Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/KbEsQMDP5dwgK8bWcqBdsq5mGnw.roa
File: KbEsQMDP5dwgK8bWcqBdsq5mGnw.roa (raw, json)
Hash identifier: QmHDCoBjHOviz3ZK3n0zCFIPSaOLSfYlYD9UUepRUTY=
Subject key identifier: 29:B1:2C:40:C0:CF:E5:DC:20:2B:C6:D6:72:A0:5D:B2:AE:66:1A:7C
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 01856D6F7A4711956A729348E090026168A9
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/KbEsQMDP5dwgK8bWcqBdsq5mGnw.roa
Signing time: Sun 01 Jan 2023 13:05:00 +0000
ROA not before: Sun 01 Jan 2023 13:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35680
IP address blocks: 77.120.112.0/22 maxlen: 22
77.120.108.0/22 maxlen: 22
82.144.220.0/22 maxlen: 22
77.120.116.0/22 maxlen: 22
77.120.124.0/22 maxlen: 22
77.120.120.0/22 maxlen: 22
77.123.152.0/22 maxlen: 22
77.123.148.0/22 maxlen: 22
77.123.156.0/22 maxlen: 22
77.120.96.0/22 maxlen: 22
77.120.104.0/22 maxlen: 22
77.120.100.0/22 maxlen: 22
77.123.128.0/22 maxlen: 22
77.123.132.0/22 maxlen: 22
77.123.136.0/22 maxlen: 22
77.123.144.0/22 maxlen: 22
77.123.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:7a:47:11:95:6a:72:93:48:e0:90:02:61:68:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Jan 1 13:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29b12c40c0cfe5dc202bc6d672a05db2ae661a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:0c:09:15:b2:64:cd:cb:dd:3a:9b:be:fa:
bd:33:e7:ba:9f:a9:06:b6:39:29:ab:96:25:45:97:
6b:64:b3:05:a6:7d:22:06:52:5a:5e:44:9f:ab:4e:
fa:c2:27:f4:5a:d8:b2:dd:33:8c:a1:45:0b:4b:ef:
07:84:4a:b4:ec:7e:86:88:5d:8c:b6:67:0c:59:5b:
4d:1d:7f:70:3f:50:c9:1a:c5:36:f8:85:64:ef:c4:
61:12:37:76:5d:2a:55:e6:8b:bb:2a:24:33:6f:18:
f3:c8:e5:53:87:d3:66:f1:83:95:c6:be:c7:05:d5:
a3:79:18:14:24:f0:55:cb:fd:e0:8e:0d:e7:18:34:
ba:40:7d:63:fb:d4:79:3c:15:53:0b:c8:8b:da:f7:
2e:e6:84:45:a2:87:8a:d4:ad:9c:54:8e:1f:63:2b:
76:16:50:63:63:c0:e6:0e:5b:86:4b:34:20:87:93:
df:db:21:bf:10:35:19:cb:ae:d1:06:42:04:b7:3b:
95:e1:d2:fe:17:11:45:6e:c8:cc:6d:3a:c9:df:8d:
93:e9:ab:14:12:b8:4e:98:59:8d:e9:fe:75:44:56:
e8:57:6e:11:30:7c:46:fd:c4:61:13:57:18:0b:70:
c3:de:70:95:b4:a6:6b:3c:6f:3a:d6:08:6b:af:06:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B1:2C:40:C0:CF:E5:DC:20:2B:C6:D6:72:A0:5D:B2:AE:66:1A:7C
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/KbEsQMDP5dwgK8bWcqBdsq5mGnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.120.96.0/19
77.123.128.0/19
82.144.220.0/22
Signature Algorithm: sha256WithRSAEncryption
36:93:fb:e5:bd:fc:c5:1a:a5:5b:d0:19:ab:ab:0c:38:43:e9:
ad:f4:0f:5b:77:4d:8e:95:12:f7:02:f1:ce:fd:ac:71:1d:c0:
14:25:be:46:74:ad:92:19:2e:82:29:2b:90:23:26:d8:5e:36:
7c:48:81:3c:65:3d:ff:ef:fe:61:d5:e1:ab:de:e6:23:2c:d2:
f6:ec:55:31:e9:30:ad:16:c9:1d:4a:a7:de:d0:83:f1:b4:12:
44:07:b4:74:d3:52:9c:51:af:a1:40:bd:b6:2d:2c:01:eb:af:
58:f6:79:36:8c:df:c8:a7:df:77:e5:12:41:41:d3:85:cf:0a:
68:15:f9:5e:ee:06:7e:18:0a:6b:cc:d2:56:31:23:4f:72:98:
c9:7f:4e:47:c6:dc:98:5d:74:01:4c:85:c3:f1:57:63:55:21:
50:5b:c5:76:c4:b2:e8:35:9f:ed:c5:ac:68:64:5b:13:f0:ca:
2a:ab:19:f2:f7:f1:78:e8:4f:5f:ca:d8:99:a8:8e:01:e6:c4:
47:13:f2:db:58:09:59:5f:ae:53:ec:fb:7b:d1:d0:7f:8d:3a:
41:46:cd:42:6d:ec:7a:1d:e6:94:14:11:00:d5:10:be:8b:79:
7b:8d:af:3f:a2:ed:46:2c:19:48:06:a6:72:2b:c0:04:50:ff:
da:02:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:14 2025 by rpki-client