Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/d4CSgC9YCYJvn9of77UOVYGzHSg.roa
File: d4CSgC9YCYJvn9of77UOVYGzHSg.roa (raw, json)
Hash identifier: nfpnRxOkZAdgUM6GqSKuAf/FU+4ug8+5XAV570XdcYQ=
Subject key identifier: 77:80:92:80:2F:58:09:82:6F:9F:DA:1F:EF:B5:0E:55:81:B3:1D:28
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0187504F32AD9B752C63A15BCE4CA97A1194
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/d4CSgC9YCYJvn9of77UOVYGzHSg.roa
Signing time: Wed 05 Apr 2023 07:26:20 +0000
ROA not before: Wed 05 Apr 2023 07:26:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8456
IP address blocks: 95.183.228.0/24 maxlen: 24
193.140.192.0/24 maxlen: 24
193.140.193.0/24 maxlen: 24
193.140.194.0/24 maxlen: 24
193.140.196.0/22 maxlen: 22
193.140.196.0/24 maxlen: 24
193.140.195.0/24 maxlen: 24
193.140.201.0/24 maxlen: 24
193.140.200.0/22 maxlen: 22
193.140.203.0/24 maxlen: 24
193.140.204.0/22 maxlen: 22
193.140.208.0/21 maxlen: 21
79.123.179.0/24 maxlen: 24
79.123.178.0/24 maxlen: 24
79.123.176.0/23 maxlen: 23
79.123.181.0/24 maxlen: 24
79.123.180.0/24 maxlen: 24
79.123.183.0/24 maxlen: 24
79.123.182.0/24 maxlen: 24
193.255.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:4f:32:ad:9b:75:2c:63:a1:5b:ce:4c:a9:7a:11:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Apr 5 07:26:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=778092802f5809826f9fda1fefb50e5581b31d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:7a:a1:65:c2:6f:70:d9:97:0b:16:c8:85:
13:db:77:d8:a3:85:0b:b1:58:78:4f:22:6d:ab:72:
37:1f:42:08:9b:ac:f5:36:00:3d:84:3e:22:a8:34:
cb:c5:8e:70:20:74:95:0d:ff:2f:e8:b7:ef:c8:27:
16:2b:2a:4b:5e:58:e0:d4:f0:dd:11:f3:28:f9:45:
d7:c0:49:5f:28:ad:94:2a:50:8f:11:6c:d2:94:23:
4b:db:a8:b6:ac:e3:a9:73:55:55:e1:f0:0e:12:e2:
65:69:a1:7b:35:10:c2:9a:47:43:2e:56:f9:d9:62:
ea:06:58:1a:9f:71:3f:68:28:aa:e8:ab:ea:7a:a1:
b5:58:aa:77:72:ec:3b:1c:a2:cd:60:fc:39:31:69:
d5:9a:f5:98:33:58:1b:67:08:ac:67:36:d1:c9:ab:
87:63:3b:42:0f:d6:27:c5:e5:51:08:0d:3c:9c:87:
a6:85:47:f9:90:01:e1:30:ff:76:f0:5f:3a:a5:12:
39:5b:57:90:e9:75:11:41:f0:ef:96:60:d2:ad:b1:
f3:2f:b5:81:3b:e8:ac:e7:0c:d1:8a:99:ef:6d:e8:
f5:6e:cc:f3:bc:9b:8b:d6:f3:96:61:01:a5:8d:52:
56:7a:e8:e8:34:ef:7f:c5:30:6b:f6:a5:36:81:aa:
06:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:80:92:80:2F:58:09:82:6F:9F:DA:1F:EF:B5:0E:55:81:B3:1D:28
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/d4CSgC9YCYJvn9of77UOVYGzHSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.123.176.0/21
95.183.228.0/24
193.140.192.0-193.140.215.255
193.255.30.0/24
Signature Algorithm: sha256WithRSAEncryption
54:98:0f:51:c7:30:60:72:ea:e3:57:62:1f:66:4e:f4:e6:68:
62:2d:dc:de:23:75:95:e8:7c:65:37:06:36:90:83:e8:d1:af:
78:84:fe:e2:c0:7f:30:01:84:73:1e:c5:65:54:56:ee:25:47:
8b:00:33:22:62:47:64:ba:df:25:37:e0:e3:ca:4d:ca:b3:d7:
e1:e7:63:bb:a3:0b:ce:01:ec:12:f0:3c:0f:b2:70:1c:c9:83:
8f:dc:8f:f1:11:3e:83:6d:f4:7e:b9:1e:dc:a6:92:ec:42:c7:
38:57:8b:53:3b:72:eb:eb:c5:6f:fa:46:d9:8d:16:8f:d8:a9:
db:b0:a1:43:b7:a2:2a:38:70:ad:46:c6:8e:7a:c4:ab:42:02:
e6:a2:40:fa:4a:98:1f:0d:87:e8:ca:da:98:4f:87:47:4b:cd:
4a:44:16:49:8d:5e:05:16:74:a1:b1:77:8c:62:cb:85:c1:7c:
3a:af:42:fe:d6:9e:dd:48:e7:83:4a:82:43:e3:66:94:6d:a2:
8b:8a:a4:c1:e0:75:6f:2a:b6:46:6c:3f:29:95:d2:93:cb:12:
b6:5e:b0:41:e3:22:4c:1f:9c:fd:66:2e:c9:2a:a5:74:24:8e:
d8:66:87:a9:c2:a3:9f:d6:dd:99:36:c1:84:9b:66:53:cc:49:
53:1c:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:11:27 2025 by rpki-client