Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/li4EpxfgnqAP1xgyDQqFrb5n_Ug.roa
File: li4EpxfgnqAP1xgyDQqFrb5n_Ug.roa (raw, json)
Hash identifier: gkSrqde5ad9l+ucoICbCCWjPfm48SZzEEx6DrRfus5U=
Subject key identifier: 96:2E:04:A7:17:E0:9E:A0:0F:D7:18:32:0D:0A:85:AD:BE:67:FD:48
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01845BA35F507DFED1A4CC9A9E62675468ED
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/li4EpxfgnqAP1xgyDQqFrb5n_Ug.roa
Signing time: Wed 09 Nov 2022 09:05:44 +0000
ROA not before: Wed 09 Nov 2022 09:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 77.73.132.0/24 maxlen: 24
77.73.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:a3:5f:50:7d:fe:d1:a4:cc:9a:9e:62:67:54:68:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Nov 9 09:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=962e04a717e09ea00fd718320d0a85adbe67fd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:80:ad:c7:56:71:d0:8a:5f:37:68:35:de:
c1:31:f6:6e:79:9c:21:04:74:1e:7b:ad:af:90:c3:
90:42:ac:f1:f8:73:0b:41:d9:8d:a8:05:70:e4:7d:
b4:b7:2d:b3:5a:16:7a:7a:22:0a:ae:70:95:76:8a:
2f:85:00:5a:a0:f6:b2:16:d8:b8:0e:a8:9a:20:2c:
a3:5a:48:4c:c6:0a:51:94:a1:f0:21:80:5a:52:8f:
54:6c:d5:ba:ac:5b:39:ee:38:de:6d:43:ab:bb:f5:
2d:53:3f:bf:b5:5f:59:4a:d0:2f:3e:9c:fb:61:c3:
2f:cc:1a:ff:55:58:d0:1b:5c:3d:ee:af:42:ff:2d:
c6:c6:96:84:1a:44:ce:bf:d2:30:14:f1:36:d5:27:
ec:38:a6:36:af:d1:bb:a4:a4:1f:c0:ff:ab:7d:01:
06:2b:77:a9:b3:a8:4d:d9:24:65:d9:af:ea:bd:36:
79:bb:60:c9:33:eb:82:34:e5:32:25:7c:61:32:92:
78:c7:cb:30:d7:eb:ce:2c:2f:61:06:20:44:1b:33:
58:da:23:1c:57:37:dc:30:81:88:35:e1:92:4f:02:
dd:ce:b8:42:98:85:29:bb:c7:50:e5:a0:2f:0c:6c:
26:d5:06:b7:28:05:75:aa:0c:31:16:de:02:8b:68:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2E:04:A7:17:E0:9E:A0:0F:D7:18:32:0D:0A:85:AD:BE:67:FD:48
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/li4EpxfgnqAP1xgyDQqFrb5n_Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.129.0/24
77.73.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:28:35:c3:24:7e:f5:98:e9:39:b8:38:83:c3:7d:2b:c6:0c:
33:a4:97:1f:16:c7:e2:ce:36:95:00:e3:41:15:3a:d4:a0:0e:
2e:50:96:bf:17:72:39:f4:f2:59:7a:03:56:00:98:4a:6a:b1:
a7:e9:bb:53:b0:c8:ad:ed:11:d6:84:d6:cd:cd:5d:53:b8:be:
40:d7:cf:54:0e:bb:f9:19:4e:6e:10:8f:4e:c3:1e:bf:12:f7:
43:2b:0e:af:0d:b5:9f:bd:cd:f0:9f:3a:8c:83:4d:bd:a7:66:
c0:e5:48:fc:b8:bc:21:70:b5:f3:03:e4:38:f9:b3:28:a7:0e:
79:a7:5b:b9:fa:cf:af:77:e6:27:8a:38:05:36:94:41:5a:fd:
4c:76:a2:a0:26:1b:a6:33:e5:11:fc:72:1a:c5:4f:e5:31:8f:
7d:fb:1f:21:d4:12:e1:1b:41:21:ec:0d:1b:05:31:4b:e5:0f:
fe:6e:fb:36:e3:b2:5d:3c:3d:b8:2b:01:79:78:62:d8:e0:34:
b9:0c:75:62:53:f5:27:e8:74:d5:2f:6f:a9:a8:f8:91:86:c4:
48:c7:94:45:3e:90:c2:67:e3:bf:bd:56:ca:00:20:20:e8:b0:
10:10:f6:18:c6:a8:46:70:4a:a6:af:3c:43:49:5a:6f:4a:e9:
67:8b:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:25 2025 by rpki-client