Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/DnpnydsU7utBvvcsF11FHc3AOHc.roa
File: DnpnydsU7utBvvcsF11FHc3AOHc.roa (raw, json)
Hash identifier: gbBJs2gw3INYsvGY6rmJ+GZ/WMTU+hamLFQGx1HNrHM=
Subject key identifier: 0E:7A:67:C9:DB:14:EE:EB:41:BE:F7:2C:17:5D:45:1D:CD:C0:38:77
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01876AB4209950B7654FBD85C021CC559F72
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/DnpnydsU7utBvvcsF11FHc3AOHc.roa
Signing time: Mon 10 Apr 2023 10:26:42 +0000
ROA not before: Mon 10 Apr 2023 10:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 93.177.77.0/24 maxlen: 24
93.177.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:b4:20:99:50:b7:65:4f:bd:85:c0:21:cc:55:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Apr 10 10:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e7a67c9db14eeeb41bef72c175d451dcdc03877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:61:61:86:19:a2:71:d4:9f:26:53:24:71:
44:ac:07:56:b8:ef:00:33:9f:9f:f2:ca:02:b7:ca:
8f:ae:9b:3c:3d:f5:b3:7b:f8:d2:5a:8c:d0:33:4c:
e5:d6:b8:5d:38:a4:21:aa:9f:cf:c9:3a:bd:13:99:
38:9d:31:3e:02:80:98:9b:70:b1:2e:5f:e1:c5:22:
aa:97:9b:6a:e2:06:9e:0a:b5:54:f4:25:b1:da:87:
41:cf:e5:c5:62:9a:01:85:5e:31:d0:d4:2d:a4:af:
09:1d:9c:41:e3:bd:bb:6d:bd:26:45:da:fc:da:3a:
b6:ef:65:0b:9b:23:e0:71:ea:b3:0a:fd:83:64:24:
83:67:9f:a9:ca:e3:bb:1e:08:4e:a6:1b:82:69:01:
c3:ea:e3:b5:bb:55:e4:59:b3:0e:9c:95:e6:81:7f:
7f:28:fc:b7:72:c0:e8:6a:f9:fc:b9:f9:4f:26:93:
68:6a:41:7d:90:df:0b:22:2a:12:cb:e0:d3:69:f5:
1f:9d:27:01:f8:ac:53:25:ed:0a:9e:52:b4:bc:46:
11:d6:52:3f:20:c7:bb:5d:9b:d7:4f:8a:09:84:6e:
2f:85:2e:b0:ac:3c:6c:cc:df:7d:6f:dc:df:14:9d:
81:d2:0e:fa:34:27:90:15:46:dd:58:91:9c:8d:03:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7A:67:C9:DB:14:EE:EB:41:BE:F7:2C:17:5D:45:1D:CD:C0:38:77
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/DnpnydsU7utBvvcsF11FHc3AOHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:b3:04:45:ca:35:61:83:44:98:11:ee:f0:1d:f8:3e:75:00:
de:fd:41:a8:50:83:a8:f2:ad:de:1a:ae:88:05:c1:0f:50:6e:
35:1c:c7:cd:5d:c8:0e:3b:99:63:a1:52:8e:cb:6b:72:fb:e9:
58:3b:4a:3d:4e:22:a5:12:b3:0a:d0:b9:69:ee:42:8e:66:31:
1f:53:4c:ee:e2:21:1b:5a:2f:7d:2b:03:86:4a:ed:09:f8:44:
41:65:c6:0b:4e:15:b9:20:e2:7c:04:32:4c:df:41:63:0b:64:
e9:da:c4:d6:f1:2c:57:e4:9d:9e:8e:bd:49:76:6d:90:f3:4e:
ed:0e:6a:23:d4:7f:1d:16:8c:61:58:16:18:e4:5a:94:e7:d9:
be:96:5d:82:4a:ac:26:b0:86:ae:97:f6:96:28:a9:0b:b0:9e:
22:61:3e:82:66:c4:f1:30:52:92:08:dd:af:f4:6b:40:7c:9c:
0b:4d:d5:02:66:77:6f:2b:d1:38:1c:d3:f6:65:b5:f4:3a:71:
54:8b:87:c8:a3:04:4b:38:a3:8e:f1:b3:d8:bc:f0:0e:93:82:
f6:1a:6f:0f:33:19:ad:0d:e6:80:3f:28:3c:44:37:79:d5:9c:
3b:b9:3d:32:62:da:cd:eb:60:eb:b3:75:3c:00:72:32:1d:9f:
d8:ce:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:29 2025 by rpki-client