Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/_-aKlUQQ0yofR4OHXApKmrzdxuk.roa
File: _-aKlUQQ0yofR4OHXApKmrzdxuk.roa (raw, json)
Hash identifier: Orp1jaPrYAgHj5ZQ801f7bZ/uZTJetpiVewJ3+sjIU8=
Subject key identifier: FF:E6:8A:95:44:10:D3:2A:1F:47:83:87:5C:0A:4A:9A:BC:DD:C6:E9
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 09E719B2
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/_-aKlUQQ0yofR4OHXApKmrzdxuk.roa
Signing time: Sat 01 Jan 2022 10:05:31 +0000
ROA not before: Sat 01 Jan 2022 10:05:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 786
IP address blocks: 77.87.24.0/21 maxlen: 24
87.32.0.0/12 maxlen: 24
45.144.8.0/22 maxlen: 24
91.193.188.0/22 maxlen: 24
91.123.224.0/20 maxlen: 24
193.1.0.0/16 maxlen: 24
2001:770::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166140338 (0x9e719b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jan 1 10:05:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffe68a954410d32a1f4783875c0a4a9abcddc6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:40:17:0e:10:37:90:ca:e4:eb:e3:c4:b5:
ba:a9:c8:75:b2:a0:68:d1:54:eb:87:a6:14:1a:da:
5c:f9:a5:ec:cf:fe:a4:40:54:ac:c8:90:7f:14:c9:
71:4d:4f:c2:e1:97:3c:76:59:a3:e4:19:cc:de:c9:
d3:d8:29:90:34:7a:79:62:b6:c3:ec:0d:b6:d0:00:
58:72:55:6c:17:1b:2e:2b:ca:b2:a5:f2:71:84:47:
6f:00:0f:5b:8b:0a:3d:e0:5e:5e:c3:41:ac:c5:eb:
ad:1d:53:3b:a8:04:8d:01:76:79:fe:2a:3c:61:ed:
a5:90:2f:8a:b2:3e:2b:72:53:fa:c7:b2:95:f2:41:
6c:5c:e8:f6:67:d6:b9:9d:a3:68:3b:0f:20:8e:dc:
54:47:a7:e6:7b:1b:92:ab:b5:88:16:d2:1e:f9:7a:
33:c0:44:ac:22:38:37:8f:dd:fe:85:a0:d2:43:aa:
40:81:2e:0d:53:49:43:a9:45:0d:63:ec:e9:a8:7e:
62:f0:22:43:b4:39:73:b7:8d:ba:9a:de:1f:69:d4:
c5:cb:7e:ac:94:a9:f9:a8:91:7d:50:33:25:12:0c:
2b:3e:71:fa:0c:80:12:6f:ad:64:ee:f7:01:7d:cb:
44:1a:46:ec:fa:68:d4:72:49:d8:4b:53:43:54:82:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E6:8A:95:44:10:D3:2A:1F:47:83:87:5C:0A:4A:9A:BC:DD:C6:E9
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/_-aKlUQQ0yofR4OHXApKmrzdxuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.8.0/22
77.87.24.0/21
87.32.0.0/12
91.123.224.0/20
91.193.188.0/22
193.1.0.0/16
IPv6:
2001:770::/32
Signature Algorithm: sha256WithRSAEncryption
59:0f:3f:2f:2b:85:67:e5:50:0d:08:1b:7b:9e:9c:f0:2a:2c:
d1:71:c6:b2:79:f7:47:32:45:f3:9a:9c:e2:53:1b:c5:7b:0f:
d3:33:0f:f9:58:c4:dd:34:8f:46:c6:5c:52:7f:e0:93:f4:23:
62:d7:a4:bc:8d:d3:2a:14:c1:f5:51:f5:6e:be:b7:99:c3:0f:
05:81:ea:46:d5:9d:01:1c:0d:5c:54:a0:49:e1:f8:97:1a:cd:
09:e9:64:0a:f9:5b:0b:08:ca:4f:48:7f:c7:fe:9f:0a:71:6a:
81:f7:34:82:4e:21:45:5a:e4:e7:8b:4c:cf:db:3b:0f:5c:97:
55:66:59:a8:fb:6d:da:26:f2:d8:82:d1:2b:bb:ae:c7:04:76:
fe:ec:9a:89:28:95:32:a4:88:4c:0d:c5:02:22:9f:56:7c:ae:
79:f0:29:1f:31:38:ea:9d:a3:04:78:47:14:c2:b9:07:b1:18:
f2:81:ba:67:a8:05:f3:05:e3:85:26:16:f4:0f:1f:ef:14:1a:
cd:08:7b:f7:bc:dc:97:3b:b7:4a:98:2a:ec:8c:1a:61:0f:23:
35:2d:d1:60:3e:4f:0c:0a:a0:8e:88:84:c1:d8:0a:d1:bd:86:
1a:c1:f3:29:a1:f7:26:f6:46:30:4b:e1:20:e7:9d:71:82:e8:
87:6f:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:06 2025 by rpki-client