Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/l1ztzICVli-dKRFrzKqVo-jfxsw.roa
File: l1ztzICVli-dKRFrzKqVo-jfxsw.roa (raw, json)
Hash identifier: RX7xCe7NM0X1WtCVf14WtbHSeWuLSaJFm96kRfEgfO8=
Subject key identifier: 97:5C:ED:CC:80:95:96:2F:9D:29:11:6B:CC:AA:95:A3:E8:DF:C6:CC
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 0547A25B
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/l1ztzICVli-dKRFrzKqVo-jfxsw.roa
Signing time: Sat 01 Jan 2022 12:03:51 +0000
ROA not before: Sat 01 Jan 2022 12:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201134
IP address blocks: 87.117.70.0/24 maxlen: 24
185.82.130.0/23 maxlen: 23
185.82.128.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88580699 (0x547a25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jan 1 12:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=975cedcc8095962f9d29116bccaa95a3e8dfc6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:cc:38:b2:47:8d:db:99:60:17:e6:bf:6e:
c4:6d:fb:d3:1a:71:8d:8f:0b:3e:23:1c:01:36:7d:
27:b5:1f:e1:55:e2:6b:31:34:4c:90:ef:10:a9:c5:
b7:24:7e:f8:be:9f:01:ff:f5:c5:ec:c3:0b:44:18:
67:e5:a1:16:45:57:c9:4f:f5:71:1b:7c:9c:13:89:
0d:bf:3a:f9:92:97:29:e7:11:04:a0:37:9c:80:4b:
2b:38:84:3c:8a:00:93:b7:54:2d:3e:f6:cf:e9:2c:
69:2b:ad:fd:2e:18:a0:52:b7:6a:76:ce:af:0e:0f:
1a:43:ea:84:7d:6f:c2:14:ea:4b:6d:cf:0b:96:9a:
4b:27:5e:99:d1:f5:6f:52:f1:0b:ff:06:1f:62:1b:
5b:bb:1c:ad:95:5a:86:c1:8c:53:03:56:0a:14:db:
85:9b:d5:80:0f:13:ec:63:0b:c8:68:57:c6:57:bb:
25:7a:32:ca:38:70:4d:08:8c:29:ea:87:17:1d:c5:
b6:ac:cc:65:6a:ac:27:63:6e:b5:a3:0b:dd:e8:f2:
01:46:a3:6a:2c:c2:29:f5:f1:28:9e:0c:73:e9:a6:
43:4e:6e:1b:d0:b9:92:8e:d5:1c:f6:22:01:75:63:
d9:fb:fa:34:ae:fc:33:00:e9:72:e8:9e:eb:45:fd:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5C:ED:CC:80:95:96:2F:9D:29:11:6B:CC:AA:95:A3:E8:DF:C6:CC
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/l1ztzICVli-dKRFrzKqVo-jfxsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.117.70.0/24
185.82.128.0/22
Signature Algorithm: sha256WithRSAEncryption
57:84:42:01:57:97:4e:b4:63:1f:27:c5:7f:e8:71:fa:f6:be:
3b:27:1e:07:3c:98:40:84:34:54:bc:a3:45:9a:67:38:49:d9:
06:12:45:43:ca:97:ab:76:2a:a4:38:06:67:0c:35:d1:62:7f:
b5:52:56:61:91:ac:9e:8b:26:35:d8:6f:e6:fa:b3:ba:77:12:
5d:19:c1:05:1d:57:01:91:86:9f:91:cb:9d:3f:bf:5b:96:01:
fe:bf:8f:bd:88:4b:29:1d:2f:1a:a1:a6:cd:57:2b:6c:99:ad:
a6:35:9f:86:f7:c2:40:d0:19:20:59:be:50:bb:b7:b3:57:9d:
4d:49:9d:1d:d2:d7:66:81:76:27:9a:d7:ff:df:ba:3d:ad:2d:
7c:a0:1e:92:74:e9:16:91:94:f3:e4:79:96:6f:6f:0f:2e:81:
23:27:d2:5b:13:93:83:aa:2c:69:3b:74:23:d7:19:7f:35:f9:
2c:5b:0d:8a:6e:57:0a:54:b9:4a:73:7c:f3:8d:1d:c7:fe:14:
3d:fa:0d:68:5d:c7:74:49:eb:37:2e:0b:1e:d4:a8:fe:2a:d9:
3f:ae:fd:92:8b:84:f2:19:86:aa:e7:59:c4:7f:b7:91:3f:13:
54:a0:12:6a:8f:cb:06:b6:9a:05:fe:dd:58:3f:8f:4d:4d:c3:
f3:75:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:14 2025 by rpki-client