Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/CQwCxpYOrniHENCItM5V0XYzBgc.roa
File: CQwCxpYOrniHENCItM5V0XYzBgc.roa (raw, json)
Hash identifier: /1swTpTYWoXwsiuWhBWMZmxYumqw1c5q8rN0y1mxtqM=
Subject key identifier: 09:0C:02:C6:96:0E:AE:78:87:10:D0:88:B4:CE:55:D1:76:33:06:07
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 380C8DCA
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/CQwCxpYOrniHENCItM5V0XYzBgc.roa
Signing time: Sat 01 Jan 2022 10:04:11 +0000
ROA not before: Sat 01 Jan 2022 10:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62214
IP address blocks: 77.221.48.0/24 maxlen: 24
2a10:4941:30::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940346826 (0x380c8dca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 10:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=090c02c6960eae788710d088b4ce55d176330607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:25:16:5f:f8:91:70:5a:f8:d2:5b:00:4c:
7b:c7:55:3a:be:74:9b:7c:ff:f4:3e:c0:11:84:26:
a9:10:17:b8:6a:02:fd:e5:f3:bc:eb:86:31:e4:e0:
07:06:33:e3:3c:04:89:c6:ba:5c:fc:e3:b4:1c:53:
23:51:e2:78:ee:ba:5a:fe:6d:02:70:2f:b7:8a:7d:
a4:c1:55:3b:3b:9b:33:75:41:2d:35:e0:df:f1:80:
c6:35:ef:52:49:8f:a5:ab:84:34:f2:36:c3:9f:c6:
bf:eb:ba:40:97:33:68:f2:66:99:52:a0:39:22:b3:
cb:aa:a6:49:7e:63:f2:28:ad:d9:13:43:df:b8:de:
d1:96:20:2d:da:d0:00:61:45:09:48:b7:5f:21:f0:
16:dc:93:f2:c4:f0:4f:12:fe:a9:81:2c:35:50:f3:
25:58:f9:30:bb:7a:a5:59:03:34:35:72:93:65:1d:
4a:04:72:bc:2d:dd:4a:0e:db:96:bc:b6:4a:61:cf:
f7:9f:e0:84:7f:ce:46:97:50:cb:64:91:00:ed:bf:
7a:14:16:be:3c:e1:c7:65:c1:c5:1a:f3:5e:ff:08:
bf:92:b3:f3:28:37:18:ff:fb:e5:f7:b4:1b:d1:77:
f7:6f:ac:b7:33:12:08:4d:f7:b9:ca:9c:1c:4b:60:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:02:C6:96:0E:AE:78:87:10:D0:88:B4:CE:55:D1:76:33:06:07
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/CQwCxpYOrniHENCItM5V0XYzBgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.48.0/24
IPv6:
2a10:4941:30::/44
Signature Algorithm: sha256WithRSAEncryption
97:17:1d:5d:ba:8c:f7:dd:a0:1b:15:b4:b3:d7:37:dc:da:ca:
13:35:dc:bd:85:21:9a:75:e4:83:60:ed:4c:9e:aa:10:fb:37:
eb:71:0e:f8:e3:84:94:5a:f8:f4:f8:7c:41:02:0c:df:e4:3e:
e8:f5:45:d3:b9:de:fe:50:1b:cc:ad:59:b0:43:7c:6c:62:7a:
78:e2:4f:d2:bd:28:61:fe:c4:84:71:4f:bb:26:3b:c9:7c:d2:
ff:ec:f7:16:1d:2e:6e:bb:5e:fc:dd:9d:02:59:bf:4c:09:cd:
c8:7d:32:55:24:af:55:04:44:17:03:77:3c:ee:60:06:2c:73:
ed:b3:cd:0a:12:97:ce:07:ad:57:ea:43:7d:e4:35:54:56:01:
7f:97:0e:d4:a5:e5:dc:87:dd:17:69:77:ca:2b:35:45:10:b4:
de:b5:bd:2d:e0:25:fd:49:a1:40:3c:e7:27:14:25:4f:7d:8c:
19:60:57:b3:e5:60:cd:42:59:7f:54:00:28:4e:ce:86:bc:e3:
ea:c0:fb:1e:8f:d8:8b:af:b4:35:ad:47:2c:43:47:0a:64:32:
18:43:7f:d8:12:86:e7:67:98:06:bf:cb:d9:20:4b:dc:9c:f9:
03:90:ee:1e:0f:a7:97:79:ff:bb:a0:ee:88:c8:be:9f:89:47:
e7:e3:ae:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:00 2025 by rpki-client