Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_9f3_pzbipAZ8jfR0Pk8EC4yOys.roa
File: _9f3_pzbipAZ8jfR0Pk8EC4yOys.roa (raw, json)
Hash identifier: ygkox6awc9kqfdN6q/j3JAbC2lls0V+in5dZ2+4B9vY=
Subject key identifier: FF:D7:F7:FE:9C:DB:8A:90:19:F2:37:D1:D0:F9:3C:10:2E:32:3B:2B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018AF579A1B3B0F9549E1BA2AD58993FE5ED
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_9f3_pzbipAZ8jfR0Pk8EC4yOys.roa
Signing time: Tue 03 Oct 2023 12:18:23 +0000
ROA not before: Tue 03 Oct 2023 12:18:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44620
IP address blocks: 185.17.139.0/24 maxlen: 24
185.17.138.0/24 maxlen: 24
77.92.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:79:a1:b3:b0:f9:54:9e:1b:a2:ad:58:99:3f:e5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 3 12:18:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffd7f7fe9cdb8a9019f237d1d0f93c102e323b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:c9:3e:0a:83:1d:e0:f7:28:01:a0:f0:96:
12:37:60:ac:13:47:14:0b:fc:02:05:38:f4:13:27:
df:af:1e:93:01:9c:ac:c0:59:8b:db:a2:c0:a9:48:
54:b2:5f:ec:af:cf:ba:20:42:81:c9:e1:9c:c6:da:
6b:b5:9e:8f:3d:3f:42:37:3a:75:3d:38:90:de:5c:
1c:af:d3:b7:21:df:22:39:53:ec:cc:49:05:b1:f5:
7b:6b:a7:d2:66:e6:4b:43:28:77:c8:62:28:eb:34:
fc:a2:16:5d:40:1b:2f:5f:2c:b2:50:06:d5:f3:7a:
93:cb:a2:65:62:79:b3:8d:00:ce:ea:b8:4d:d9:b6:
bd:73:1d:5c:5b:c7:aa:c5:6b:50:c8:bc:8e:19:b8:
a3:ce:10:60:3b:ab:3f:a4:2a:6e:25:14:47:85:4a:
8d:2b:6b:fd:b7:dd:5b:33:d6:7a:5d:d1:bc:82:e5:
ba:fa:39:d4:ee:e9:ad:98:c1:e6:c7:51:c1:d6:40:
93:13:a3:4c:ea:81:8c:fc:cb:cf:db:65:1c:df:0a:
b0:6c:f8:29:72:cb:f5:70:8c:3c:85:b1:5a:6d:03:
05:b6:6b:83:f6:45:c6:f5:8a:4c:4f:30:dc:38:89:
39:c4:92:e3:12:9c:c8:4f:f0:90:ba:97:a8:75:9a:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D7:F7:FE:9C:DB:8A:90:19:F2:37:D1:D0:F9:3C:10:2E:32:3B:2B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_9f3_pzbipAZ8jfR0Pk8EC4yOys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.151.0/24
185.17.138.0/23
Signature Algorithm: sha256WithRSAEncryption
29:e9:8e:a3:19:28:6c:e6:23:5f:f1:74:f1:9e:fd:e7:85:e8:
5b:62:84:45:29:b6:ca:b2:d2:83:c4:5e:25:15:72:f0:a9:d7:
70:bc:ff:6f:37:7b:96:3f:75:91:15:9b:30:20:17:ec:ab:d9:
7e:cf:60:a8:9b:74:f5:1d:33:16:8c:46:79:6a:ab:a6:1b:5f:
39:75:a0:21:c6:9c:26:0c:35:fc:40:e0:8d:8b:40:3f:19:5f:
e6:33:d8:fd:55:d3:ad:42:7a:5b:80:cf:23:98:fb:b0:71:f7:
dd:25:6b:5a:e3:8f:f9:c1:1b:2d:45:17:2f:ad:9f:f4:46:c1:
f1:ae:52:81:09:43:e6:5a:78:f7:bf:b5:5c:4b:59:f1:40:5f:
cb:c5:55:ca:a4:45:22:57:5b:6f:0c:71:16:e6:22:42:a9:66:
a1:0e:ba:7e:bf:e3:8f:9f:3a:3a:9a:41:23:c6:57:9b:7a:fd:
4e:f4:a0:29:44:66:fe:80:95:dc:b1:68:04:f8:2c:e3:57:01:
3e:a7:77:82:d5:ec:3c:fb:e0:ff:e5:a0:c3:b7:93:ba:c8:11:
bf:10:03:48:5d:90:91:09:ff:7d:71:41:80:5c:2d:ce:95:d8:
e8:82:a4:ad:bf:36:9e:96:b5:9e:9b:6e:33:2b:c9:74:77:23:
98:18:b5:6a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYr1eaGzsPlUnhuirViZP+XtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMxMDAzMTIxODIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmQ3ZjdmZTljZGI4YTkwMTlmMjM3ZDFkMGY5M2MxMDJlMzIzYjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc3JPgqDHeD3KAGg8JYSN2CsE0cU
C/wCBTj0Eyffrx6TAZyswFmL26LAqUhUsl/sr8+6IEKByeGcxtprtZ6PPT9CNzp1
PTiQ3lwcr9O3Id8iOVPszEkFsfV7a6fSZuZLQyh3yGIo6zT8ohZdQBsvXyyyUAbV
83qTy6JlYnmzjQDO6rhN2ba9cx1cW8eqxWtQyLyOGbijzhBgO6s/pCpuJRRHhUqN
K2v9t91bM9Z6XdG8guW6+jnU7umtmMHmx1HB1kCTE6NM6oGM/MvP22Uc3wqwbPgp
csv1cIw8hbFabQMFtmuD9kXG9YpMTzDcOIk5xJLjEpzIT/CQupeodZqp0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP/X9/6c24qQGfI30dD5PBAuMjsrMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvXzlmM19wemJpcEFaOGpmUjBQazhFQzR5T3lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVyXAwQB
uRGKMA0GCSqGSIb3DQEBCwUAA4IBAQAp6Y6jGShs5iNf8XTxnv3nhehbYoRFKbbK
stKDxF4lFXLwqddwvP9vN3uWP3WRFZswIBfsq9l+z2Com3T1HTMWjEZ5aqumG185
daAhxpwmDDX8QOCNi0A/GV/mM9j9VdOtQnpbgM8jmPuwcffdJWta44/5wRstRRcv
rZ/0RsHxrlKBCUPmWnj3v7VcS1nxQF/LxVXKpEUiV1tvDHEW5iJCqWahDrp+v+OP
nzo6mkEjxlebev1O9KApRGb+gJXcsWgE+CzjVwE+p3eC1ew8++D/5aDDt5O6yBG/
EANIXZCRCf99cUGAXC3OldjogqStvzaelrWem24zK8l0dyOYGLVq
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:01:23 2025 by rpki-client