Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/nIRVlVTY_4_CmS3qInPURPvf8BY.roa
File: nIRVlVTY_4_CmS3qInPURPvf8BY.roa (raw, json)
Hash identifier: +1QwcR9EzeFguzVCAeLElJDfB2AcjaQP52/n6q+tD3I=
Subject key identifier: 9C:84:55:95:54:D8:FF:8F:C2:99:2D:EA:22:73:D4:44:FB:DF:F0:16
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 0188CF87EEE39F839F0C4E5F3C08E73F5A3E
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/nIRVlVTY_4_CmS3qInPURPvf8BY.roa
Signing time: Sun 18 Jun 2023 17:22:52 +0000
ROA not before: Sun 18 Jun 2023 17:22:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212341
IP address blocks: 77.87.185.0/24 maxlen: 24
185.66.176.0/22 maxlen: 22
185.66.178.0/24 maxlen: 24
2a05:900::/32 maxlen: 32
2a05:902::/32 maxlen: 32
2a05:901::/32 maxlen: 32
2a05:903::/32 maxlen: 32
2a05:900::/29 maxlen: 29
2a05:904::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cf:87:ee:e3:9f:83:9f:0c:4e:5f:3c:08:e7:3f:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jun 18 17:22:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c84559554d8ff8fc2992dea2273d444fbdff016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:86:86:ca:16:08:7c:11:98:ba:5d:f7:fd:
7e:f3:e3:46:8d:c9:e1:d9:01:4f:58:29:a3:9a:0e:
2a:9e:06:72:3b:ea:9c:e4:55:08:04:94:07:1b:7b:
7f:18:7d:c0:94:37:9d:3a:61:43:9e:2c:e4:55:1a:
b9:40:2f:9a:cc:8a:a3:b6:be:92:cb:3d:6e:ac:b1:
c5:37:0f:48:9d:e4:1f:80:18:93:01:5a:15:ff:b2:
29:90:ca:61:60:d7:b8:18:a8:ce:30:32:3a:60:95:
47:9a:f7:14:aa:a4:ae:e5:05:7c:2c:40:d2:6f:dc:
a4:4a:79:ab:2d:ff:52:61:11:87:05:7d:dd:84:1a:
93:b6:cf:4f:f7:9e:2e:b7:87:a8:9b:72:69:bd:da:
84:53:3f:c2:e3:fa:d8:d7:20:fa:fd:51:5a:42:4e:
dd:55:09:a3:3f:26:62:98:b9:b9:7a:50:48:19:a2:
f5:d3:00:fc:3c:c4:c3:9d:49:2f:8b:c2:e6:67:7c:
08:ed:d5:c1:d5:8c:5c:05:6d:69:a8:e7:83:4b:a9:
67:4f:76:db:0b:06:de:ba:3e:f6:aa:2b:93:5c:ba:
39:20:53:79:6d:28:ef:57:8c:9d:0f:ad:b9:5e:dc:
ec:03:3e:2a:13:ba:8e:f9:f0:28:f3:bc:c4:fc:a9:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:84:55:95:54:D8:FF:8F:C2:99:2D:EA:22:73:D4:44:FB:DF:F0:16
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/nIRVlVTY_4_CmS3qInPURPvf8BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.185.0/24
185.66.176.0/22
IPv6:
2a05:900::/29
Signature Algorithm: sha256WithRSAEncryption
1d:43:0b:a1:53:02:85:29:0a:02:52:8c:f5:83:93:df:e8:13:
03:0c:c8:4f:04:74:cf:99:7f:2a:b9:d4:da:a9:be:50:2d:eb:
d6:55:25:47:90:41:eb:e5:bd:58:7f:da:51:d0:66:18:53:4e:
1b:ae:7c:80:a9:2e:83:55:2f:29:1b:c7:e2:8b:15:ca:9d:49:
87:8d:84:d5:d3:75:a1:34:b4:f6:52:64:e5:92:76:ed:88:32:
61:1d:49:95:84:c5:5f:7d:46:27:09:f0:39:2b:43:e1:3d:90:
b2:5e:74:16:77:8c:dc:e7:e2:2e:b4:a0:0b:45:84:b1:d1:96:
22:6e:20:c1:be:b2:f4:1c:99:6e:17:d2:f8:41:59:5c:8c:df:
3d:44:56:fd:2e:18:1b:76:7e:eb:6d:ef:53:b1:f7:b6:89:8f:
69:f6:fc:42:c3:c1:65:0f:a8:fa:ca:a0:89:10:db:4a:07:e1:
73:b0:0b:18:14:73:c6:ea:cb:72:4a:cf:87:ff:d9:92:c5:23:
77:de:6a:ed:48:36:8a:bb:cf:c6:d7:b0:43:53:11:32:22:5d:
df:93:d4:d4:cc:0c:ce:7f:23:fe:d5:67:ac:e8:da:a2:d9:be:
bd:57:e9:4d:79:6a:f6:fb:57:ec:0e:9b:fd:50:34:f2:e7:d7:
fc:29:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:14:47 2025 by rpki-client