Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/Cd09enJYNSXLXUYH4dtbagC6oy8.roa
File: Cd09enJYNSXLXUYH4dtbagC6oy8.roa (raw, json)
Hash identifier: JRC0XdisnZz0fRA92ak7HL6p+U7vRB7iDJdWdTBTThs=
Subject key identifier: 09:DD:3D:7A:72:58:35:25:CB:5D:46:07:E1:DB:5B:6A:00:BA:A3:2F
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 0186877DCDF14C9DEFC3FDE597A78FCBDE30
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/Cd09enJYNSXLXUYH4dtbagC6oy8.roa
Signing time: Sat 25 Feb 2023 07:33:34 +0000
ROA not before: Sat 25 Feb 2023 07:33:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59492
IP address blocks: 193.187.77.0/24 maxlen: 24
193.187.78.0/24 maxlen: 24
193.187.76.0/24 maxlen: 24
193.187.79.0/24 maxlen: 24
193.142.213.0/24 maxlen: 24
195.182.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:7d:cd:f1:4c:9d:ef:c3:fd:e5:97:a7:8f:cb:de:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Feb 25 07:33:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09dd3d7a72583525cb5d4607e1db5b6a00baa32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:f8:09:b2:9b:96:fb:6c:38:b5:81:03:35:
2e:43:25:b1:e0:29:ff:a9:23:ec:96:28:54:3f:b5:
00:7d:1c:9c:db:04:54:0c:eb:94:a3:2c:6f:94:f3:
2c:9c:42:08:c1:7e:af:7b:c4:45:cc:5d:b0:67:8b:
c0:57:86:e1:bd:ce:70:11:aa:60:a3:ae:be:17:0c:
67:26:d9:69:01:0a:37:32:41:94:e4:52:de:ad:5f:
90:63:31:64:08:6c:58:c4:61:9e:5d:8b:0a:a0:a9:
a0:c4:fa:20:ef:2f:69:89:3d:f3:78:47:54:d5:c9:
3f:44:cb:58:40:ce:bd:47:ee:cd:69:6f:54:3b:60:
c1:78:75:69:39:e5:3c:b1:ef:4c:de:fb:78:a5:7e:
66:04:ad:5f:86:d3:15:ca:cc:6c:41:e0:cf:8c:bb:
9f:61:51:46:ff:f7:b3:57:bf:1c:70:e5:a9:3a:d7:
b9:b8:d5:07:4d:74:5d:ce:85:f7:b6:c2:50:ca:61:
50:4c:7d:2d:7a:eb:36:b8:d8:73:32:e0:73:1c:49:
0e:f5:7f:c7:b6:7b:7a:f8:de:24:69:d8:6e:ac:84:
1f:27:bc:11:01:07:54:6b:d8:b8:70:a5:8a:3a:6b:
46:a1:ca:43:d9:b1:79:b5:9b:26:4e:e0:0f:f1:e2:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DD:3D:7A:72:58:35:25:CB:5D:46:07:E1:DB:5B:6A:00:BA:A3:2F
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/Cd09enJYNSXLXUYH4dtbagC6oy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.213.0/24
193.187.76.0/22
195.182.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:aa:68:b9:71:b1:a1:a3:f3:65:bd:51:2d:b7:09:90:a8:2a:
1b:48:01:ac:f9:07:cb:06:f7:3b:3f:ef:80:37:1e:5f:77:a6:
e5:1a:67:89:56:9e:0b:75:69:94:38:41:88:ae:55:c5:89:5a:
7d:87:0e:bd:67:73:ed:b7:bf:0e:9b:01:a4:84:a8:f0:5d:30:
ad:d1:96:26:0d:c2:d6:90:61:c5:2b:bb:ee:9b:18:4f:03:49:
59:eb:3b:cb:77:db:1a:17:e1:a2:db:d7:c0:00:33:b1:28:a9:
cd:ad:20:f1:48:e8:b5:04:3d:5c:c9:fd:aa:65:58:70:ee:89:
92:84:ea:50:e7:2d:d9:99:da:a9:a1:a0:72:5a:da:4b:57:30:
75:e0:a8:32:4e:84:e0:08:5f:7b:07:29:bf:f1:d6:ac:9b:ac:
3e:97:6b:42:54:9c:6b:92:f5:d6:e3:f5:45:17:41:5f:84:9c:
16:28:5b:aa:fb:24:10:64:cd:29:b0:c4:52:26:7f:17:bc:81:
52:be:85:2c:94:7d:23:1e:e8:fc:c2:14:4d:ad:06:0d:24:0e:
fb:5f:30:bd:65:3c:5e:be:1c:5b:21:c3:5a:ee:ca:a6:92:5c:
44:1c:04:05:63:fa:4c:16:50:64:0d:75:7f:1f:89:50:32:fb:
c1:fd:a7:3b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYaHfc3xTJ3vw/3ll6ePy94wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzI4N2UyM2JlZTY3Y2E2NjJmYmQ3NzlmY2JjMTgyZWM1
NTNiZTMwHhcNMjMwMjI1MDczMzM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWRkM2Q3YTcyNTgzNTI1Y2I1ZDQ2MDdlMWRiNWI2YTAwYmFhMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTz4CbKblvtsOLWBAzUuQyWx4Cn/
qSPslihUP7UAfRyc2wRUDOuUoyxvlPMsnEIIwX6ve8RFzF2wZ4vAV4bhvc5wEapg
o66+FwxnJtlpAQo3MkGU5FLerV+QYzFkCGxYxGGeXYsKoKmgxPog7y9piT3zeEdU
1ck/RMtYQM69R+7NaW9UO2DBeHVpOeU8se9M3vt4pX5mBK1fhtMVysxsQeDPjLuf
YVFG//ezV78ccOWpOte5uNUHTXRdzoX3tsJQymFQTH0teus2uNhzMuBzHEkO9X/H
tnt6+N4kadhurIQfJ7wRAQdUa9i4cKWKOmtGocpD2bF5tZsmTuAP8eLWUwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAndPXpyWDUly11GB+HbW2oAuqMvMB8GA1UdIwQY
MBaAFDMyh+I77mfKZi+9d5/LwYLsVTvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUt
NDljMDcyYTgyNTk1LzEvQ2QwOWVuSllOU1hMWFVZSDRkdGJhZ0M2b3k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUtNDljMDcyYTgyNTk1
LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwY7VAwQC
wbtMAwQAw7YHMA0GCSqGSIb3DQEBCwUAA4IBAQBfqmi5cbGho/NlvVEttwmQqCob
SAGs+QfLBvc7P++ANx5fd6blGmeJVp4LdWmUOEGIrlXFiVp9hw69Z3Ptt78OmwGk
hKjwXTCt0ZYmDcLWkGHFK7vumxhPA0lZ6zvLd9saF+Gi29fAADOxKKnNrSDxSOi1
BD1cyf2qZVhw7omShOpQ5y3ZmdqpoaByWtpLVzB14KgyToTgCF97Bym/8dasm6w+
l2tCVJxrkvXW4/VFF0FfhJwWKFuq+yQQZM0psMRSJn8XvIFSvoUslH0jHuj8whRN
rQYNJA77XzC9ZTxevhxbIcNa7sqmklxEHAQFY/pMFlBkDXV/H4lQMvvB/ac7
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:02 2025 by rpki-client