Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/_tB96zywNMzZd38cnQh58FM0Lvs.roa
File: _tB96zywNMzZd38cnQh58FM0Lvs.roa (raw, json)
Hash identifier: /ZhnKrRhbQHiC9coDJM1/HHv+LvguzzF/5kASBhA4Vw=
Subject key identifier: FE:D0:7D:EB:3C:B0:34:CC:D9:77:7F:1C:9D:08:79:F0:53:34:2E:FB
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 01872BD98895F50A2BD389528665580EEDF9
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/_tB96zywNMzZd38cnQh58FM0Lvs.roa
Signing time: Wed 29 Mar 2023 05:31:29 +0000
ROA not before: Wed 29 Mar 2023 05:31:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202105
IP address blocks: 87.237.226.0/24 maxlen: 24
87.237.225.0/24 maxlen: 24
87.237.224.0/24 maxlen: 24
185.82.116.0/24 maxlen: 24
185.82.117.0/24 maxlen: 24
185.82.118.0/24 maxlen: 24
185.82.119.0/24 maxlen: 24
87.237.228.0/24 maxlen: 24
87.237.229.0/24 maxlen: 24
185.51.206.0/24 maxlen: 24
87.237.227.0/24 maxlen: 24
87.237.231.0/24 maxlen: 24
87.237.230.0/24 maxlen: 24
185.51.205.0/24 maxlen: 24
185.51.204.0/24 maxlen: 24
185.51.207.0/24 maxlen: 24
83.136.9.0/24 maxlen: 24
83.136.10.0/24 maxlen: 24
83.136.8.0/24 maxlen: 24
83.136.11.0/24 maxlen: 24
83.136.13.0/24 maxlen: 24
83.136.14.0/24 maxlen: 24
83.136.12.0/24 maxlen: 24
83.136.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:d9:88:95:f5:0a:2b:d3:89:52:86:65:58:0e:ed:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Mar 29 05:31:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed07deb3cb034ccd9777f1c9d0879f053342efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:27:40:1d:a5:05:eb:b6:75:34:c3:e2:c7:
69:ea:10:c7:c0:1c:34:56:36:32:ef:ca:4c:3c:05:
c3:17:66:8d:00:9d:a7:93:2a:7f:cd:84:c4:9f:85:
82:b9:61:a7:60:6f:b8:d1:50:1c:64:40:55:a5:46:
7f:b3:2c:f1:d1:ed:da:41:9d:78:e2:93:87:64:8c:
ac:d7:95:62:a6:dd:eb:7f:e5:cc:b1:97:94:31:4d:
68:55:e2:1c:ce:56:87:83:af:64:33:2f:33:67:d1:
72:7e:29:28:09:9a:32:e0:36:03:5f:4a:c2:17:17:
4d:09:fc:7c:ac:9c:1c:1c:58:1c:45:f1:67:ae:8a:
a3:1a:b4:df:f8:2a:0d:10:38:4d:60:83:a6:79:17:
d0:96:35:ab:07:8f:7a:47:e5:ec:1d:64:8e:ca:e4:
65:f6:95:2d:e1:71:24:53:fd:e6:c0:49:00:85:e1:
fb:f9:d5:8d:b5:6d:a0:05:e3:b2:4f:e8:8a:f8:e8:
dd:d9:cf:a4:54:8b:13:49:5d:c9:7d:e1:77:a2:ef:
93:49:74:6f:15:8e:43:df:b0:3d:0f:8f:89:dc:5e:
e0:a9:af:68:48:13:28:ad:9d:99:d1:78:99:f0:94:
ea:dc:27:59:4a:74:d7:dc:69:3d:7d:57:d0:12:08:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:7D:EB:3C:B0:34:CC:D9:77:7F:1C:9D:08:79:F0:53:34:2E:FB
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/_tB96zywNMzZd38cnQh58FM0Lvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.8.0/21
87.237.224.0/21
185.51.204.0/22
185.82.116.0/22
Signature Algorithm: sha256WithRSAEncryption
72:0a:ea:6b:35:94:a7:70:8c:12:89:f7:20:65:56:3f:53:bd:
a0:d2:32:6a:5e:b5:09:94:76:36:1c:fa:1a:e3:e2:23:d8:bc:
d0:11:62:c5:2c:da:33:10:19:f8:5d:81:7c:79:2a:d2:6d:2b:
71:c2:3b:f8:74:01:a0:8c:75:98:cf:db:ed:98:46:a1:81:bd:
fd:7d:26:f0:86:d6:fd:3a:04:b8:09:1b:83:67:6e:44:12:99:
43:fa:6a:77:0b:17:6e:c8:67:31:81:26:5c:5f:7f:f0:fa:4c:
e3:93:cf:fb:61:ae:62:64:7d:ad:88:e6:91:cc:d6:5f:3a:64:
e8:da:b4:61:ea:c3:21:be:f5:0f:d1:7d:59:de:b5:91:fa:5f:
72:29:96:74:7f:47:a8:12:8e:30:78:2f:98:19:7f:fa:74:f0:
18:9d:16:6a:a1:28:7b:a8:2e:e8:6d:0b:9c:97:13:09:fb:ff:
fd:52:a8:26:77:84:03:2a:60:eb:3b:1d:10:ba:4f:1a:bd:d0:
10:54:c6:53:1d:ff:6d:24:b9:30:a0:26:e8:42:68:ac:02:78:
16:0c:b1:14:d0:46:87:a2:b1:d7:44:0b:55:ff:2e:95:88:df:
70:82:59:c1:a4:5a:7d:f5:0d:c5:3c:b1:4a:62:cc:d6:65:11:
a4:34:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:52:13 2025 by rpki-client