Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/oQ7qi2a56sSMMiCoPH7V8d-eGSs.roa
File: oQ7qi2a56sSMMiCoPH7V8d-eGSs.roa (raw, json)
Hash identifier: CFCMJcCUWQFFHS1XtakCElwXtoNGrTinxr5ZRWU9IYY=
Subject key identifier: A1:0E:EA:8B:66:B9:EA:C4:8C:32:20:A8:3C:7E:D5:F1:DF:9E:19:2B
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0185725594F51A76E8976B85CED8419141CF
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/oQ7qi2a56sSMMiCoPH7V8d-eGSs.roa
Signing time: Mon 02 Jan 2023 11:54:49 +0000
ROA not before: Mon 02 Jan 2023 11:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42697
IP address blocks: 185.29.78.0/23 maxlen: 23
109.200.64.0/20 maxlen: 20
185.29.77.0/24 maxlen: 24
77.243.48.0/20 maxlen: 20
2a03:dc86::/32 maxlen: 32
2a03:dc84::/32 maxlen: 32
2a03:dc80::/32 maxlen: 32
2a03:dc82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:94:f5:1a:76:e8:97:6b:85:ce:d8:41:91:41:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Jan 2 11:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a10eea8b66b9eac48c3220a83c7ed5f1df9e192b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:a8:7a:42:07:fe:fa:13:2e:19:19:95:78:
4c:8b:03:25:8a:c6:63:95:9c:d8:65:64:b7:dc:e1:
58:5d:65:96:b2:dc:b2:29:04:ba:08:06:ca:69:f6:
0f:63:d8:09:d7:5d:ec:06:c3:0e:d9:a1:10:f3:5c:
0e:dc:11:34:02:82:3f:7e:18:62:a1:b1:bf:16:a6:
ff:01:74:e4:6d:7d:4d:c4:14:43:a8:a4:a6:0d:a9:
62:e2:57:ae:25:a6:99:e6:4f:92:9a:e2:bf:e0:0b:
a8:10:45:f6:49:1d:ab:6e:24:3e:8b:6a:fb:28:ea:
b8:1d:56:95:b5:73:f4:21:e3:69:6e:ed:a7:c3:40:
4e:38:3a:b3:4d:9e:21:76:69:58:67:8f:30:be:3a:
c7:2a:c8:24:bc:22:33:9c:69:b7:88:ce:49:c1:b4:
98:2c:fe:46:79:0f:91:21:6c:61:67:47:fa:85:fb:
35:fa:14:da:ba:4a:2b:da:03:af:51:0b:eb:64:e7:
2f:35:17:49:4f:2d:9b:db:50:1a:c8:8b:40:49:9b:
fe:b9:d1:dc:ab:7a:e8:10:50:1b:8e:de:06:36:64:
e2:3e:f4:ad:81:73:3b:99:a7:2f:fd:e9:22:f7:b4:
32:15:a8:c2:8c:fa:6c:7d:59:a2:22:d9:b8:36:2e:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0E:EA:8B:66:B9:EA:C4:8C:32:20:A8:3C:7E:D5:F1:DF:9E:19:2B
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/oQ7qi2a56sSMMiCoPH7V8d-eGSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.48.0/20
109.200.64.0/20
185.29.77.0-185.29.79.255
IPv6:
2a03:dc80::/32
2a03:dc82::/32
2a03:dc84::/32
2a03:dc86::/32
Signature Algorithm: sha256WithRSAEncryption
49:a0:33:e3:0a:20:e7:12:70:e8:a5:e9:a2:b0:64:d4:ef:99:
dc:43:26:7c:b2:3b:0a:2a:6f:8f:40:01:23:ff:90:fb:0f:3e:
40:45:5c:8a:19:6c:8a:9b:e9:ab:d9:b5:d3:7f:ef:54:84:e9:
cd:fd:45:85:98:0a:23:6e:01:e6:28:ec:03:7c:e9:96:56:b9:
af:b1:ac:9d:e6:3e:85:68:85:04:ae:6e:d8:cf:1d:89:02:94:
bf:fc:5c:8c:84:22:22:b9:2d:2d:ba:0f:34:44:a4:52:ed:2c:
42:96:2f:f1:d3:4e:3b:27:e1:70:5e:bf:7c:9c:a5:17:c8:5d:
f1:bd:81:69:23:b3:99:ac:ff:3b:e6:f3:bf:e6:69:0f:b1:3f:
5a:b3:8b:e2:d9:5a:33:15:37:fb:0c:1e:c4:0f:34:26:82:ad:
35:61:58:99:a4:e8:51:32:3e:99:ba:5e:86:fd:40:98:65:ea:
c3:95:86:3a:cb:d1:ac:20:6d:41:b7:da:56:bc:1d:84:e3:f3:
28:96:de:9b:7d:37:64:ea:8c:8c:8c:0f:e5:db:7f:9b:98:b0:
a4:c0:c3:e9:e7:6d:19:e3:42:dc:f0:50:a4:87:ff:08:6e:49:
68:06:94:e4:ed:6b:13:53:11:a6:00:da:96:92:cf:c2:71:01:
c0:f8:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:14:24 2025 by rpki-client