Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/T4SfZNlKToosHXtWFoui9jhHdio.roa
File: T4SfZNlKToosHXtWFoui9jhHdio.roa (raw, json)
Hash identifier: ZhA3pwXXc3L6dwrwGAYQSi0agxlw8zNjWdkscQgpbfg=
Subject key identifier: 4F:84:9F:64:D9:4A:4E:8A:2C:1D:7B:56:16:8B:A2:F6:38:47:76:2A
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 2B2926
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/T4SfZNlKToosHXtWFoui9jhHdio.roa
Signing time: Thu 30 Jun 2022 10:40:02 +0000
ROA not before: Thu 30 Jun 2022 10:40:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50889
IP address blocks: 185.136.71.0/24 maxlen: 24
185.136.69.0/24 maxlen: 24
77.111.250.0/24 maxlen: 24
77.111.248.0/24 maxlen: 24
77.111.249.0/24 maxlen: 24
80.84.161.0/24 maxlen: 24
80.84.162.0/24 maxlen: 24
80.84.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2828582 (0x2b2926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Jun 30 10:40:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f849f64d94a4e8a2c1d7b56168ba2f63847762a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:38:f1:c5:9e:91:80:54:ac:f0:06:19:d7:
e0:7a:5c:fc:99:40:d3:48:3f:35:72:6e:2e:46:8f:
ab:52:af:95:d0:dc:14:29:d0:76:82:96:f7:83:87:
91:67:f3:0f:8b:d4:f3:93:11:be:76:da:0a:92:e9:
4d:4f:72:62:df:8f:47:1a:be:51:26:15:3f:28:66:
d4:89:01:1d:29:41:b8:a6:21:1e:6c:12:6a:4a:b4:
2b:61:49:e3:bf:e1:72:1f:7a:62:1b:f8:9f:43:04:
de:e4:8d:36:18:0b:7c:81:9b:41:c8:e3:3d:08:df:
a7:57:f1:82:0d:ed:74:9d:e2:e5:34:a6:a0:97:bb:
ed:61:28:43:8b:26:8e:24:f2:dc:82:74:99:c1:9c:
fa:f5:de:c5:24:77:b5:f9:a4:d9:3b:11:2c:25:80:
7d:9f:cf:19:6c:34:4b:10:75:43:87:a6:cc:7c:c6:
8e:a1:74:9b:8d:35:46:e9:0a:5d:c1:f4:3e:28:1a:
79:d4:8a:fc:6f:9c:90:8b:fb:7a:dc:31:dc:9a:a9:
33:36:9d:0b:1a:fa:b1:32:48:24:06:36:7a:f3:cd:
35:5d:70:8c:dd:91:ee:ff:71:52:93:d2:e0:a6:e9:
0a:99:2e:00:67:a0:84:0a:0b:6b:27:0b:24:f9:20:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:9F:64:D9:4A:4E:8A:2C:1D:7B:56:16:8B:A2:F6:38:47:76:2A
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/T4SfZNlKToosHXtWFoui9jhHdio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.248.0-77.111.250.255
80.84.161.0-80.84.162.255
80.84.167.0/24
185.136.69.0/24
185.136.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:59:9e:b2:90:d4:71:98:5c:1e:2b:b4:99:e1:60:39:b7:04:
6a:27:ce:db:21:eb:aa:ef:6d:a9:1d:c5:6e:cd:ee:8d:7b:c3:
27:87:bf:8a:83:94:de:c9:6d:d9:6c:c2:b6:42:bb:bb:09:9b:
eb:14:61:db:ed:e8:5a:f2:04:d0:23:d4:f5:93:cf:d8:78:5b:
00:14:0a:7b:af:33:a2:5f:0f:41:79:ac:bf:49:c6:cf:6b:ed:
f9:8a:0c:37:3f:ef:50:76:bd:03:db:5f:24:86:8c:6b:b2:83:
e5:a4:2d:3e:41:e0:3a:48:86:ab:63:8f:8e:ec:99:1c:98:fe:
e2:85:39:5a:04:50:fb:ae:9d:2e:7c:e5:7e:b5:61:22:26:a6:
73:c3:3d:2d:7f:0f:74:cd:ff:6e:aa:00:4d:15:af:e8:9a:68:
3a:b6:53:29:20:c5:d4:45:d3:0e:e7:cd:83:54:2a:fb:50:a4:
fd:46:94:40:e6:2d:36:56:cc:ea:c8:80:4a:5f:f3:9f:f2:ac:
4c:df:89:36:85:73:b9:3c:d0:fb:14:58:6a:7b:ee:de:c0:86:
e2:29:45:77:25:4e:24:c5:a6:8c:7c:d0:5d:05:69:31:f0:44:
f7:05:71:a0:08:7e:c1:bb:3f:d1:19:03:a7:3e:d4:3d:36:de:
f4:24:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:56 2025 by rpki-client