Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/SCeffh72mGVjZgU__QEdIzGY26s.roa
File: SCeffh72mGVjZgU__QEdIzGY26s.roa (raw, json)
Hash identifier: WyqKiQH96q5pq1Ki7Va0MFhuAQ/muFP7g/yhpLyzhDg=
Subject key identifier: 48:27:9F:7E:1E:F6:98:65:63:66:05:3F:FD:01:1D:23:31:98:DB:AB
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 01856ED4E697B2139FF51995A2F9B7B79000
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/SCeffh72mGVjZgU__QEdIzGY26s.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 185.165.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e6:97:b2:13:9f:f5:19:95:a2:f9:b7:b7:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48279f7e1ef698656366053ffd011d233198dbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:85:61:8b:26:73:e8:63:bc:29:84:10:e4:
32:56:4e:47:60:1e:c9:0f:ff:f6:50:e9:06:5d:98:
92:ac:f0:4f:28:b4:60:42:11:8d:39:d0:9f:25:b8:
6e:9d:3b:4a:97:af:79:2e:f5:b3:83:7e:ba:ed:dc:
ca:ce:d6:61:30:cb:9a:a4:68:c1:7c:cf:4c:fb:f6:
db:41:5c:c2:55:ba:41:18:d2:08:f2:ff:8c:be:d9:
7a:cd:8b:7d:68:fe:0a:c3:31:42:de:64:e4:11:ee:
6d:8d:ee:74:a9:bc:ad:00:07:d9:55:d7:6a:02:91:
4b:d2:45:9e:79:78:cc:15:00:f8:07:d6:07:e1:8c:
f3:6a:90:39:26:8f:8c:98:9d:48:81:14:5c:d2:9b:
66:21:cf:2c:2d:82:4c:a0:e8:e0:39:39:2d:f5:21:
a2:66:7d:d0:f2:89:fd:7e:81:98:61:23:67:94:cb:
ef:68:cd:7b:75:51:31:2b:25:29:ab:65:a8:e7:8d:
2b:44:be:47:e8:81:dc:04:20:69:c5:4c:2c:53:29:
7e:49:cd:d8:32:2b:13:91:bb:7e:77:17:d1:74:5f:
a5:26:70:f0:f9:68:1c:2e:78:a8:8d:14:93:34:e3:
b5:f5:78:e2:39:24:79:d8:89:b6:0c:69:b2:51:47:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:9F:7E:1E:F6:98:65:63:66:05:3F:FD:01:1D:23:31:98:DB:AB
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/SCeffh72mGVjZgU__QEdIzGY26s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.77.0/24
Signature Algorithm: sha256WithRSAEncryption
80:14:cd:da:45:a6:af:52:e3:10:ac:03:c2:2b:95:d1:66:10:
83:1e:26:a6:e5:30:1d:ca:77:cf:84:a5:69:6f:94:ff:e5:5d:
da:b5:91:6b:8f:4c:16:41:f6:b1:aa:d1:42:e6:b1:ad:3c:81:
aa:04:ba:35:c5:3b:38:f2:3a:94:d5:32:37:68:4c:4c:ff:e4:
0e:2d:07:9a:23:80:ff:e5:e3:8a:3f:b2:9a:f7:bf:c4:81:fc:
3f:4f:55:06:2c:46:04:f3:0f:f6:53:ea:01:77:ab:8a:ce:61:
5d:f4:ac:af:60:50:19:40:20:03:e1:0b:bc:e7:b0:30:d0:0f:
2b:f0:5e:f1:15:0d:3b:fa:ae:3e:9a:c3:84:73:5f:78:04:c7:
7a:50:c6:04:30:d9:33:07:64:a0:5e:fa:1c:75:6d:56:cb:1b:
ea:f9:5a:f8:8d:b7:9b:80:57:74:a5:3a:d1:3b:83:1b:af:6a:
a8:65:8f:03:c3:1f:c6:a5:f3:31:32:55:61:cc:98:70:88:66:
e5:87:b6:4f:a1:c9:f8:a6:39:8a:a4:c3:17:22:af:44:fa:7d:
03:79:33:39:91:be:1f:dc:70:fb:54:31:bc:4d:86:13:5b:4d:
8d:73:bb:ac:45:36:00:62:e2:2e:07:7a:ef:6d:f6:a9:73:94:
23:6d:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:59:02 2025 by rpki-client