Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/ie3jesXCCLTtt-cg5t8HGZ0yxNs.roa
File: ie3jesXCCLTtt-cg5t8HGZ0yxNs.roa (raw, json)
Hash identifier: kbZ6XYLeXeh9dP7/QrZwjKPqB27IwPitJxa74GdO53M=
Subject key identifier: 89:ED:E3:7A:C5:C2:08:B4:ED:B7:E7:20:E6:DF:07:19:9D:32:C4:DB
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 352A6AC5
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/ie3jesXCCLTtt-cg5t8HGZ0yxNs.roa
Signing time: Fri 11 Feb 2022 10:26:06 +0000
ROA not before: Fri 11 Feb 2022 10:26:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42697
IP address blocks: 109.200.64.0/20 maxlen: 20
185.29.78.0/23 maxlen: 23
185.29.77.0/24 maxlen: 24
77.243.48.0/20 maxlen: 20
2a03:dc80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891972293 (0x352a6ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Feb 11 10:26:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89ede37ac5c208b4edb7e720e6df07199d32c4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b1:e0:41:9d:b5:69:5d:fe:56:16:ae:5e:c1:
98:18:28:92:57:d7:d5:97:ec:35:51:57:da:b6:8f:
70:fb:07:d3:fc:99:97:75:92:32:32:1a:92:2b:26:
f4:e0:aa:4f:ab:d4:43:ad:37:6a:0d:01:c3:82:8f:
ec:eb:c5:17:98:c9:af:c1:f3:df:eb:bd:4e:15:e0:
ac:e2:cd:c2:c3:cf:16:80:3b:b2:47:a7:3a:9d:0c:
3c:f3:d3:f8:66:f4:30:be:41:ca:b9:0a:88:4f:7f:
6f:a0:cf:3e:19:24:16:4b:6f:d8:26:a9:2c:a6:da:
ea:69:07:d8:8f:4e:77:85:c3:f6:39:08:01:b6:0a:
cc:be:3c:f2:f5:01:46:7b:ef:b2:d3:b9:6b:b6:09:
61:15:11:82:f7:af:e0:91:11:c7:89:48:b3:10:8f:
58:b1:34:28:33:f1:6f:bb:a5:37:8e:69:aa:1b:32:
21:86:dd:cc:fa:15:11:e6:7e:d7:fb:dd:ca:9a:ec:
70:e5:e9:ca:fd:2b:4d:6c:d8:93:14:b4:42:9e:a8:
51:55:2d:e5:db:1b:5f:85:d2:c3:db:05:dc:8f:db:
3b:b8:51:73:2a:ae:81:35:46:31:b8:af:37:c8:f2:
0e:54:cf:b6:15:57:20:60:bd:53:21:08:d3:a2:2c:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:ED:E3:7A:C5:C2:08:B4:ED:B7:E7:20:E6:DF:07:19:9D:32:C4:DB
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/ie3jesXCCLTtt-cg5t8HGZ0yxNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.48.0/20
109.200.64.0/20
185.29.77.0-185.29.79.255
IPv6:
2a03:dc80::/32
Signature Algorithm: sha256WithRSAEncryption
38:f4:f1:74:b6:6a:c3:8f:55:46:ef:58:14:f9:af:39:eb:f5:
ee:b4:61:c6:44:b1:b4:dc:e4:03:d0:06:44:9d:0f:8a:a0:59:
f7:ad:94:a8:86:a9:28:e2:90:d1:27:be:07:59:d2:3a:57:19:
97:fb:ca:7b:4f:e5:2a:52:86:42:73:98:ec:63:e0:95:e3:06:
e4:0a:8d:e5:5b:41:91:e6:48:5b:45:b8:5c:07:67:2d:9a:e8:
85:38:c0:3c:5c:54:9e:d2:cf:39:f5:ed:8e:d6:a9:6f:17:37:
2e:f7:af:89:86:47:e1:2e:4a:a2:d5:4f:b0:0c:cb:18:26:bc:
70:f5:87:18:d6:52:0a:02:5b:5a:b6:d6:be:f1:18:21:5a:1a:
f3:f4:d1:48:3e:ed:01:8d:c8:24:c3:27:f2:ba:37:c2:04:9d:
36:e9:a0:38:a0:41:1b:42:d6:46:e7:10:03:16:d1:c2:d7:4b:
67:c2:ce:c3:bf:4f:a0:a0:7b:5d:f6:26:fe:48:7f:3d:bc:c0:
1e:60:09:ff:18:ef:25:cd:ac:0b:2f:f3:08:00:cb:6d:a1:1f:
01:74:6d:7d:c8:7f:f6:c4:c4:3e:6d:54:58:e9:19:cc:ec:48:
ed:35:60:36:68:3a:fc:6d:cc:64:91:6c:da:33:f1:81:0f:b3:
1e:ef:9e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:14:51 2025 by rpki-client