Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/R7t5NTP08_KOS-oGxnOBh1dfEhk.roa
File: R7t5NTP08_KOS-oGxnOBh1dfEhk.roa (raw, json)
Hash identifier: Gd525ge31fnj/8gKDvuH66wc9GeZ2moldIZHjys2xHw=
Subject key identifier: 47:BB:79:35:33:F4:F3:F2:8E:4B:EA:06:C6:73:81:87:57:5F:12:19
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 0183B1DE929F5D6B3E0C1A93C5900480D62D
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/R7t5NTP08_KOS-oGxnOBh1dfEhk.roa
Signing time: Fri 07 Oct 2022 09:54:57 +0000
ROA not before: Fri 07 Oct 2022 09:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199738
IP address blocks: 89.37.76.0/24 maxlen: 24
89.37.76.0/22 maxlen: 22
89.37.77.0/24 maxlen: 24
89.37.78.0/24 maxlen: 24
89.37.79.0/24 maxlen: 24
86.106.64.0/22 maxlen: 22
86.106.68.0/24 maxlen: 24
86.106.68.0/23 maxlen: 23
86.106.69.0/24 maxlen: 24
86.106.70.0/23 maxlen: 23
86.106.4.0/22 maxlen: 22
86.106.4.0/24 maxlen: 24
86.106.6.0/24 maxlen: 24
86.106.5.0/24 maxlen: 24
86.106.7.0/24 maxlen: 24
89.32.112.0/24 maxlen: 24
89.32.116.0/23 maxlen: 23
89.32.116.0/24 maxlen: 24
89.32.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:de:92:9f:5d:6b:3e:0c:1a:93:c5:90:04:80:d6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Oct 7 09:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47bb793533f4f3f28e4bea06c6738187575f1219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:30:88:9f:5e:86:ce:6b:61:c3:35:89:9b:
c4:97:0b:c5:d2:2c:c1:50:2a:66:da:27:08:25:3c:
71:da:da:7c:a3:d2:4f:66:a8:eb:be:c3:2e:aa:21:
46:d7:86:84:7a:40:df:18:3b:67:37:01:14:89:84:
a8:52:d4:d9:d0:78:b9:74:8d:b2:08:21:f7:31:23:
98:36:51:75:5f:fd:81:86:4c:cb:b5:ad:27:52:f6:
ea:97:5b:d5:2c:b0:ec:8f:8a:89:ae:bb:6b:9b:01:
76:a5:21:01:57:f0:bb:0e:6c:90:5e:0b:4d:6d:41:
ab:f1:ae:2c:10:30:8a:42:d0:1e:90:3b:66:6a:ab:
54:14:46:70:22:d5:a2:88:ab:d9:e6:69:1c:5d:aa:
63:da:17:e6:7b:80:61:8b:cd:f8:dd:3a:37:5b:b7:
76:5a:79:e2:17:e2:b1:72:59:31:83:29:7c:3d:35:
c2:05:99:34:c5:f8:84:15:3f:7f:ce:fd:11:f3:05:
f5:2a:89:57:36:f1:cb:44:02:7b:f7:5b:75:59:9b:
0b:1d:7f:25:be:3e:23:a2:5c:30:99:68:b2:ca:7a:
37:ae:a7:81:0a:80:cd:7b:9f:4e:a8:a1:a1:da:26:
fb:8d:53:73:a4:53:97:ec:76:70:64:2a:15:9c:02:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:79:35:33:F4:F3:F2:8E:4B:EA:06:C6:73:81:87:57:5F:12:19
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/R7t5NTP08_KOS-oGxnOBh1dfEhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.4.0/22
86.106.64.0/21
89.32.112.0/24
89.32.116.0/23
89.37.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:81:d9:2c:f6:cd:15:8a:c3:60:ef:b2:3a:50:85:69:e3:8b:
1b:33:d2:ea:f7:dd:f0:6c:40:50:40:89:be:7f:4d:53:fa:98:
1c:26:60:6c:84:8e:55:1e:79:64:8f:b3:df:94:9f:d9:37:e9:
25:4f:ce:21:0b:ef:1e:3b:b8:74:cb:1a:65:e1:1d:0e:a8:4e:
68:14:4c:fc:f6:6b:d9:e1:65:b2:72:0f:04:22:3c:00:e0:9b:
b9:c5:41:78:aa:d5:83:9d:14:10:cf:9f:26:62:78:22:5f:2f:
7e:00:2f:53:c8:81:a1:36:9c:ce:19:4e:f6:86:fd:d7:56:fa:
3e:33:b3:8d:fe:96:18:61:cd:cf:b1:0f:e6:ae:e8:1f:cd:fd:
0b:47:75:6e:86:a0:80:ae:a8:7a:2f:17:c7:84:5a:b2:f2:70:
a4:a4:88:02:a4:13:7d:4c:35:5d:a4:ae:ad:32:b9:cb:ec:71:
74:6e:4c:2a:01:ac:98:52:27:7f:56:cf:06:eb:45:c5:e7:89:
25:fd:41:9b:4a:f3:86:82:0b:da:b3:52:96:38:7d:2a:fc:73:
93:98:3a:6a:4b:93:78:a9:fc:ee:40:7f:66:b5:62:72:75:84:
cd:b0:c5:65:db:4c:8f:d7:1b:eb:b7:ac:38:67:e2:5e:3f:52:
d7:66:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:37 2025 by rpki-client