Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/m_eeCbMUOMCH3aO6drOA2kxojj0.roa
File: m_eeCbMUOMCH3aO6drOA2kxojj0.roa (raw, json)
Hash identifier: zNYOEjkK7jmKavv1TghXr14sNvpfbjRANuWG5ColvnU=
Subject key identifier: 9B:F7:9E:09:B3:14:38:C0:87:DD:A3:BA:76:B3:80:DA:4C:68:8E:3D
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 0181F62CF33EA3408CABE680448282F495ED
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/m_eeCbMUOMCH3aO6drOA2kxojj0.roa
Signing time: Wed 13 Jul 2022 06:09:09 +0000
ROA not before: Wed 13 Jul 2022 06:09:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198930
IP address blocks: 77.87.185.0/24 maxlen: 24
185.66.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f6:2c:f3:3e:a3:40:8c:ab:e6:80:44:82:82:f4:95:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jul 13 06:09:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bf79e09b31438c087dda3ba76b380da4c688e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:3c:fa:c5:f8:b5:02:83:c5:f3:0f:8e:fd:
17:fe:ff:40:22:83:f2:d0:8f:7b:9e:47:4a:90:5d:
dc:d5:86:e0:3a:76:7d:5b:86:f9:8f:03:1a:ff:12:
d9:28:24:f1:33:0d:19:c2:73:9a:f8:8f:3e:51:79:
e2:23:a1:f8:84:16:ce:2a:34:5c:e4:ca:2b:5b:2d:
06:b2:96:eb:27:e1:e0:e7:8d:f0:91:16:90:76:ad:
84:f8:6f:79:60:01:2a:6f:43:de:2e:5d:8b:2a:9b:
c1:ac:f3:c7:70:09:01:41:b5:42:59:eb:e2:ec:f2:
67:4e:19:d6:79:80:57:d2:f7:a3:9a:32:72:d7:29:
f7:db:ed:81:33:fb:11:7f:7e:53:62:d7:7b:e5:9a:
3c:81:e4:3d:ef:5a:69:67:c5:5d:a2:6b:8b:68:79:
8e:c4:33:9c:ec:a5:63:9a:0a:b6:df:bf:d8:00:6e:
22:3d:fc:35:20:50:8d:64:96:75:00:ff:ab:f3:b6:
0e:be:88:f9:ce:a8:5b:b9:8e:15:ef:2b:54:7e:6c:
e2:39:de:ed:4a:04:fa:a1:cc:a0:47:2f:cb:66:1f:
0b:48:77:9a:1d:59:58:c8:af:47:90:08:3b:da:e0:
8e:5c:a3:e6:e4:db:01:79:9e:39:09:bc:31:91:a1:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:9E:09:B3:14:38:C0:87:DD:A3:BA:76:B3:80:DA:4C:68:8E:3D
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/m_eeCbMUOMCH3aO6drOA2kxojj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.185.0/24
185.66.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:e4:4b:81:d4:23:57:1f:54:08:35:5e:bc:27:ab:12:15:ea:
13:32:7a:23:f6:00:7e:32:6d:f7:00:ca:92:d5:01:10:13:25:
e1:f8:b3:33:fe:9d:fd:d7:79:f6:37:07:29:32:c6:3b:87:fb:
24:0c:ec:df:de:92:ca:2d:9d:8e:7c:64:db:f3:e1:8a:f3:50:
b5:e0:75:b5:d7:ae:5f:9d:8c:4e:7d:54:2a:94:02:c3:59:4e:
6b:fb:b3:bf:f3:ea:b6:43:0f:f6:35:0b:cb:d9:30:43:80:81:
b9:f7:f6:9c:da:79:4c:d4:d3:ad:ca:ca:c2:17:15:11:19:ad:
ec:05:c9:da:e6:78:3b:0b:45:f0:82:58:05:37:f8:16:f1:7c:
ef:45:93:4f:3f:34:e7:a5:9c:76:ba:bd:ec:85:a2:ad:8a:88:
56:fc:b0:1a:e5:54:d4:b9:35:32:79:d3:41:26:10:1a:e9:56:
ed:a5:67:e3:81:f1:5e:02:3d:e7:eb:a6:1a:9f:7b:9d:03:d2:
c7:e3:bd:87:3f:d8:80:c4:28:b3:8c:ca:37:ff:28:bd:4c:bb:
5e:a1:15:08:b9:75:f1:d7:3a:95:c4:0b:5a:46:77:61:4b:48:
f2:f3:cc:f0:74:dc:d5:c6:81:07:ba:97:55:52:a5:ed:2c:79:
4a:c2:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:10:03 2025 by rpki-client