Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cSAFJZdIx5n5Zq0V9ObOvTRC5T0.roa
File: cSAFJZdIx5n5Zq0V9ObOvTRC5T0.roa (raw, json)
Hash identifier: bMCCEjkZVmkxFfjVIPtLm8i6ty1J4MouaRdSI7QActs=
Subject key identifier: 71:20:05:25:97:48:C7:99:F9:66:AD:15:F4:E6:CE:BD:34:42:E5:3D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018B461D9857BFE0580B01300DE1DE5FBC03
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cSAFJZdIx5n5Zq0V9ObOvTRC5T0.roa
Signing time: Thu 19 Oct 2023 04:07:06 +0000
ROA not before: Thu 19 Oct 2023 04:07:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 86.107.50.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:1d:98:57:bf:e0:58:0b:01:30:0d:e1:de:5f:bc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 19 04:07:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=712005259748c799f966ad15f4e6cebd3442e53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:40:b4:e9:90:8f:b4:c9:64:ea:25:21:2d:
d1:8a:84:dd:86:cc:24:83:80:24:ae:68:fd:5c:e2:
b9:cf:75:b3:53:6b:05:ee:7a:c8:c6:5a:dd:86:dc:
ea:9b:91:2b:e9:79:d2:9b:c4:b8:96:91:78:b9:b5:
92:f2:89:aa:40:06:c1:73:4e:39:3b:b4:4c:a1:15:
28:0d:0b:7e:51:35:c3:70:b8:6b:1f:3a:3c:f2:35:
92:c5:33:cb:c1:5c:3e:27:73:99:ae:a4:60:2b:46:
14:85:ce:9f:c8:c8:cc:82:5e:44:9f:b3:5b:81:6c:
de:fd:f2:d4:3b:23:b2:af:cb:ce:7f:1e:b7:eb:e2:
3e:bc:58:eb:c5:80:cc:78:6c:78:be:ef:26:08:cc:
08:51:f1:7b:f9:6a:a6:f5:0e:0f:5a:d0:45:d6:e5:
66:93:f9:95:b3:d3:92:6d:c0:fa:e7:b7:59:84:5f:
5b:ef:3a:8e:ca:1d:6a:e9:26:79:02:58:7c:1f:a9:
f8:fe:3e:a5:47:57:ba:94:a7:77:eb:d7:cd:ed:c8:
e2:d1:97:a6:cc:81:cb:55:09:96:84:35:2b:fa:f6:
e7:74:bd:09:fd:ff:7c:6f:4b:e9:0f:2f:b4:45:cd:
1d:10:37:a1:ce:67:37:fe:fb:1b:37:76:70:73:c3:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:05:25:97:48:C7:99:F9:66:AD:15:F4:E6:CE:BD:34:42:E5:3D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/cSAFJZdIx5n5Zq0V9ObOvTRC5T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
86.107.50.0/24
86.107.100.0/24
89.35.131.0/24
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ab:1d:8c:b5:9b:63:ab:73:60:5d:90:ad:21:31:a4:71:15:
84:0a:a8:35:83:43:27:72:c7:72:66:47:cd:b5:be:68:35:7d:
34:d4:da:23:72:8a:f1:1c:34:c4:78:40:08:97:1d:3e:be:ce:
d6:e9:dc:d5:9f:13:4c:5e:92:0c:74:0f:ea:ba:63:50:37:7a:
c0:f4:c6:4f:8b:00:77:f9:e5:48:5b:82:b2:cd:03:2f:fe:d4:
ca:73:2a:7a:7f:8b:e7:7f:2a:a4:98:c4:ec:c6:8e:b9:df:65:
7b:91:06:69:0d:a4:07:0e:46:7d:5e:c9:b5:c1:60:75:27:76:
8e:4c:27:27:2d:8c:aa:c3:4f:6e:20:35:d1:f4:9c:3d:6a:74:
67:98:90:e1:c5:16:29:da:9d:46:cf:b6:b7:28:08:9c:6c:95:
85:ae:2e:61:54:38:5a:bc:76:91:a0:3d:a7:bd:b9:4b:0f:6f:
41:8b:bc:18:8e:71:48:06:cc:de:2d:d0:41:1e:18:da:bf:f2:
7c:5a:bb:7d:8c:8b:95:29:19:d8:70:3e:81:94:60:f6:16:83:
a6:99:cd:f9:dc:19:e7:32:c3:1b:8f:09:d4:30:f6:6a:d0:01:
51:f2:3e:b6:c9:6c:33:a5:68:b2:7b:c7:1c:56:26:08:ec:d2:
37:f7:75:1d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYtGHZhXv+BYCwEwDeHeX7wDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMDE5MDQwNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTIwMDUyNTk3NDhjNzk5Zjk2NmFkMTVmNGU2Y2ViZDM0NDJlNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNlAtOmQj7TJZOolIS3RioTdhswk
g4Akrmj9XOK5z3WzU2sF7nrIxlrdhtzqm5Er6XnSm8S4lpF4ubWS8omqQAbBc045
O7RMoRUoDQt+UTXDcLhrHzo88jWSxTPLwVw+J3OZrqRgK0YUhc6fyMjMgl5En7Nb
gWze/fLUOyOyr8vOfx636+I+vFjrxYDMeGx4vu8mCMwIUfF7+Wqm9Q4PWtBF1uVm
k/mVs9OSbcD657dZhF9b7zqOyh1q6SZ5Alh8H6n4/j6lR1e6lKd369fN7cji0Zem
zIHLVQmWhDUr+vbndL0J/f98b0vpDy+0Rc0dEDehzmc3/vsbN3Zwc8N57QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHEgBSWXSMeZ+WatFfTmzr00QuU9MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvY1NBRkpaZEl4NW41WnEwVjlPYk92VFJDNVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATVG2AwQA
VmsyAwQAVmtkAwQAWSODAwQAXrDXMA0GCSqGSIb3DQEBCwUAA4IBAQBaqx2MtZtj
q3NgXZCtITGkcRWECqg1g0MncsdyZkfNtb5oNX001NojcorxHDTEeEAIlx0+vs7W
6dzVnxNMXpIMdA/qumNQN3rA9MZPiwB3+eVIW4KyzQMv/tTKcyp6f4vnfyqkmMTs
xo6532V7kQZpDaQHDkZ9Xsm1wWB1J3aOTCcnLYyqw09uIDXR9Jw9anRnmJDhxRYp
2p1Gz7a3KAicbJWFri5hVDhavHaRoD2nvblLD29Bi7wYjnFIBszeLdBBHhjav/J8
Wrt9jIuVKRnYcD6BlGD2FoOmmc353BnnMsMbjwnUMPZq0AFR8j62yWwzpWiye8cc
ViYI7NI393Ud
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:29:26 2025 by rpki-client