Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/l9Ho_lZ6vJOzEngKCau78duHMMs.roa
File: l9Ho_lZ6vJOzEngKCau78duHMMs.roa (raw, json)
Hash identifier: wvId666o4QfFLhozAIVl6yRFY/glv+7kXFYibXjLMAs=
Subject key identifier: 97:D1:E8:FE:56:7A:BC:93:B3:12:78:0A:09:AB:BB:F1:DB:87:30:CB
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 018A6A23397736A0A04870B87DA62118B321
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/l9Ho_lZ6vJOzEngKCau78duHMMs.roa
Signing time: Wed 06 Sep 2023 10:56:47 +0000
ROA not before: Wed 06 Sep 2023 10:56:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5394
IP address blocks: 81.29.184.0/21 maxlen: 21
81.29.180.0/22 maxlen: 22
194.183.0.0/19 maxlen: 19
77.39.224.0/20 maxlen: 20
77.39.224.0/19 maxlen: 19
194.183.16.0/24 maxlen: 24
77.39.240.0/20 maxlen: 20
77.39.160.0/19 maxlen: 19
77.39.160.0/20 maxlen: 20
77.39.176.0/20 maxlen: 20
195.250.224.0/19 maxlen: 19
195.250.224.0/24 maxlen: 24
195.250.232.0/24 maxlen: 24
217.72.96.0/20 maxlen: 20
195.94.152.0/24 maxlen: 24
195.94.160.0/24 maxlen: 24
195.94.128.0/18 maxlen: 18
194.79.208.0/20 maxlen: 20
194.79.207.0/24 maxlen: 24
213.233.27.0/24 maxlen: 24
213.233.32.0/19 maxlen: 19
213.233.36.0/24 maxlen: 24
194.79.192.0/20 maxlen: 20
194.79.192.0/19 maxlen: 19
213.233.0.0/19 maxlen: 19
213.233.0.0/18 maxlen: 18
82.145.112.0/20 maxlen: 24
2a02:688::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:23:39:77:36:a0:a0:48:70:b8:7d:a6:21:18:b3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Sep 6 10:56:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97d1e8fe567abc93b312780a09abbbf1db8730cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:6d:a2:d8:93:e6:1d:97:8c:72:51:86:07:
b4:d5:e3:6a:2e:0b:30:18:e9:b2:73:91:ef:a7:37:
e4:0d:53:fe:fb:9d:e0:3b:9f:b0:7a:cf:e0:4e:c2:
1c:d0:10:99:d4:d4:7f:2c:cc:da:46:cb:6b:c4:b8:
24:7c:5d:5e:56:bf:32:b5:76:6b:be:34:1f:ce:1a:
cb:ff:a4:84:bc:15:06:c6:a9:ba:8d:5c:86:38:42:
76:1d:ed:8a:0f:49:05:4e:5e:03:e8:34:1e:55:40:
46:19:b3:89:a0:6b:a5:ca:34:cd:ca:a9:ef:c7:41:
40:f8:72:00:05:53:5d:0a:79:c1:6b:cd:41:29:4d:
df:6c:2a:ba:98:7f:28:9e:fa:c7:41:e8:bd:15:fd:
ea:60:ed:c1:4b:cd:74:8f:6f:a7:58:aa:4a:d7:39:
e2:4c:58:62:99:cd:7a:47:c3:46:a6:81:2f:66:47:
f4:bb:30:d2:16:60:de:8d:22:09:f4:5d:32:cb:b8:
5e:40:32:a8:3e:88:12:e5:99:0b:64:0c:5f:da:47:
2d:5e:81:fe:1f:5a:bc:61:06:ed:ce:66:af:5b:46:
f5:88:95:71:3a:78:b1:01:1a:b1:6f:78:2f:ef:de:
3b:26:e4:7e:90:7a:b4:5f:34:42:b1:07:78:ab:e6:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:E8:FE:56:7A:BC:93:B3:12:78:0A:09:AB:BB:F1:DB:87:30:CB
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/l9Ho_lZ6vJOzEngKCau78duHMMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.39.160.0/19
77.39.224.0/19
81.29.180.0-81.29.191.255
82.145.112.0/20
194.79.192.0/19
194.183.0.0/19
195.94.128.0/18
195.250.224.0/19
213.233.0.0/18
217.72.96.0/20
IPv6:
2a02:688::/32
Signature Algorithm: sha256WithRSAEncryption
27:75:0f:55:9e:65:cc:ff:96:b1:91:6e:03:97:be:c7:23:f8:
12:38:da:07:3f:aa:8e:0b:19:f2:08:a9:e1:49:8b:f6:4c:4e:
44:50:57:23:2c:f7:fd:7f:49:13:05:b2:e9:88:1e:0f:81:bf:
98:4c:7c:43:58:c1:7b:ef:31:a3:59:90:2e:f5:f6:98:54:14:
d9:bb:c2:98:8e:c1:c1:a7:a5:b1:2d:08:95:6c:76:5e:89:4d:
fa:4b:dd:8b:55:0f:e1:82:39:f7:78:7d:ec:09:77:15:0a:52:
60:2a:47:0a:d5:0a:38:d0:e0:46:c9:f5:fd:43:25:e1:30:9c:
9d:21:d4:a8:bc:af:29:4c:5e:81:a5:71:23:ed:df:f1:39:21:
de:9b:0a:ad:38:62:33:61:ba:64:9a:28:ce:dd:44:68:a3:07:
90:19:fe:d1:e2:0b:53:23:62:8c:49:a4:ca:8a:50:4b:82:4e:
a4:52:eb:91:47:a3:aa:52:d8:74:c8:a9:e5:4f:38:15:12:08:
5a:ae:c6:25:11:e5:da:68:c6:25:67:b3:40:59:e6:39:c5:4b:
e4:b6:bc:0a:e0:84:af:64:1d:11:af:3b:a1:f4:9c:80:b2:2b:
cb:e0:d8:ee:c3:90:72:ce:ef:e0:bc:5f:e4:2d:b2:ca:01:74:
76:c3:d3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:56 2025 by rpki-client