Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/aV7nhlm2w7lSNbiZJaa-csudZIc.roa
File: aV7nhlm2w7lSNbiZJaa-csudZIc.roa (raw, json)
Hash identifier: 8bk5qQOnDew9nTplkYKDwkaOYUDGDVB/wlqIbHpC+tk=
Subject key identifier: 69:5E:E7:86:59:B6:C3:B9:52:35:B8:99:25:A6:BE:72:CB:9D:64:87
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 0A8AD591
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/aV7nhlm2w7lSNbiZJaa-csudZIc.roa
Signing time: Sat 01 Jan 2022 02:01:28 +0000
ROA not before: Sat 01 Jan 2022 02:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200801
IP address blocks: 77.72.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176870801 (0xa8ad591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 02:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=695ee78659b6c3b95235b89925a6be72cb9d6487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:19:cc:22:06:f2:d2:6a:10:0a:8e:9e:bb:
3f:1c:49:fa:10:4e:2c:8e:2d:7c:31:44:90:2d:36:
b5:1e:f3:06:3b:ba:0d:d9:82:67:ae:c2:77:33:59:
15:9a:78:00:f1:22:6b:df:04:13:6f:36:89:d2:73:
7c:61:33:88:d6:a8:1c:88:37:41:50:5a:5d:74:9b:
a6:dd:c0:7a:74:61:51:aa:48:0e:b9:d4:32:c6:27:
24:14:04:ce:40:d3:ba:87:1c:29:82:bd:f1:77:08:
7e:03:d7:ea:8a:ca:65:23:f1:60:e7:6a:4e:58:d4:
a0:28:7b:ea:46:5c:79:d2:8a:8d:63:c4:36:15:61:
bc:ab:5b:40:db:7c:73:a3:2d:b3:92:56:2a:20:7f:
ba:c0:6e:00:cc:06:0e:e0:03:3b:44:c8:4e:68:a6:
92:29:84:83:d6:7c:16:fb:2d:bf:00:fa:fb:78:1e:
f7:aa:36:a7:33:28:d2:57:f7:a1:95:5f:fe:6b:5f:
14:95:5a:2f:e0:8e:d2:26:61:44:63:ef:f2:32:a3:
18:71:aa:a0:b0:bb:20:e5:31:ed:27:1f:df:ee:c3:
57:88:f9:85:f6:be:6c:77:6b:ee:ec:e3:7a:3c:de:
2a:6f:d2:1e:7d:72:85:8d:70:ac:5c:c7:4b:ee:d0:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5E:E7:86:59:B6:C3:B9:52:35:B8:99:25:A6:BE:72:CB:9D:64:87
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/aV7nhlm2w7lSNbiZJaa-csudZIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:22:26:eb:ae:aa:43:33:d0:f3:09:00:d3:5e:eb:7a:3f:e0:
ba:83:10:81:09:08:50:3d:d9:0e:4a:dd:b1:01:fb:c8:41:c1:
2e:cb:1c:02:f8:2d:b8:15:3b:8a:b7:98:a4:9b:56:57:fe:6e:
dc:a5:79:db:9e:08:d2:fa:21:d6:c3:db:92:44:1f:bc:1b:a7:
b0:0c:e0:c5:6e:1d:b6:5b:ee:ff:20:7f:f7:c7:ac:ae:0b:bf:
70:c2:b7:a6:02:c3:cb:b2:38:d7:cf:4a:47:2d:ac:56:70:43:
92:e6:e7:0b:c6:bb:15:bd:d4:d8:78:da:00:ed:33:23:12:1f:
ec:5b:29:39:5b:6f:13:1c:92:38:56:2d:ac:e3:71:9a:90:1c:
d1:1b:0a:46:c5:f2:f6:df:85:89:22:ea:ec:e8:c4:64:6a:1f:
cb:3b:f5:14:98:9a:51:4d:31:a7:9a:aa:70:b9:4c:b7:49:3d:
d7:33:61:87:1a:37:b5:6d:f1:c4:3b:a9:3c:0f:5e:bf:31:3f:
3c:8e:a3:bd:18:b0:62:10:33:8f:e6:cd:6b:9a:dc:e4:24:73:
a8:64:69:3d:57:f5:6c:52:7c:5c:94:c9:65:f3:a4:db:52:54:
f9:62:2a:4a:5f:1d:1c:6c:de:8b:46:69:da:a8:a7:68:e6:38:
67:d2:d8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:03:00 2025 by rpki-client