Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Gu_-31oro-6mR9--UHxoI9Ff97Q.roa
File: Gu_-31oro-6mR9--UHxoI9Ff97Q.roa (raw, json)
Hash identifier: oYGFpEQRVVe+B6T+YwzLsHrkz8uup/u3//iRRMb+4VU=
Subject key identifier: 1A:EF:FE:DF:5A:2B:A3:EE:A6:47:DF:BE:50:7C:68:23:D1:5F:F7:B4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018896CC504C2FBE1B390B4F7B29D8962C46
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Gu_-31oro-6mR9--UHxoI9Ff97Q.roa
Signing time: Wed 07 Jun 2023 16:59:12 +0000
ROA not before: Wed 07 Jun 2023 16:59:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 62.76.224.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:cc:50:4c:2f:be:1b:39:0b:4f:7b:29:d8:96:2c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 7 16:59:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aeffedf5a2ba3eea647dfbe507c6823d15ff7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:79:eb:5f:bc:96:63:8a:cf:6d:8b:0b:a9:
6f:41:32:30:79:82:79:aa:e4:c0:71:88:4f:51:11:
a6:5f:8d:85:0f:f7:ff:b8:8b:b6:73:d9:42:a8:78:
60:ac:01:27:08:d6:57:46:38:8c:7a:58:08:9e:e5:
20:34:4e:a3:38:39:4f:8e:ae:ad:95:04:72:d8:a1:
1e:3b:38:b6:8b:cd:87:8b:fe:c3:9e:e2:b7:3c:32:
eb:ee:fa:30:68:f2:6b:d2:63:26:3f:c4:cb:af:e9:
8e:b7:34:4c:7b:dd:3d:be:2f:2c:56:0c:5b:09:be:
4e:ed:9b:73:0a:ce:15:58:47:75:2e:7f:14:95:40:
ad:3a:ea:19:96:8f:9a:f2:b8:95:3b:d4:bc:de:b6:
b7:0a:76:bc:e5:17:8b:eb:80:3b:23:e3:53:2e:76:
42:1e:36:e3:fb:fc:43:f9:a1:3c:1c:ce:3b:96:48:
55:92:a9:85:84:d4:c4:b7:91:c2:d8:1d:68:f0:77:
1b:b0:6d:0a:2d:ce:9e:d1:ac:3b:f1:ae:44:3d:0f:
ad:98:11:ea:c1:1b:32:fc:07:bf:06:3c:a0:07:2d:
83:62:cd:51:54:26:df:88:2f:9a:58:5e:1f:61:ba:
10:6f:0d:b2:ac:2e:a0:a8:42:2b:3f:27:7d:a4:0d:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EF:FE:DF:5A:2B:A3:EE:A6:47:DF:BE:50:7C:68:23:D1:5F:F7:B4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Gu_-31oro-6mR9--UHxoI9Ff97Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
193.124.46.0/24
194.87.170.0/24
194.87.246.0/24
195.133.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d2:16:0a:d3:5d:5f:26:78:a0:b6:31:87:8d:51:69:7b:cb:
3a:cf:5a:c2:04:31:e9:c4:f7:48:50:03:7c:a4:1d:a9:f5:56:
5a:1c:39:ab:8d:7e:3d:37:f0:9f:20:a9:33:53:ef:d4:55:d5:
20:f9:8c:f7:13:41:f7:c4:21:58:a1:ba:ff:15:f2:45:67:c2:
ca:95:3d:5d:38:b6:69:f9:07:eb:fc:86:a1:b6:ae:4a:b7:12:
cf:8e:2b:34:42:b6:7c:73:43:1b:f2:83:b0:88:86:0c:69:1f:
53:e0:e2:88:09:c9:fc:89:e3:de:a7:58:a3:34:f6:1c:0a:f8:
19:08:4d:db:8b:11:3e:25:56:64:04:46:18:b8:36:89:bc:5c:
da:87:00:df:06:a9:74:70:93:ad:c6:2b:16:b2:ec:de:75:00:
be:53:d1:19:a6:14:42:f1:35:87:4b:85:7f:37:26:02:59:54:
ca:46:fa:88:5c:19:8c:0b:8e:78:4d:e0:64:31:a5:1e:42:b6:
82:63:2d:52:13:72:08:42:65:8d:42:13:14:dc:10:17:9b:a4:
51:c5:de:2c:8d:2b:46:b0:73:31:59:f1:8f:91:85:92:e3:2d:
6c:44:71:20:97:8d:c0:aa:1d:21:6c:57:fc:81:00:9b:0d:ad:
d6:7f:46:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:00 2025 by rpki-client