:e0:71:10:3f:33:
33:0d:4b:7f:b7:bf:00:d6:b9:91:72:6b:b4:03:3e:
d9:9f:e3:4f:30:36:aa:7f:7d:ff:d5:d3:64:cb:51:
f3:44:6a:b0:19:7c:73:da:cb:31:48:8f:90:0b:ea:
e0:35:9d:7b:4d:25:94:8a:e1:1a:09:8d:25:e6:6a:
d2:c4:82:7e:1d:e5:4b:97:97:13:df:a4:9f:3e:cd:
89:c6:77:d7:ec:5c:4d:44:eb:bb:2a:43:5e:88:de:
8d:f6:6e:3c:64:00:f8:37:c1:20:f3:3b:2c:e8:21:
22:61:a7:40:80:3d:89:d4:92:30:ac:32:63:45:41:
a9:8d:45:51:24:33:1a:73:2b:d9:28:21:3a:62:d6:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EB:1C:DB:68:57:C7:E4:E1:97:1B:3C:7F:CB:44:49:BF:13:C1:86
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2Osc22hXx-Thlxs8f8tESb8TwYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:71:8c:6b:f2:60:19:ac:b0:c3:64:c0:f9:35:dc:8f:46:5e:
ab:bd:8d:12:17:52:7e:34:1a:fe:e0:45:ff:d6:b5:4b:b1:41:
ea:30:8a:63:40:c0:3e:a5:e1:1f:fd:14:31:b1:26:ee:e9:70:
ac:43:31:5d:61:16:fe:c1:6c:ea:d3:86:38:ea:b9:25:33:86:
e6:44:ca:11:1e:57:0f:45:e9:56:5d:71:b3:9f:06:0b:2c:2e:
5b:0d:f9:ef:9b:0d:6a:42:bb:db:05:3e:e3:1e:39:aa:2c:07:
df:7f:f5:ce:76:78:6a:3a:ed:b4:72:31:a0:01:3a:86:7d:2d:
ee:72:74:f4:f7:a4:cd:9f:25:ba:d3:e5:98:89:77:97:5d:cd:
8e:5c:8c:90:30:1e:8b:e1:b2:e6:d1:73:22:13:c5:4a:ef:c6:
a2:b1:5e:71:8b:dd:48:59:5d:43:fe:b7:dc:79:04:46:df:8b:
f0:f2:c6:47:4f:c3:ce:91:5f:62:a4:5c:8e:bb:5e:8e:9f:30:
83:86:13:de:c0:98:30:b9:cb:5d:18:2c:d1:ec:7f:b6:66:64:
d3:65:c8:8a:2b:0d:58:04:8f:7e:ea:c3:61:9a:24:31:3d:9b:
13:65:22:1e:6b:3d:2e:f4:75:52:9a:ec:8b:19:fd:19:6c:eb:
7a:da:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:02 2025 by rpki-client