Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/lDHCHYGgRfkkMyv2sz1EElMp3mE.roa
File: lDHCHYGgRfkkMyv2sz1EElMp3mE.roa (raw, json)
Hash identifier: 742CCZHcx3Z5Ollyt9TfKmR33sLZzCddtbE48DYL/cc=
Subject key identifier: 94:31:C2:1D:81:A0:45:F9:24:33:2B:F6:B3:3D:44:12:53:29:DE:61
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 01872B32E858F39254520D8F8F0C1B9E0C4E
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/lDHCHYGgRfkkMyv2sz1EElMp3mE.roa
Signing time: Wed 29 Mar 2023 02:29:29 +0000
ROA not before: Wed 29 Mar 2023 02:29:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39824
IP address blocks: 79.134.37.0/24 maxlen: 24
79.134.40.0/24 maxlen: 24
212.45.80.0/23 maxlen: 24
46.36.132.0/22 maxlen: 24
46.36.128.0/23 maxlen: 24
62.84.36.0/22 maxlen: 24
62.84.48.0/20 maxlen: 24
46.36.156.0/23 maxlen: 24
81.88.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:32:e8:58:f3:92:54:52:0d:8f:8f:0c:1b:9e:0c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Mar 29 02:29:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9431c21d81a045f924332bf6b33d44125329de61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:41:e3:c9:3c:a8:84:21:ed:20:e1:32:a1:
93:6b:1b:43:a4:0d:b4:30:ce:0d:7c:20:c1:e2:38:
bd:b7:6b:6d:05:5f:d0:12:af:5c:5e:02:6b:6b:f5:
14:55:3a:02:07:ba:06:42:30:80:5d:a5:7e:9c:1b:
98:a4:dd:8f:e0:78:11:d9:08:ca:e4:e3:1a:15:c0:
d3:db:8c:60:54:76:83:66:4e:f2:65:2d:83:89:de:
91:ad:be:fe:33:41:73:a6:42:97:78:65:32:cc:13:
c6:0c:93:84:6d:2e:4c:bd:dd:c2:e2:0f:1e:de:cf:
5c:6d:dc:48:6a:ba:e5:50:9d:06:86:17:fb:21:94:
62:3f:3f:57:53:1e:0e:04:83:2e:48:ac:e4:c4:77:
e4:81:d9:06:cb:b2:5d:d7:c8:73:39:0c:57:c1:04:
02:19:93:7e:f0:08:22:5a:0f:e8:26:f9:dd:be:a8:
65:4d:e7:2a:52:f4:8f:f4:4c:71:0a:85:f2:c7:e9:
00:eb:8c:2b:32:cd:d5:c9:19:d4:b1:6f:2d:e0:5e:
e1:8e:53:fe:ab:b0:e5:2e:16:da:9f:07:26:4d:a0:
79:42:71:a9:54:bc:7c:ac:cb:eb:e0:0b:21:3b:5f:
67:e1:e7:02:8c:0a:5d:16:18:be:08:e2:63:a0:05:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:31:C2:1D:81:A0:45:F9:24:33:2B:F6:B3:3D:44:12:53:29:DE:61
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/lDHCHYGgRfkkMyv2sz1EElMp3mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.128.0/23
46.36.132.0/22
46.36.156.0/23
62.84.36.0/22
62.84.48.0/20
79.134.37.0/24
79.134.40.0/24
81.88.144.0/21
212.45.80.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:79:8e:ed:96:86:4b:d8:9a:eb:bc:09:b8:51:0a:9b:5b:74:
71:72:81:b6:ff:9b:a0:f1:32:31:af:2d:a9:6c:bb:56:48:78:
9a:ac:3c:54:67:44:e4:01:24:7d:8a:5e:58:3d:55:a9:ab:3e:
f8:89:8e:1f:a6:0e:c1:5d:59:a4:6b:b5:ee:bb:ba:2d:0b:0f:
7b:7f:61:b4:27:42:4c:94:af:61:12:52:dd:5e:69:6b:fd:fa:
d0:db:aa:97:55:7f:a4:5d:5a:13:0d:e9:3d:c1:25:5d:b6:30:
8a:ce:48:08:ee:ce:36:a1:8d:85:ff:d0:f5:50:33:f2:38:cd:
82:2a:89:31:ab:62:5d:8c:c3:40:99:bb:10:5d:45:67:bc:a5:
ed:7b:c6:78:f8:ba:89:67:df:22:5e:f0:ed:d9:da:a4:24:22:
13:68:5b:25:fe:6b:32:18:41:05:84:47:e9:50:8f:f4:61:13:
70:40:52:ca:7c:11:1a:a9:63:fc:94:56:b9:c8:4e:5a:e4:b1:
78:6a:8d:75:00:7f:56:ea:c8:4b:5f:5e:45:af:59:0b:ed:3f:
eb:bd:3d:1d:6b:55:4b:a6:8a:f1:57:84:a8:42:3b:2d:96:9f:
29:a1:14:f5:d3:24:0a:94:60:2d:7f:78:c9:05:c7:d3:6d:b9:
7d:85:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:24:53 2025 by rpki-client