Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Z7uMoqcOXO-vuxXdmMTauYCDvFc.roa
File: Z7uMoqcOXO-vuxXdmMTauYCDvFc.roa (raw, json)
Hash identifier: TLnk8ZzAC3Pf5y8aR9Ln1xbHpeGm2fbJIhSDu16Bkkc=
Subject key identifier: 67:BB:8C:A2:A7:0E:5C:EF:AF:BB:15:DD:98:C4:DA:B9:80:83:BC:57
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 1750CF3D
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Z7uMoqcOXO-vuxXdmMTauYCDvFc.roa
Signing time: Sat 01 Jan 2022 16:03:53 +0000
ROA not before: Sat 01 Jan 2022 16:03:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49774
IP address blocks: 93.114.96.0/24 maxlen: 24
85.204.138.0/24 maxlen: 24
77.81.178.0/23 maxlen: 23
86.106.170.0/24 maxlen: 24
93.115.246.0/24 maxlen: 24
31.14.16.0/24 maxlen: 24
2a04:fee3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391171901 (0x1750cf3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67bb8ca2a70e5cefafbb15dd98c4dab98083bc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:65:0e:4f:9c:f8:9c:5c:a3:34:79:c6:15:
f1:49:d3:27:cc:ec:b3:c9:74:d8:0c:04:b6:4e:88:
23:24:e9:84:15:46:dd:d7:50:2d:75:e4:4a:0a:83:
4b:01:be:d1:00:6c:fc:12:c8:2d:78:cc:c7:85:4b:
33:3c:3f:a3:47:5b:f7:82:33:66:ca:c9:46:2b:d2:
a5:cc:0d:25:5f:d3:de:ad:02:9b:7b:7e:5a:63:0d:
45:06:14:6b:a9:c3:92:19:17:d7:cf:22:31:04:72:
a4:fa:f9:4b:f2:fd:3f:74:73:55:87:76:1d:9b:0c:
3f:91:d7:0b:79:08:a1:a7:4f:73:dc:50:35:f6:51:
69:a9:4e:c0:43:49:8c:c6:f1:fa:92:2c:10:5e:6b:
d1:d1:46:cc:95:61:d1:76:82:20:22:23:d7:44:f3:
cb:5f:7d:3b:ed:5c:f3:46:64:93:19:96:f4:54:54:
5e:25:6c:b2:c8:65:57:6d:ab:3f:17:da:de:fd:14:
03:0d:79:1b:b0:b0:1f:85:28:b3:4a:c2:96:a1:09:
47:2a:50:78:f2:ab:09:1c:15:b6:37:5a:2f:4f:9e:
31:e3:23:6b:54:3f:c8:31:b5:db:4d:e8:a6:ad:3a:
8c:80:46:93:18:89:58:75:1e:b2:33:19:bc:1a:d5:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BB:8C:A2:A7:0E:5C:EF:AF:BB:15:DD:98:C4:DA:B9:80:83:BC:57
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Z7uMoqcOXO-vuxXdmMTauYCDvFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.16.0/24
77.81.178.0/23
85.204.138.0/24
86.106.170.0/24
93.114.96.0/24
93.115.246.0/24
IPv6:
2a04:fee3::/32
Signature Algorithm: sha256WithRSAEncryption
96:0a:64:5d:5a:1e:1d:e5:03:6e:df:bd:49:d8:85:3f:5e:05:
42:cd:84:99:ee:5d:33:a4:f1:1b:ce:bc:81:ee:87:f5:6d:2a:
ed:f2:31:0a:f2:9e:32:00:ee:62:b9:05:77:8a:27:4c:a4:50:
18:31:ab:d2:48:93:4b:81:21:e0:2b:29:b2:a6:1e:53:e5:74:
35:6b:ba:7f:63:5e:6c:cc:9c:30:2d:a3:26:bc:1f:d9:1b:13:
b0:89:fa:65:f2:0a:ec:90:19:ff:dc:a2:75:cb:4d:56:10:c6:
b9:db:0e:74:79:d2:3c:2d:ae:32:9e:7c:e7:29:30:2d:2c:69:
d9:e8:69:c5:0d:ef:84:c2:67:51:b6:ed:00:a7:f8:ad:f6:e2:
29:9e:88:b5:68:ad:74:7d:3f:68:ce:d5:43:85:11:3b:08:ce:
fc:48:09:ea:a8:cf:72:36:55:63:78:df:9d:22:96:b9:02:24:
69:c5:5f:68:7f:d2:f3:b9:6b:2b:7c:70:c2:75:08:83:7c:6c:
3b:ea:8d:25:a5:72:51:5e:1e:ae:49:e8:73:4f:80:be:8d:97:
cb:39:dd:d5:df:d1:a4:00:82:4e:2e:37:80:80:f3:3d:07:9c:
3b:84:2b:73:bf:ae:61:bf:4c:51:32:aa:5d:bd:b1:6e:00:28:
a3:0f:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:12 2025 by rpki-client