Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/gioXrWprxR_YCyAU178V-eRqRLs.roa
File: gioXrWprxR_YCyAU178V-eRqRLs.roa (raw, json)
Hash identifier: t6Wv1LX3BlPwR6Zas5QTjk1Ypkna1NGYbk/KXyGFl3E=
Subject key identifier: 82:2A:17:AD:6A:6B:C5:1F:D8:0B:20:14:D7:BF:15:F9:E4:6A:44:BB
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 0185821833C07123991B5AEA03A188F41E17
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/gioXrWprxR_YCyAU178V-eRqRLs.roa
Signing time: Thu 05 Jan 2023 13:21:42 +0000
ROA not before: Thu 05 Jan 2023 13:21:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57782
IP address blocks: 185.202.104.0/24 maxlen: 24
79.110.168.0/23 maxlen: 24
139.28.206.0/24 maxlen: 24
2a0d:9cc0::/29 maxlen: 48
2a0d:1a45::/32 maxlen: 48
2a06:1e83:caff::/48 maxlen: 48
2a0d:1a40::/29 maxlen: 48
2a06:1e85::/32 maxlen: 48
2a06:1e83:cafe::/48 maxlen: 48
2a0d:1a40:5500::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:18:33:c0:71:23:99:1b:5a:ea:03:a1:88:f4:1e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 5 13:21:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=822a17ad6a6bc51fd80b2014d7bf15f9e46a44bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:a9:1c:0e:ce:13:fe:d2:c0:7f:a0:4c:88:
f4:53:66:19:49:81:02:33:29:63:3d:0c:c8:e6:78:
b7:5f:f9:1f:95:ac:c9:f0:f5:c2:3c:ea:bf:c2:d7:
72:46:e8:7d:62:f5:69:ae:52:90:77:69:e4:e0:6d:
74:ba:7b:15:7f:0d:a3:85:57:90:96:60:e1:4a:6c:
63:d2:65:03:00:81:5c:9c:7f:3e:32:9c:c6:e6:18:
06:d5:67:ad:95:bc:2f:03:32:6b:b2:af:18:6b:b7:
ed:7e:5e:9a:b9:8c:d1:7d:8a:47:fd:86:fa:55:3e:
13:0a:45:83:9b:e4:82:40:f8:ed:58:8b:e9:ae:03:
dd:cb:29:d5:fe:b6:38:e6:ec:0b:db:58:c9:08:a2:
57:37:58:a4:02:bc:b9:52:7b:e4:c8:56:e2:ef:2d:
78:48:d3:b7:9c:c5:09:4f:43:61:95:7c:ad:e2:b5:
7a:a9:3b:af:9a:5f:76:8c:d8:84:1c:e9:5b:d8:5d:
b7:27:c5:5e:4d:b0:43:0f:c6:1d:11:78:ae:bd:ef:
d1:fe:e3:b0:2b:21:9f:5f:cb:71:5f:ea:e5:6f:16:
3a:e5:f4:b2:57:9e:52:82:f9:0e:50:97:9e:3e:6a:
bd:88:f2:da:e3:4e:a8:bb:e9:53:93:76:68:35:fe:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:17:AD:6A:6B:C5:1F:D8:0B:20:14:D7:BF:15:F9:E4:6A:44:BB
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/gioXrWprxR_YCyAU178V-eRqRLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.168.0/23
139.28.206.0/24
185.202.104.0/24
IPv6:
2a06:1e83:cafe::/47
2a06:1e85::/32
2a0d:1a40::/29
2a0d:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
57:78:19:91:45:c8:51:90:7b:63:db:02:ff:eb:1b:78:8e:68:
cd:d5:d4:c6:75:e7:82:72:df:a8:4d:c5:05:d2:74:8f:1c:26:
ff:20:ea:4d:64:f2:de:ff:7d:11:fd:57:43:25:5c:10:52:52:
c1:9b:17:9c:ec:a9:6f:59:25:2f:f0:af:fe:7b:c1:d0:11:21:
27:de:3c:30:78:20:c7:56:aa:48:12:fe:3a:ca:24:d7:2b:fb:
ce:bb:6a:71:f3:3c:fd:52:bf:87:2e:b0:f4:2d:4d:bd:9d:7b:
22:3d:4f:68:58:18:12:d3:17:26:0f:4f:c7:55:de:a8:7a:4e:
ad:6e:84:09:b4:b7:ab:a9:0d:b7:15:61:39:b2:36:c3:f8:2f:
04:a9:a7:12:8e:e3:d8:48:ce:d0:50:d2:0e:e2:8c:0f:6e:39:
f0:54:06:1c:7a:0e:15:fe:18:01:8e:30:63:dc:48:03:10:ea:
81:ce:b4:b1:7c:c6:2d:f1:48:78:82:6d:39:16:6b:00:f2:47:
da:68:2f:4e:f4:f2:68:e9:b3:ea:c0:3c:d8:56:34:b8:67:17:
5b:2c:1e:20:fe:46:43:5e:91:97:8f:12:6e:22:fa:fd:98:8d:
a9:86:cd:2a:f4:fd:26:18:61:e2:f3:62:8d:ce:38:84:e1:a8:
9d:38:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:41:07 2025 by rpki-client