Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/c7pIOsNzocsd-NuURPkM9jpTZh4.roa
File: c7pIOsNzocsd-NuURPkM9jpTZh4.roa (raw, json)
Hash identifier: 9NsZE2/leyjtmz3E3nUCt9AaXQ/ZIkJv+omamljOoEQ=
Subject key identifier: 73:BA:48:3A:C3:73:A1:CB:1D:F8:DB:94:44:F9:0C:F6:3A:53:66:1E
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 01856D4AA31687B9DB90E33B27C2E2A4DEFF
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/c7pIOsNzocsd-NuURPkM9jpTZh4.roa
Signing time: Sun 01 Jan 2023 12:24:45 +0000
ROA not before: Sun 01 Jan 2023 12:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 786
IP address blocks: 77.87.24.0/21 maxlen: 24
87.32.0.0/12 maxlen: 24
45.144.8.0/22 maxlen: 24
91.193.188.0/22 maxlen: 24
91.123.224.0/20 maxlen: 24
193.1.0.0/16 maxlen: 24
2001:770::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:a3:16:87:b9:db:90:e3:3b:27:c2:e2:a4:de:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jan 1 12:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ba483ac373a1cb1df8db9444f90cf63a53661e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:a4:0f:6a:69:5f:09:5d:0c:8a:0d:3b:c0:
56:c5:b2:91:11:e5:c9:86:30:3e:1e:53:5a:40:b9:
3e:3b:80:ad:98:ea:d3:f1:4c:50:1f:37:23:8a:4a:
e9:a2:d8:23:06:6b:c7:be:bb:86:92:72:d5:4c:fa:
8b:b3:f0:37:a0:82:34:6e:ee:47:ef:45:c0:c1:0a:
09:c4:f1:0a:8f:58:b9:53:7e:5f:77:1e:d7:bd:08:
8b:4a:9a:91:85:53:6a:fa:e8:3d:21:f3:a0:c0:b0:
84:ec:91:e1:87:86:ae:ce:39:1e:c0:58:a4:13:1c:
bf:0b:89:23:b9:41:69:8e:0e:16:ff:9b:55:0b:b2:
dd:de:28:d2:c7:d9:7a:09:d6:fc:8e:b9:95:6e:30:
51:5d:81:b3:52:e9:67:3e:ac:7f:5a:c0:e2:63:7d:
83:89:06:49:44:8a:9b:8d:51:5b:b6:dd:17:5c:74:
b8:24:3f:71:fb:ad:61:21:55:14:a7:db:d2:e7:03:
d3:5d:cc:3e:87:84:22:81:3b:22:99:f7:54:2a:8c:
13:6f:9d:53:37:42:09:74:f5:c0:c7:41:80:e1:54:
45:e5:a2:c3:70:c5:1f:ed:83:68:c2:9b:c3:fc:4c:
06:da:1d:a0:bb:fc:cd:0f:50:b3:fa:eb:64:cf:8a:
03:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BA:48:3A:C3:73:A1:CB:1D:F8:DB:94:44:F9:0C:F6:3A:53:66:1E
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/c7pIOsNzocsd-NuURPkM9jpTZh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.8.0/22
77.87.24.0/21
87.32.0.0/12
91.123.224.0/20
91.193.188.0/22
193.1.0.0/16
IPv6:
2001:770::/32
Signature Algorithm: sha256WithRSAEncryption
0c:89:1a:62:08:37:80:94:9f:d2:50:94:0d:77:62:8d:bf:5f:
b7:8e:2d:36:1c:5f:91:8b:6f:5f:60:b9:6a:68:54:30:5e:76:
0b:1b:c7:4e:6a:c9:dc:7b:3c:52:8e:b8:44:c0:ba:60:50:68:
a7:f0:72:f2:86:07:13:3c:fe:80:7c:d4:d0:36:f7:69:a3:ba:
2f:88:70:5f:d7:5a:e5:af:4b:5a:09:a2:fa:7a:91:4c:cc:ad:
0c:0e:31:01:5c:7b:65:7a:c0:48:79:9a:59:0a:e5:8f:2d:a0:
c7:2b:d4:fe:f0:fa:f2:d7:bc:f0:80:ff:7a:31:f8:76:1f:dc:
7f:56:59:de:53:95:80:9e:52:cd:8e:3c:7f:22:12:c9:b8:f5:
bb:6f:ec:6e:34:b8:96:16:52:da:ca:1a:1e:36:1b:f2:89:99:
e5:a7:61:e2:16:ce:07:7b:7e:71:90:51:f3:78:a1:ec:d3:fe:
33:87:90:75:95:5b:46:ef:c9:9f:55:e8:29:b3:7a:c7:55:2d:
41:5d:0a:06:27:8e:0f:f8:a9:d3:e4:95:ac:ed:86:d8:83:24:
b2:9a:43:62:31:95:f4:3c:03:e3:6c:9d:89:32:60:dd:83:8d:
5b:75:9d:9e:3d:e1:91:96:96:d4:a8:a6:f3:33:7b:43:a8:97:
fa:51:d1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:14 2025 by rpki-client