Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/5dnCGjRVAQnQpfMcrG20sh3MqVE.roa
File: 5dnCGjRVAQnQpfMcrG20sh3MqVE.roa (raw, json)
Hash identifier: Yg3IQWW+S82ePSHhq4g2i2lW+TFM90etIxFc8bAKIgE=
Subject key identifier: E5:D9:C2:1A:34:55:01:09:D0:A5:F3:1C:AC:6D:B4:B2:1D:CC:A9:51
Certificate issuer: /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial: 01856C6EE965679C6822CCE8127C404FF5A9
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/5dnCGjRVAQnQpfMcrG20sh3MqVE.roa
Signing time: Sun 01 Jan 2023 08:24:45 +0000
ROA not before: Sun 01 Jan 2023 08:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30960
IP address blocks: 80.76.132.0/23 maxlen: 23
80.76.128.0/22 maxlen: 22
80.76.136.0/23 maxlen: 23
80.76.138.0/23 maxlen: 23
80.76.134.0/23 maxlen: 23
80.76.140.0/22 maxlen: 22
193.27.236.0/22 maxlen: 22
193.27.240.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:e9:65:67:9c:68:22:cc:e8:12:7c:40:4f:f5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Validity
Not Before: Jan 1 08:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5d9c21a34550109d0a5f31cac6db4b21dcca951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:12:11:59:0c:99:77:c7:8c:e6:f6:80:e7:
a1:d9:91:5a:2d:99:08:18:71:3f:59:b2:73:c2:b3:
be:da:68:bb:be:f5:a1:40:38:aa:58:b3:56:94:8e:
50:2f:12:98:02:2f:0b:07:35:44:67:64:d9:c5:77:
52:ea:82:69:8f:61:d3:ee:37:dc:7d:7b:0c:2f:d2:
cf:03:b5:36:02:cd:17:d2:42:8f:94:a5:95:84:31:
d5:7d:6e:33:ea:04:80:a2:39:18:42:d7:77:e9:41:
34:55:21:a9:af:41:bc:cb:32:bb:3b:4d:3e:02:e8:
6a:44:4c:3e:f5:50:c9:8b:05:8b:94:a2:51:5f:11:
36:b1:38:fe:9b:42:55:d2:ad:87:ae:5f:6d:09:94:
cd:b2:ac:37:20:e8:7b:0a:73:6a:57:89:60:6e:40:
49:2b:58:53:d7:c6:75:b4:77:ab:08:91:2c:23:07:
3b:be:8f:11:f1:6f:ba:37:f6:8c:ad:41:62:5f:5e:
a2:77:4b:55:df:d0:ee:43:cd:cf:03:c0:4c:af:b1:
51:cd:05:9a:5e:75:0b:55:5f:7f:8a:d7:b9:ad:b5:
42:17:fa:ea:99:d3:f6:aa:59:f2:f0:de:6f:05:41:
89:62:a4:fa:b5:77:e7:80:55:f4:52:ea:84:f6:21:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:C2:1A:34:55:01:09:D0:A5:F3:1C:AC:6D:B4:B2:1D:CC:A9:51
X509v3 Authority Key Identifier:
keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/5dnCGjRVAQnQpfMcrG20sh3MqVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.128.0/20
193.27.236.0-193.27.241.255
Signature Algorithm: sha256WithRSAEncryption
b9:25:64:2c:d1:d9:74:74:30:75:1e:d8:7c:3a:8c:34:83:3a:
18:69:93:8b:39:c6:b8:16:34:66:43:8f:cd:19:f1:25:d3:86:
1c:60:15:ea:19:24:2e:c5:10:73:8c:73:af:f4:f1:a0:a5:f5:
03:a3:5e:47:fa:e9:b6:74:87:0b:a9:ea:6b:45:12:18:c9:13:
c1:7a:ab:af:fb:01:1b:f3:36:61:94:27:2e:42:2b:7a:87:08:
48:81:9d:60:6d:a8:04:58:ff:49:d9:24:9a:eb:b1:e3:3d:88:
f2:1b:9c:cb:ab:16:04:99:1c:32:60:f6:d5:e1:57:24:dd:b4:
b4:99:6e:4c:bd:97:44:b0:fd:0e:f2:9d:78:0c:65:f3:31:4b:
97:32:da:fe:d7:4b:da:72:e1:14:51:04:fb:11:ef:11:c8:cf:
ec:05:a3:ad:88:7d:15:43:5c:ef:e1:61:99:5a:95:1e:6d:d1:
99:34:47:52:8d:1e:96:ef:62:9c:14:c9:be:02:67:d1:35:a9:
f8:87:d7:5c:27:2f:c1:e1:b8:11:3a:a0:00:f1:8e:65:09:2b:
15:65:5a:2a:6f:a0:fc:9d:2a:1a:b0:5b:9b:12:c4:56:d9:2c:
6c:49:cf:df:a1:f1:ad:68:37:46:bd:45:73:5a:13:84:8a:19:
fe:38:ea:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:07 2025 by rpki-client