Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/a0uZV4kZLOWQbh1mJCUpcl7CQ3U.roa
File: a0uZV4kZLOWQbh1mJCUpcl7CQ3U.roa (raw, json)
Hash identifier: Cksl3p5qz6QnWig8LbmbET3IrhE2X2eDdj3cIi7/zuI=
Subject key identifier: 6B:4B:99:57:89:19:2C:E5:90:6E:1D:66:24:25:29:72:5E:C2:43:75
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41D1F3ECE184C8C4D4C90E39BD9ABC
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/a0uZV4kZLOWQbh1mJCUpcl7CQ3U.roa
Signing time: Sun 01 Jan 2023 16:54:44 +0000
ROA not before: Sun 01 Jan 2023 16:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33977
IP address blocks: 86.106.79.0/24 maxlen: 24
185.244.108.0/22 maxlen: 22
86.106.86.0/24 maxlen: 24
93.118.45.0/24 maxlen: 24
84.247.30.0/24 maxlen: 24
89.39.253.0/24 maxlen: 24
77.81.180.0/24 maxlen: 24
86.107.24.0/23 maxlen: 23
77.81.123.0/24 maxlen: 24
86.105.17.0/24 maxlen: 24
85.204.110.0/23 maxlen: 23
89.33.130.0/23 maxlen: 23
31.14.58.0/23 maxlen: 23
31.14.57.0/24 maxlen: 24
93.113.157.0/24 maxlen: 24
85.204.52.0/23 maxlen: 23
86.105.180.0/24 maxlen: 24
86.104.7.0/24 maxlen: 24
93.114.251.0/24 maxlen: 24
86.104.16.0/24 maxlen: 24
77.81.87.0/24 maxlen: 24
188.214.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:d1:f3:ec:e1:84:c8:c4:d4:c9:0e:39:bd:9a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b4b995789192ce5906e1d66242529725ec24375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:c4:a1:59:d2:fa:65:16:ac:5b:be:f4:00:
e8:38:f4:82:0a:85:74:83:65:c1:35:5d:1b:11:a9:
af:99:12:bb:6f:85:6b:50:2c:b2:1d:2d:f1:c2:33:
07:d9:be:a9:04:c8:3f:8e:7b:b9:b2:11:00:e8:cb:
82:dc:a6:4e:c5:09:25:67:dd:c6:19:22:20:39:cc:
ac:bb:1a:d7:b2:9b:a2:28:2a:39:c8:8f:eb:90:d5:
48:37:a4:84:f6:fa:bf:48:eb:3a:4e:d5:56:5c:41:
ae:df:36:a1:37:bc:46:24:14:ad:f8:df:6e:3e:7c:
4d:09:c7:1d:ff:60:a8:38:d8:d8:e8:92:3a:e0:21:
ad:10:92:a8:81:d3:d5:b1:e5:be:08:ce:98:f8:50:
7c:0b:40:8a:f9:16:a4:ae:73:5e:73:56:f9:34:d7:
e8:9b:c3:cf:be:d6:1e:a2:a4:73:13:d1:f1:0b:1d:
86:1f:07:31:bc:11:2d:0e:1b:68:f0:dd:4d:e9:60:
fa:f1:2a:71:b1:fc:fd:1c:01:a6:df:7b:aa:79:e6:
ff:ed:e3:f8:af:2b:34:96:db:8f:35:07:11:e5:21:
65:ed:07:fd:2e:aa:c0:eb:ab:d1:b6:f2:30:06:6b:
63:5f:40:52:7e:cb:b6:a8:57:f5:c0:44:4b:7a:f5:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4B:99:57:89:19:2C:E5:90:6E:1D:66:24:25:29:72:5E:C2:43:75
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/a0uZV4kZLOWQbh1mJCUpcl7CQ3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.57.0-31.14.59.255
77.81.87.0/24
77.81.123.0/24
77.81.180.0/24
84.247.30.0/24
85.204.52.0/23
85.204.110.0/23
86.104.7.0/24
86.104.16.0/24
86.105.17.0/24
86.105.180.0/24
86.106.79.0/24
86.106.86.0/24
86.107.24.0/23
89.33.130.0/23
89.39.253.0/24
93.113.157.0/24
93.114.251.0/24
93.118.45.0/24
185.244.108.0/22
188.214.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:94:37:e1:05:a6:df:10:1d:90:70:36:2d:f1:48:f2:0d:a3:
76:9f:da:f8:3f:31:e4:55:1e:4f:a2:44:51:e3:e4:4b:86:78:
ca:59:a7:96:e1:54:99:f5:ce:0a:68:3c:72:2b:36:f7:d0:46:
04:f2:c9:0d:d4:1f:e0:bf:2c:fc:3f:b1:86:b5:4b:58:89:4e:
c0:5f:d3:40:19:4a:36:18:9b:a3:a2:cf:fa:a6:8a:1b:fc:81:
7a:74:6c:e0:2e:13:62:a2:7b:c6:8a:6f:ce:b9:c2:a3:ae:6f:
10:15:ac:7d:41:55:21:af:5a:63:27:6b:d3:2e:c3:a8:b4:bc:
fb:e0:fb:be:6c:84:05:08:b8:da:98:47:7f:82:ab:4e:b4:d3:
40:c5:a1:d7:b9:cf:7b:a0:d5:d7:41:e8:d8:35:f8:6c:6f:a7:
54:4f:dc:d9:30:ad:b3:96:c6:cb:0d:d6:35:67:b0:79:c5:f6:
75:03:32:63:15:53:66:39:9e:c4:29:6d:13:41:d4:7a:10:86:
08:2e:ba:f2:58:2e:0d:a0:fa:c4:c5:e5:05:49:84:cd:9f:a6:
3f:cc:09:96:67:d9:3f:4d:76:f0:6e:46:d2:09:f2:b0:3f:b0:
17:7c:bb:3c:c0:11:3a:47:cd:db:4a:66:63:e5:15:09:3f:cf:
29:79:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:04:45 2025 by rpki-client