Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/7jdymP0GExvZiA9VkNocAaiS3V8.roa
File: 7jdymP0GExvZiA9VkNocAaiS3V8.roa (raw, json)
Hash identifier: z+SwltAmV10O0XTVM0N3DiDuAPXPQDjyKPGMqg0wO3w=
Subject key identifier: EE:37:72:98:FD:06:13:1B:D9:88:0F:55:90:DA:1C:01:A8:92:DD:5F
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 22AD765A
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/7jdymP0GExvZiA9VkNocAaiS3V8.roa
Signing time: Sat 01 Jan 2022 12:03:06 +0000
ROA not before: Sat 01 Jan 2022 12:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12337
IP address blocks: 87.237.216.0/23 maxlen: 24
87.237.218.0/24 maxlen: 24
87.237.222.0/23 maxlen: 24
192.189.151.0/24 maxlen: 24
206.195.32.0/23 maxlen: 24
2a04:5781:2000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581793370 (0x22ad765a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 12:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee377298fd06131bd9880f5590da1c01a892dd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:8d:8f:ab:53:6c:29:9a:fd:b3:07:05:05:
dc:ca:7b:93:9d:e1:30:fe:35:90:5a:56:01:f7:74:
37:99:6d:2a:24:4d:24:c1:d4:25:ad:8f:85:07:13:
67:aa:2d:89:fd:9c:84:7c:ad:38:79:61:64:d2:30:
0d:45:81:f9:41:c5:1e:1f:b4:34:fe:c7:1c:8e:5d:
58:02:ff:7a:4b:92:bf:77:ce:10:81:1c:5a:0c:25:
c9:38:9e:0e:6a:f7:5e:41:ab:dc:f8:94:3e:6a:36:
d1:3a:e5:a0:4c:11:a8:cf:03:e0:7c:9c:1c:34:e4:
45:4b:ca:85:15:b2:9b:3a:c1:9d:3f:2c:7b:c7:84:
9e:87:99:26:45:44:7f:21:f2:f2:70:a9:66:3d:74:
24:ed:49:86:2a:ad:54:24:1d:ee:98:d7:cb:83:17:
8d:6b:1f:8b:71:2d:8e:fd:2e:fc:2b:05:e3:be:4d:
d5:8b:9d:99:c2:b6:a5:32:a2:e4:d6:bb:bd:e4:cd:
5a:58:bb:b9:4c:77:6b:5b:65:ae:d9:eb:99:8e:7b:
78:e1:ef:ad:56:dd:53:f9:1d:ac:78:a4:32:a6:f5:
52:29:b9:ba:00:37:83:a3:db:e3:69:45:4c:22:67:
c2:37:92:a6:60:27:6b:2d:2c:ef:5d:57:68:ea:cb:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:37:72:98:FD:06:13:1B:D9:88:0F:55:90:DA:1C:01:A8:92:DD:5F
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/7jdymP0GExvZiA9VkNocAaiS3V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.216.0-87.237.218.255
87.237.222.0/23
192.189.151.0/24
206.195.32.0/23
IPv6:
2a04:5781:2000::/40
Signature Algorithm: sha256WithRSAEncryption
ae:68:ac:92:8f:1f:bc:17:7d:18:b5:86:82:d8:b7:9b:03:b4:
0a:b8:8d:59:71:13:ed:ed:70:b4:1d:30:11:55:5a:8c:13:72:
bf:72:e9:b1:f6:ae:c3:bd:cb:46:60:98:24:e1:8d:6c:22:0d:
ef:53:44:fa:42:4a:e4:9a:39:2f:d8:98:f4:92:00:76:c7:42:
29:fc:5f:d0:ee:97:16:fe:21:0d:84:a1:78:36:c5:3b:37:bc:
4b:15:39:61:49:7d:1f:34:34:45:e4:56:7d:d6:ed:ab:09:65:
32:47:48:30:56:5f:3a:8d:7b:aa:99:87:41:6b:dd:78:b0:c8:
c4:3a:21:ef:77:5b:71:78:19:c9:05:be:4c:03:bd:25:20:cb:
73:06:d9:b3:58:7c:ff:f1:23:7a:d7:df:53:e5:f6:db:59:1d:
e8:46:5f:ac:f8:99:52:42:fd:de:6e:bb:46:79:93:20:1f:8b:
5a:e3:a4:64:b3:c6:18:cd:08:b3:07:9b:f1:81:d3:25:5e:37:
da:2f:5a:d9:7d:c2:9e:bc:dd:6e:ad:8a:b9:a6:1e:57:78:19:
9e:bf:a4:37:f2:ce:cb:d3:f9:de:b8:87:ec:93:d7:4d:6b:a3:
49:37:92:27:9d:c6:af:e7:28:78:e6:29:72:e9:67:ec:dd:46:
33:48:b4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:32 2025 by rpki-client