Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/bU7-qbqGC1dH8Uoo-YHsl-ERj1E.roa
File: bU7-qbqGC1dH8Uoo-YHsl-ERj1E.roa (raw, json)
Hash identifier: nryVRk+4W5vG/zdjCniDCpzelUBfhKXNXUIEkCksSYQ=
Subject key identifier: 6D:4E:FE:A9:BA:86:0B:57:47:F1:4A:28:F9:81:EC:97:E1:11:8F:51
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0189F8B9B87F89C1BE512FDAB41B5725C542
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/bU7-qbqGC1dH8Uoo-YHsl-ERj1E.roa
Signing time: Tue 15 Aug 2023 10:24:28 +0000
ROA not before: Tue 15 Aug 2023 10:24:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42697
IP address blocks: 109.200.64.0/20 maxlen: 20
185.29.78.0/23 maxlen: 23
185.29.77.0/24 maxlen: 24
77.243.48.0/20 maxlen: 20
2a03:dc86::/32 maxlen: 32
2a03:dc80::/29 maxlen: 32
2a03:dc84::/32 maxlen: 32
2a03:dc82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:b9:b8:7f:89:c1:be:51:2f:da:b4:1b:57:25:c5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Aug 15 10:24:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d4efea9ba860b5747f14a28f981ec97e1118f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:94:22:79:e6:cd:9b:37:68:44:cc:41:f4:2a:
30:50:8c:db:87:1f:7d:93:47:64:1d:19:af:64:2b:
83:9a:c9:94:bb:65:76:4a:04:e2:c6:7d:64:47:17:
a3:fb:44:05:7a:42:3f:2f:6b:5d:4a:62:c1:04:b9:
bc:64:5e:62:b7:70:41:50:12:ec:e4:00:3f:e4:4f:
78:2a:51:8f:0b:65:79:ea:92:bb:d5:a8:53:d2:e5:
58:4f:02:b2:ac:9e:95:2d:70:2f:74:5f:06:23:2c:
1b:8a:9d:4d:64:84:03:3f:d4:c9:61:37:7a:69:ce:
c4:27:32:8c:d3:55:4c:ab:bd:64:ff:10:d0:aa:49:
5b:84:fc:9e:fd:d7:6c:e0:0f:f6:ed:32:0c:ce:bc:
99:ff:64:e6:8f:e8:25:24:85:09:6e:09:c0:62:9a:
8e:58:ea:b2:a6:6a:82:64:29:d9:fc:ba:c5:24:27:
ef:26:01:c2:5f:8e:90:8a:b6:ca:be:a3:43:5e:b9:
4c:d9:93:b3:9f:69:76:2f:f8:81:2e:9f:e7:35:13:
1e:f9:e6:cd:50:c3:ad:90:74:dd:e6:a9:ff:9d:20:
19:f5:00:9e:92:8b:2a:97:5c:4a:3e:a1:9b:56:dd:
fc:36:87:88:59:4f:d7:a6:2a:e1:34:8b:f3:32:2e:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4E:FE:A9:BA:86:0B:57:47:F1:4A:28:F9:81:EC:97:E1:11:8F:51
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/bU7-qbqGC1dH8Uoo-YHsl-ERj1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.48.0/20
109.200.64.0/20
185.29.77.0-185.29.79.255
IPv6:
2a03:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
10:f2:06:1c:9d:ec:85:a8:ec:a3:1e:88:8f:05:90:f9:e1:ef:
1d:a4:84:51:d3:3d:1b:5f:f5:ae:65:74:89:ec:ee:79:3a:08:
f1:80:d1:fb:02:aa:5c:91:24:43:10:18:ee:cb:5e:fc:bc:68:
32:e3:f3:4d:e7:99:c1:7a:fc:e0:e4:78:16:aa:56:76:af:82:
6f:ed:e3:39:1e:0a:17:d3:b8:1d:74:36:0b:42:82:4f:0e:b3:
62:4a:81:e6:e4:b4:05:d9:cf:f2:8f:ce:7c:a5:ff:a1:55:3c:
fd:62:da:65:d6:51:b4:db:15:c8:7e:12:ce:5e:41:9e:23:cf:
24:12:2c:2d:b0:c6:94:f3:4c:7d:7e:9e:88:79:81:72:18:15:
cc:88:b9:2f:42:d4:eb:86:9a:4d:09:71:88:ee:e2:28:d4:ce:
51:0b:ae:e6:10:4e:b6:5d:11:2a:dc:1e:c5:55:a9:0f:f6:52:
d2:47:ad:8c:fe:c2:3d:d9:cc:63:fc:92:8f:3f:6b:93:9d:36:
19:e2:24:50:85:6c:e0:00:7f:a1:a7:4a:4b:a9:32:89:85:5d:
25:8f:7a:c9:d2:19:f3:d9:d0:24:2d:32:4f:5b:68:24:c1:ee:
52:36:8b:58:9c:ea:fd:8f:f0:64:42:10:1e:3e:50:95:34:d5:
b4:80:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:37:23 2025 by rpki-client