Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-Dcd9UMjyXjBIP2mozecHTiCUBI.roa
File: 1-Dcd9UMjyXjBIP2mozecHTiCUBI.roa (raw, json)
Hash identifier: +LGHZBoXiGAQMmhf6G6P5ewvtXNahAVIPhA6Xg/x6Ac=
Subject key identifier: F8:37:1D:F5:43:23:C9:78:C1:20:FD:A6:A3:37:9C:1D:38:82:50:12
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A99994B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-Dcd9UMjyXjBIP2mozecHTiCUBI.roa
Signing time: Sat 01 Jan 2022 04:52:21 +0000
ROA not before: Sat 01 Jan 2022 04:52:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209388
IP address blocks: 82.177.131.0/24 maxlen: 24
88.220.164.0/24 maxlen: 24
82.177.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983144779 (0x3a99994b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8371df54323c978c120fda6a3379c1d38825012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:8b:c1:9e:47:64:6a:9f:84:2b:74:40:08:
90:72:a8:1f:10:f5:53:d6:1c:ce:ad:d1:bd:31:95:
a1:ba:3b:db:35:0d:46:1d:9e:32:a8:4a:e1:1c:70:
2c:d1:09:c1:f8:13:fe:c5:e9:b2:f3:01:c4:6f:24:
95:df:34:ca:6a:bd:25:03:91:75:6b:a2:49:d8:69:
b1:72:41:bc:01:af:04:56:31:59:8e:31:a2:94:fd:
3f:e8:f1:f2:b3:09:6a:03:d6:dc:37:13:b3:76:b9:
22:54:95:62:a9:80:79:5a:d2:3a:3f:20:8a:24:0e:
00:b5:c1:a1:10:d6:c3:43:4b:f1:53:07:1c:8c:be:
40:e8:c3:89:07:8f:41:6d:67:44:09:27:d3:06:1f:
94:c1:f7:34:da:68:dd:ac:d8:1d:68:10:3b:bb:a5:
ae:88:fe:f9:c0:33:be:01:52:03:71:38:e6:0f:5e:
11:8e:bb:e6:ba:0d:70:1a:03:99:4b:23:81:85:3f:
68:6e:5c:84:99:13:e0:c9:e2:e7:c9:96:67:e6:6c:
32:b1:15:be:d4:db:91:d7:ab:13:0a:44:9d:e0:45:
5c:08:d2:37:c3:8f:fe:4f:1d:1b:07:73:27:35:97:
6d:81:e0:d8:37:1a:2d:bd:9b:20:59:44:dd:1e:0b:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:1D:F5:43:23:C9:78:C1:20:FD:A6:A3:37:9C:1D:38:82:50:12
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/1-Dcd9UMjyXjBIP2mozecHTiCUBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.101.0/24
82.177.131.0/24
88.220.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:67:02:29:98:62:d6:2f:f3:04:bd:f9:ec:7e:dc:c9:b5:f7:
af:bf:d5:97:f2:47:6a:fb:62:b2:20:3f:a0:61:d2:44:79:54:
11:3c:a3:ef:24:33:74:5d:d6:45:15:99:5f:26:5d:65:fd:d0:
ba:75:02:2a:3e:c4:81:01:ba:4c:47:97:bd:44:16:b1:d9:6b:
01:f9:e3:9f:c8:ba:4d:84:85:a4:91:c6:d6:e8:40:73:c6:4c:
98:70:23:49:a7:85:61:42:ff:fb:83:32:4b:dd:f5:86:42:e6:
0c:72:8a:fc:9c:c9:1b:e5:90:ed:c1:13:da:c8:e5:da:86:ca:
25:ae:46:bf:e8:4e:bf:41:a4:9d:27:0e:a3:20:10:cd:1a:8e:
e4:64:86:e6:3c:dd:e1:1d:ce:1d:0b:65:e6:16:aa:1b:3e:c5:
89:3c:52:35:09:1c:d8:66:97:d6:1c:49:c7:db:b2:52:b3:64:
67:e7:d0:46:a2:2a:f9:c1:41:68:d4:87:63:82:91:9a:33:61:
17:27:f9:31:c8:b6:11:7f:77:d5:a1:0b:e4:6b:2e:45:5e:1d:
83:2f:fa:37:7e:dc:36:06:b7:b1:72:64:28:92:44:ce:10:fb:
26:2d:88:55:cb:59:05:f1:34:23:67:8c:bd:a7:e9:a5:52:ae:
ce:99:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:19 2025 by rpki-client