Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/GEgniQOd0PW36StWMps3DFEl07k.roa
File: GEgniQOd0PW36StWMps3DFEl07k.roa (raw, json)
Hash identifier: q5I0GOji7Zsf1TNEpBsCanNU76kAmuEYAHTKoWJ7Gjo=
Subject key identifier: 18:48:27:89:03:9D:D0:F5:B7:E9:2B:56:32:9B:37:0C:51:25:D3:B9
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 0185724C66A9F4AC77652CF1C6BD31A6A564
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/GEgniQOd0PW36StWMps3DFEl07k.roa
Signing time: Mon 02 Jan 2023 11:44:47 +0000
ROA not before: Mon 02 Jan 2023 11:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50045
IP address blocks: 80.77.160.0/24 maxlen: 24
2a02:2518:e000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:66:a9:f4:ac:77:65:2c:f1:c6:bd:31:a6:a5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 2 11:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18482789039dd0f5b7e92b56329b370c5125d3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:48:07:2d:b3:c0:e3:66:48:df:c2:50:3d:
ae:f2:45:34:5d:6d:43:5c:10:1c:a3:8f:50:58:0c:
e9:50:63:b4:18:54:71:d1:fb:a5:4f:ce:b7:3f:33:
46:5c:f8:3e:d4:1f:fd:53:d4:7a:fd:e0:7a:e0:e2:
97:fd:16:af:44:38:87:b4:9c:e7:fa:5c:74:4c:3d:
83:58:61:d0:55:30:d8:56:65:1f:fe:02:0c:55:03:
ca:35:2f:db:9e:77:98:c3:1e:25:86:9c:b7:b8:25:
cb:95:92:b9:9d:f9:3f:c0:2c:a0:f2:3f:f0:8f:a2:
77:cf:01:7c:d9:43:e4:4c:81:ef:c4:3d:a1:68:7b:
c7:27:66:f4:85:15:b3:69:90:5d:3d:be:86:bd:44:
04:e6:db:bc:f1:bc:b1:41:bf:43:21:15:51:25:e4:
4a:c3:d3:bf:2b:66:95:f9:8f:4d:86:85:03:9b:1d:
e6:a6:48:f4:e9:24:21:d6:d4:72:07:e5:4d:ef:49:
cd:da:db:b4:b1:99:20:a6:34:d6:02:3e:e2:bd:13:
4c:f5:a2:58:f3:0b:32:92:7d:93:73:6c:1a:7d:a4:
af:fc:d9:74:e2:36:d0:5e:d3:93:67:03:8f:7e:e8:
c4:57:f4:24:36:58:b6:d6:66:8e:4b:7f:a6:2f:cf:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:27:89:03:9D:D0:F5:B7:E9:2B:56:32:9B:37:0C:51:25:D3:B9
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/GEgniQOd0PW36StWMps3DFEl07k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.160.0/24
IPv6:
2a02:2518:e000::/36
Signature Algorithm: sha256WithRSAEncryption
9f:f6:6f:b6:d1:43:04:95:12:e4:c5:72:81:b0:01:a4:33:18:
0b:9e:bd:e4:e4:24:19:08:0f:22:cf:ba:7d:dc:79:c1:ac:1d:
69:ce:cc:df:d4:2a:9e:e0:d2:cf:b9:fb:6e:a7:7c:31:d4:f4:
31:fd:9b:da:75:9c:d9:57:ce:0e:c9:18:7d:5b:0c:cb:fb:a5:
5c:d3:c1:63:3b:25:65:22:a1:3a:bf:f6:c4:47:75:61:91:ea:
7f:4f:6d:b0:dd:fb:fa:27:3a:04:85:3f:39:ef:70:9b:3f:06:
6e:a9:32:f6:4f:2a:82:60:1f:55:d0:0e:99:94:b2:62:28:54:
44:29:14:ef:03:d8:8d:2d:af:68:c3:78:06:cb:86:a6:c7:5a:
96:4c:67:66:eb:c7:34:fe:23:ee:b6:a6:91:29:91:37:fe:c5:
64:4f:08:81:48:51:45:d1:88:61:58:c8:64:db:45:26:54:17:
5c:ac:3f:c3:44:78:b1:f5:ca:92:59:21:c3:ee:b2:eb:0c:8c:
c7:54:67:47:cc:cc:54:ad:4a:7a:73:47:a6:e1:8a:75:19:3c:
01:ca:3b:75:2b:c0:cc:47:2d:f4:8a:6e:96:8b:ea:e3:39:06:
73:f3:dc:d7:32:09:2c:fc:db:d4:61:b0:91:9a:cc:66:a3:ae:
f0:1c:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:06:37 2025 by rpki-client