Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mZSWFIPBQcj0nGh-X5B4usUV0SI.roa
File: mZSWFIPBQcj0nGh-X5B4usUV0SI.roa (raw, json)
Hash identifier: aOluWjYHWW2vXAVAX1pjuBCgliYA9HhkDspogeuBCgk=
Subject key identifier: 99:94:96:14:83:C1:41:C8:F4:9C:68:7E:5F:90:78:BA:C5:15:D1:22
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018A83C881D3F60DEFD59EC493A354C1D77B
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mZSWFIPBQcj0nGh-X5B4usUV0SI.roa
Signing time: Mon 11 Sep 2023 10:27:50 +0000
ROA not before: Mon 11 Sep 2023 10:27:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8795
IP address blocks: 77.85.175.0/24 maxlen: 24
77.85.196.0/24 maxlen: 24
212.5.130.0/24 maxlen: 24
212.5.133.0/24 maxlen: 24
212.5.145.0/24 maxlen: 24
95.43.230.0/24 maxlen: 24
213.16.35.0/24 maxlen: 24
2a01:5a8:7::/56 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:c8:81:d3:f6:0d:ef:d5:9e:c4:93:a3:54:c1:d7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Sep 11 10:27:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9994961483c141c8f49c687e5f9078bac515d122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:82:39:63:98:c5:46:82:21:cc:cf:ac:50:5a:
c5:88:f3:78:13:dd:d9:af:89:0b:86:50:32:bc:d4:
43:fe:92:b4:52:02:21:31:73:bb:17:55:cf:b5:f6:
7c:d9:ed:15:4e:0d:61:3e:f0:aa:ab:af:5c:0f:c4:
02:36:f2:9f:13:65:76:af:e9:51:a5:79:3e:41:f8:
4c:97:62:5b:92:f1:f0:14:98:1e:10:cc:4a:44:fe:
b3:4a:a3:f0:31:4c:f7:dd:b8:24:4f:5a:d3:b1:8a:
bc:60:5d:76:c9:ca:fc:a7:19:16:09:f3:10:68:94:
e7:42:cc:b2:27:60:75:53:93:01:c9:9f:d1:b3:52:
e3:0c:c8:a0:06:11:de:cc:d4:b7:6f:51:49:74:f8:
36:bd:54:c4:25:41:81:e3:f7:f2:a3:c7:21:c0:19:
6d:d3:00:e0:3f:f5:0e:2c:21:1e:3f:1a:87:a0:ab:
76:88:2b:6a:a0:43:22:67:97:53:11:33:f5:2b:b1:
b6:78:29:38:06:69:61:d7:11:a5:81:06:5a:d0:32:
60:8a:8e:f0:9e:7a:c1:fa:3f:14:8c:4d:f0:3c:e7:
7f:c2:40:c4:48:c6:bc:8b:38:6d:c6:e5:3a:98:96:
dc:d1:2a:58:74:e4:f8:fa:99:71:17:61:47:1e:07:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:94:96:14:83:C1:41:C8:F4:9C:68:7E:5F:90:78:BA:C5:15:D1:22
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mZSWFIPBQcj0nGh-X5B4usUV0SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.175.0/24
77.85.196.0/24
95.43.230.0/24
212.5.130.0/24
212.5.133.0/24
212.5.145.0/24
213.16.35.0/24
IPv6:
2a01:5a8:7::/56
Signature Algorithm: sha256WithRSAEncryption
70:a2:d4:93:5c:25:79:67:a4:14:e1:a3:f3:9a:47:26:01:69:
37:e6:7c:9c:71:52:ec:cd:c9:58:b6:4b:84:ce:77:48:05:45:
48:dd:8d:a2:bd:8d:31:45:55:c3:fd:cc:2e:af:90:c6:75:72:
fd:cd:7c:1f:4a:55:1a:44:7e:ac:f1:18:4f:39:70:99:3d:f6:
c2:fe:68:20:23:44:8a:f6:6d:55:54:9e:22:5e:cf:f8:4b:62:
81:36:a7:0c:89:f5:67:d2:4a:8f:29:9b:b3:24:eb:04:64:67:
c5:22:90:ba:fa:b3:3c:31:a1:8a:b5:50:c1:67:ce:a9:1a:57:
a5:39:cf:9d:16:c7:a1:1f:2a:66:8e:35:09:d5:58:b1:f8:75:
93:1b:34:15:b5:2d:06:62:78:3a:f4:81:44:d7:f2:6b:f5:a1:
d7:69:27:4d:83:e4:72:66:f2:1e:84:cc:3e:a9:72:67:94:e1:
58:09:81:ca:e0:45:86:53:ab:3a:ad:ab:b3:54:0f:87:1c:fd:
d3:c5:c9:2a:d6:72:df:c5:bf:23:a4:fd:62:cb:8b:4c:ad:27:
ed:57:d0:ac:d7:73:86:21:d1:6f:b7:9d:2a:3b:71:54:b6:ac:
fe:c0:f6:25:01:24:1b:c1:59:44:53:1d:75:97:6c:94:4d:7c:
f9:f3:ef:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:25 2025 by rpki-client