Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/YtKOq9CIB7p4Vic9zxHkOaKu1TE.roa
File: YtKOq9CIB7p4Vic9zxHkOaKu1TE.roa (raw, json)
Hash identifier: QmxxCUDB1rxNLs2kvN8jkBFegcpkDS5LZ5kS8rNGmts=
Subject key identifier: 62:D2:8E:AB:D0:88:07:BA:78:56:27:3D:CF:11:E4:39:A2:AE:D5:31
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01859D0C7AC0AC57DC12537F727B56E2EAC0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/YtKOq9CIB7p4Vic9zxHkOaKu1TE.roa
Signing time: Tue 10 Jan 2023 18:58:38 +0000
ROA not before: Tue 10 Jan 2023 18:58:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9d:0c:7a:c0:ac:57:dc:12:53:7f:72:7b:56:e2:ea:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 10 18:58:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62d28eabd08807ba7856273dcf11e439a2aed531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:04:a9:10:d4:db:b4:d0:92:32:09:b8:98:
e0:d7:51:d0:ea:50:d0:e5:d4:af:c8:90:ba:db:19:
69:e3:8b:31:52:ad:37:a5:d8:4e:0f:37:8c:7a:fe:
cb:59:b2:16:cd:b4:a6:e2:54:84:f4:93:9a:3d:7d:
0a:50:b6:d7:f0:5b:09:59:6c:9a:4b:6a:ea:8c:5d:
fc:29:72:cb:f4:da:09:30:64:b6:dd:2e:69:e9:3a:
54:bb:7c:95:0c:dc:e5:0c:ab:b3:6d:66:da:d6:89:
29:c9:7b:d0:eb:ca:7d:3d:30:8c:fd:ca:c5:8a:a5:
83:19:b3:55:fc:00:12:90:bd:af:89:75:80:11:55:
1e:f9:4c:a8:d6:0f:5b:db:4d:8d:4a:87:02:52:73:
bc:2a:cc:92:58:85:d6:56:0e:8d:11:3f:da:41:1a:
c2:f9:2a:6c:e0:15:f9:57:65:71:42:11:78:1d:43:
17:f5:81:eb:53:cc:91:8c:24:e1:45:39:25:a3:c9:
b5:9e:7e:24:44:c4:fd:58:0b:ba:13:e9:46:c7:dd:
ed:27:db:c7:91:7f:f3:9e:54:a7:4e:60:c1:24:15:
93:c4:b1:a4:3a:22:7e:ba:25:db:49:05:01:eb:6b:
e5:8c:ab:19:a2:f5:60:4b:d0:3e:fc:63:48:4f:37:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:8E:AB:D0:88:07:BA:78:56:27:3D:CF:11:E4:39:A2:AE:D5:31
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/YtKOq9CIB7p4Vic9zxHkOaKu1TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
1d:72:55:8b:d7:5c:f1:6c:75:d0:e8:f4:66:5a:d0:2e:fd:f7:
fb:52:0f:ee:ae:2f:7d:e7:7d:4a:a9:14:bc:0d:ca:b3:c0:e5:
01:df:30:2a:27:2d:a4:92:d7:a3:8e:7e:57:d3:53:74:d0:d4:
a7:35:d4:55:ef:3c:1a:49:8c:78:13:36:73:87:84:7a:ff:87:
19:34:bd:58:95:38:a5:5e:7b:df:3c:d7:2d:27:e3:91:0c:36:
0c:94:04:39:f7:7c:a3:9c:6a:96:53:37:f7:08:a3:52:86:06:
58:45:1f:0f:64:64:9e:d3:87:45:8e:e7:2e:ab:9d:a1:c5:87:
b4:b3:ce:24:f3:11:af:c1:ad:d2:e2:f4:3e:5b:1c:d6:88:12:
ab:18:ed:9d:b4:cb:e0:20:20:b9:1d:92:50:45:97:cc:dd:20:
64:38:52:c9:6c:9d:49:db:1b:49:02:08:83:a8:65:7e:7f:ad:
e2:a1:fc:e9:0e:ea:16:aa:89:87:8c:9e:d0:25:7b:de:d8:1b:
ef:42:6e:58:bf:2a:52:1e:68:8f:c8:9a:25:63:63:5b:b5:a9:
bb:08:53:45:07:b1:6c:24:e9:3f:f0:b5:f4:b3:b1:ae:cd:09:
0b:7d:18:57:5a:6d:12:9b:d0:d4:c0:42:ff:5e:3e:88:a0:b0:
23:e9:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:40 2025 by rpki-client