Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3eF7ApXYUge-9NkYoVtOawYfY4w.roa
File: 3eF7ApXYUge-9NkYoVtOawYfY4w.roa (raw, json)
Hash identifier: cFHlFW4XVLXlg2seZwOTYJbE4sZvoOlR3RnClKdvzY8=
Subject key identifier: DD:E1:7B:02:95:D8:52:07:BE:F4:D9:18:A1:5B:4E:6B:06:1F:63:8C
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018AFA632CB05CFE4FD7A53638329A0C32DD
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3eF7ApXYUge-9NkYoVtOawYfY4w.roa
Signing time: Wed 04 Oct 2023 11:11:57 +0000
ROA not before: Wed 04 Oct 2023 11:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34754
IP address blocks: 88.87.0.0/24 maxlen: 24
88.87.4.0/24 maxlen: 24
88.87.1.0/24 maxlen: 24
88.87.2.0/24 maxlen: 24
88.87.3.0/24 maxlen: 24
88.87.0.0/19 maxlen: 24
88.87.8.0/24 maxlen: 24
88.87.10.0/24 maxlen: 24
88.87.5.0/24 maxlen: 24
88.87.8.0/23 maxlen: 24
88.87.10.0/23 maxlen: 24
88.87.6.0/23 maxlen: 24
88.87.14.0/24 maxlen: 24
88.87.15.0/24 maxlen: 24
88.87.12.0/23 maxlen: 24
88.87.16.0/23 maxlen: 24
88.87.22.0/24 maxlen: 24
88.87.23.0/24 maxlen: 24
88.87.24.0/22 maxlen: 22
88.87.22.0/23 maxlen: 23
79.100.144.0/20 maxlen: 24
88.87.18.0/23 maxlen: 24
88.87.20.0/23 maxlen: 23
88.87.30.0/24 maxlen: 24
88.87.31.0/24 maxlen: 24
88.87.28.0/23 maxlen: 23
212.50.82.0/23 maxlen: 24
212.50.84.0/23 maxlen: 24
212.50.80.0/23 maxlen: 24
212.50.79.0/24 maxlen: 24
212.50.88.0/23 maxlen: 23
212.50.90.0/23 maxlen: 23
212.50.86.0/23 maxlen: 24
212.50.91.0/24 maxlen: 24
212.50.94.0/23 maxlen: 23
212.50.92.0/24 maxlen: 24
212.50.93.0/24 maxlen: 24
193.228.172.0/23 maxlen: 24
193.228.182.0/23 maxlen: 23
212.50.64.0/19 maxlen: 19
212.50.64.0/22 maxlen: 22
212.50.68.0/22 maxlen: 22
212.50.70.0/24 maxlen: 24
212.50.76.0/22 maxlen: 24
212.50.72.0/22 maxlen: 24
212.50.78.0/24 maxlen: 24
212.50.76.0/24 maxlen: 24
212.50.77.0/24 maxlen: 24
87.254.164.0/23 maxlen: 24
87.254.160.0/23 maxlen: 24
87.254.160.0/19 maxlen: 24
87.254.162.0/23 maxlen: 24
87.254.163.0/24 maxlen: 24
87.254.164.0/24 maxlen: 24
87.254.162.0/24 maxlen: 24
109.199.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:63:2c:b0:5c:fe:4f:d7:a5:36:38:32:9a:0c:32:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Oct 4 11:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dde17b0295d85207bef4d918a15b4e6b061f638c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:d2:5a:a2:aa:e3:dd:08:26:0b:b1:1d:71:
4f:ee:61:9e:14:c0:6b:f1:8c:b8:17:8d:ac:43:e2:
fb:64:ed:38:6c:99:3b:33:34:b2:4d:e8:00:d9:65:
f7:df:ce:93:ad:c5:a6:f4:14:a2:d6:ec:11:42:ca:
4c:84:02:dc:2a:dd:d8:d9:c6:00:df:aa:a7:37:65:
9b:aa:cc:cf:cd:52:d2:bb:99:89:31:0d:81:a1:21:
ce:6c:db:e2:92:d2:0a:51:1d:43:74:b2:26:47:d8:
54:2b:00:c5:b9:13:03:d9:23:60:d2:36:a4:53:41:
d8:62:b3:88:12:c6:0c:aa:6e:a6:09:4f:6d:24:fb:
01:34:6b:5e:51:3d:ad:fa:a8:cc:ab:f8:d6:81:74:
18:cf:b7:62:3e:6f:f7:9d:84:81:dc:a0:c2:bd:68:
b6:31:d3:17:f9:f5:68:f8:e6:1d:af:73:25:75:db:
56:24:48:28:fb:58:7a:67:71:74:38:bc:b5:87:dd:
c2:f7:03:23:d6:91:ed:5e:eb:89:b9:af:da:83:52:
16:9e:6b:c1:f8:46:96:49:c6:74:a9:fa:6c:9e:f0:
35:18:30:9a:10:68:29:af:b6:eb:0b:c6:7c:61:c6:
e7:9b:a6:c2:04:fb:ef:68:1c:4f:49:f1:6d:04:69:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:7B:02:95:D8:52:07:BE:F4:D9:18:A1:5B:4E:6B:06:1F:63:8C
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/3eF7ApXYUge-9NkYoVtOawYfY4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.100.144.0/20
87.254.160.0/19
88.87.0.0/19
109.199.128.0/19
193.228.172.0/23
193.228.182.0/23
212.50.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:64:b8:db:9b:9e:ad:91:d1:b2:53:d5:58:54:3f:f2:d7:49:
ec:46:65:a2:01:91:8b:6c:5e:cf:ee:61:12:08:3a:26:52:fd:
60:95:9e:5a:3f:42:72:fb:df:26:c8:56:8f:4b:9c:16:32:78:
83:cc:12:02:65:b4:e9:85:2e:2b:b1:48:4a:fe:b1:20:59:b7:
27:22:ff:90:73:0c:34:d0:21:f4:29:9e:84:b2:f4:04:38:36:
96:52:75:ee:89:87:4c:fb:56:10:89:6f:c5:4a:0f:40:b0:7c:
5f:b1:f2:2a:00:c1:cf:07:36:c7:85:d5:3e:d1:a9:98:0b:0b:
1b:87:af:fd:da:67:bd:bd:63:bc:84:63:53:bb:fe:d0:3c:c7:
84:d1:f9:a4:3f:ac:e7:19:86:48:ff:99:d9:c0:4b:9c:c9:7c:
6c:d6:25:7f:5f:d6:21:cb:23:65:f1:e5:9c:a9:54:79:3f:af:
20:75:14:50:af:3e:24:50:53:04:80:4b:53:ce:8a:1e:69:5b:
82:ef:90:ee:63:19:61:5a:b7:79:0d:a4:94:2e:f6:2a:53:9b:
5a:8d:10:71:58:ff:67:e2:dd:2e:f6:cd:da:25:1a:46:a3:31:
bb:29:23:a0:1d:4e:27:c8:9b:ed:6c:1f:01:08:de:bd:3c:ac:
09:3d:98:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:21 2025 by rpki-client