Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/DF1kahfeoUkmKdDaxn82SiIgjmw.roa
File: DF1kahfeoUkmKdDaxn82SiIgjmw.roa (raw, json)
Hash identifier: 992XCCXEGvT5Q3PTvXeqyy2671JWP4h1Z+gYCap0mj0=
Subject key identifier: 0C:5D:64:6A:17:DE:A1:49:26:29:D0:DA:C6:7F:36:4A:22:20:8E:6C
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 01893F2F9F72BCECDEA72B9104FB45CE639D
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/DF1kahfeoUkmKdDaxn82SiIgjmw.roa
Signing time: Mon 10 Jul 2023 09:43:52 +0000
ROA not before: Mon 10 Jul 2023 09:43:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42943
IP address blocks: 77.240.83.0/24 maxlen: 24
77.240.82.0/24 maxlen: 24
77.240.81.0/24 maxlen: 24
77.240.80.0/22 maxlen: 22
77.240.80.0/24 maxlen: 24
77.240.91.0/24 maxlen: 24
77.240.86.0/23 maxlen: 23
77.240.86.0/24 maxlen: 24
77.240.90.0/24 maxlen: 24
77.240.89.0/24 maxlen: 24
77.240.88.0/24 maxlen: 24
77.240.88.0/21 maxlen: 21
77.240.87.0/24 maxlen: 24
77.240.93.0/24 maxlen: 24
77.240.92.0/24 maxlen: 24
77.240.95.0/24 maxlen: 24
77.240.94.0/24 maxlen: 24
85.184.232.0/22 maxlen: 22
85.184.232.0/24 maxlen: 24
85.184.233.0/24 maxlen: 24
85.184.236.0/23 maxlen: 23
85.184.235.0/24 maxlen: 24
85.184.234.0/24 maxlen: 24
185.109.179.0/24 maxlen: 24
185.109.178.0/24 maxlen: 24
185.109.177.0/24 maxlen: 24
185.109.176.0/22 maxlen: 22
185.109.176.0/24 maxlen: 24
2a0c:1a41:2000::/36 maxlen: 36
2a0c:1a41:1000::/36 maxlen: 36
2a0c:1a40:1000::/36 maxlen: 36
2a0c:1a40:2000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:2f:9f:72:bc:ec:de:a7:2b:91:04:fb:45:ce:63:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Jul 10 09:43:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c5d646a17dea1492629d0dac67f364a22208e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:db:8c:27:92:2f:aa:56:0f:ce:67:86:e2:
90:e4:6a:11:b7:00:21:1e:a0:31:1e:eb:49:45:d8:
f6:02:9e:e8:44:47:2b:57:73:25:81:00:93:65:13:
ce:f4:06:09:39:f1:7b:64:ba:3a:16:40:08:54:96:
8d:ac:d2:43:ca:43:38:eb:a5:5b:02:e7:5b:4a:67:
39:ff:0f:9e:ed:9f:8b:62:77:f4:28:55:22:cb:e7:
3b:f0:74:a0:40:da:43:22:53:6e:c1:85:13:38:b4:
06:60:67:ec:98:33:fa:6b:c4:7b:b8:59:8d:69:0d:
25:1c:4d:63:af:bf:07:9c:9b:51:8e:01:f0:a7:a5:
0f:f5:3c:15:56:2b:c6:a8:c9:a4:ed:4e:a6:d0:f4:
0a:5f:c0:6e:90:19:b5:cc:f6:1a:07:b6:58:dd:8e:
31:c0:59:32:50:e5:df:a8:2e:bd:17:99:85:1f:6f:
97:78:6a:2e:f4:e5:45:5b:44:58:6c:18:ea:66:4c:
5e:5d:4d:a3:b1:0b:ca:c5:8a:c0:0a:0c:5f:42:a0:
24:94:8e:b9:cb:0a:0b:e8:d8:0d:9d:86:c9:eb:d3:
2a:02:f2:f9:ed:0f:0c:5a:b3:78:57:67:32:35:09:
5e:9f:9c:48:91:ff:83:79:fa:c3:ae:d2:f2:8e:12:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5D:64:6A:17:DE:A1:49:26:29:D0:DA:C6:7F:36:4A:22:20:8E:6C
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/DF1kahfeoUkmKdDaxn82SiIgjmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.80.0/22
77.240.86.0-77.240.95.255
85.184.232.0-85.184.237.255
185.109.176.0/22
IPv6:
2a0c:1a40:1000::-2a0c:1a40:2fff:ffff:ffff:ffff:ffff:ffff
2a0c:1a41:1000::-2a0c:1a41:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8d:39:6d:22:5d:37:0d:3f:5a:35:e4:65:eb:fe:1b:23:f0:87:
c6:74:f7:32:7c:2e:3a:ce:d6:4a:e7:1b:4a:e3:d0:a6:06:9d:
81:8b:bf:a7:2e:e0:19:38:55:47:0f:73:7e:e3:93:3f:45:2f:
9e:40:b7:95:05:4d:14:41:31:52:c2:6b:56:e6:31:59:2d:3e:
d5:3e:b8:18:ae:21:b4:a7:2e:e8:c6:35:16:2e:b6:1a:df:e3:
88:6d:23:c2:a5:14:38:d7:25:13:95:49:f5:c2:a1:9c:32:3f:
ed:b7:95:c0:2f:62:bb:5e:bd:d5:f4:86:b5:b0:a0:9f:46:94:
e3:97:c9:28:55:4d:ba:ea:c9:73:4f:5c:b7:37:32:b3:26:5b:
67:07:fc:9d:8d:13:11:d1:01:b6:4e:88:04:31:28:e1:51:0d:
6b:80:7a:bd:b2:39:da:b9:5f:55:d4:f3:77:c1:65:70:5c:81:
4e:1c:ce:86:f6:c1:33:89:ba:a4:33:75:a1:92:3d:00:35:b8:
a7:72:bc:a3:f8:c2:f3:c1:8a:77:9b:43:a2:00:2c:7c:ee:71:
32:25:4e:55:ad:53:34:f2:48:50:e0:a8:39:1b:ac:fc:f7:5f:
95:b2:e3:45:88:5b:b7:9e:f1:10:ab:57:87:9c:4a:b2:8e:30:
11:bd:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:19 2025 by rpki-client