Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/buz58EKDVFWydKYxdFvD5SoZsI8.roa
File: buz58EKDVFWydKYxdFvD5SoZsI8.roa (raw, json)
Hash identifier: 57RVnO6KXOgxYAqMATMz47vtmd/P9JHaqTWncGhjbbk=
Subject key identifier: 6E:EC:F9:F0:42:83:54:55:B2:74:A6:31:74:5B:C3:E5:2A:19:B0:8F
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 092A51B4
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/buz58EKDVFWydKYxdFvD5SoZsI8.roa
Signing time: Tue 26 Apr 2022 09:51:34 +0000
ROA not before: Tue 26 Apr 2022 09:51:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16039
IP address blocks: 31.177.50.0/24 maxlen: 24
31.177.49.0/24 maxlen: 24
31.177.51.0/24 maxlen: 24
31.177.48.0/24 maxlen: 24
31.177.48.0/21 maxlen: 21
31.177.53.0/24 maxlen: 24
31.177.52.0/24 maxlen: 24
31.177.55.0/24 maxlen: 24
31.177.54.0/24 maxlen: 24
82.199.37.0/24 maxlen: 24
82.199.38.0/24 maxlen: 24
82.199.32.0/24 maxlen: 24
82.199.32.0/20 maxlen: 24
82.199.44.0/24 maxlen: 24
82.199.39.0/24 maxlen: 24
82.199.41.0/24 maxlen: 24
82.199.45.0/24 maxlen: 24
82.199.51.0/24 maxlen: 24
82.199.50.0/24 maxlen: 24
82.199.47.0/24 maxlen: 24
82.199.49.0/24 maxlen: 24
82.199.48.0/20 maxlen: 24
82.199.48.0/24 maxlen: 24
82.199.58.0/24 maxlen: 24
82.199.57.0/24 maxlen: 24
82.199.54.0/24 maxlen: 24
82.199.53.0/24 maxlen: 24
82.199.56.0/24 maxlen: 24
82.199.55.0/24 maxlen: 24
82.199.52.0/24 maxlen: 24
82.199.59.0/24 maxlen: 24
82.199.61.0/24 maxlen: 24
82.199.60.0/24 maxlen: 24
82.199.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153768372 (0x92a51b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Apr 26 09:51:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eecf9f042835455b274a631745bc3e52a19b08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:23:9e:fc:56:bb:eb:be:62:29:01:67:98:
35:88:ad:55:c9:05:c4:2c:51:44:17:0d:d2:83:c7:
fa:e6:4a:bf:85:95:ec:b8:7d:f7:95:39:81:f4:37:
c0:0e:75:4f:4d:52:33:f9:a7:5a:c1:b7:d1:3d:59:
0d:82:d4:0a:2c:38:44:07:7e:74:56:ab:27:b4:7a:
b3:f5:c1:8d:a8:37:2a:e8:81:58:f6:7e:31:8a:f9:
43:64:d7:f7:48:1d:9c:48:92:e7:0d:3a:1c:da:06:
f0:b5:61:87:4e:ce:f2:0b:b2:ae:f4:5e:9b:33:85:
e1:41:f4:89:6a:2d:7b:f5:8d:89:ef:d3:0a:5f:93:
e9:b5:c9:fd:d1:75:07:24:97:23:cb:8b:a8:9f:12:
c5:9a:29:24:4a:9a:ab:0e:f6:25:10:88:ab:e8:88:
07:18:0f:f9:44:f2:85:7c:16:45:09:c6:56:11:df:
b1:82:ce:da:11:4b:bb:7d:71:53:c3:4e:fe:e2:7c:
94:50:3c:7a:67:1f:47:b0:4a:ec:58:27:73:4c:a7:
4f:c6:74:3d:99:3f:0d:56:2f:e0:80:0a:f0:a0:ff:
b9:d0:3f:80:61:45:b5:17:77:b6:ca:10:ad:75:48:
03:4e:f8:15:ee:71:14:9b:a9:d9:81:42:71:b3:94:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:F9:F0:42:83:54:55:B2:74:A6:31:74:5B:C3:E5:2A:19:B0:8F
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/buz58EKDVFWydKYxdFvD5SoZsI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.48.0/21
82.199.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:3f:45:c6:42:7a:e6:c5:57:5f:0f:25:e3:66:70:09:f3:92:
e7:5b:22:6f:b1:b4:63:a5:26:7b:95:46:bb:fd:f9:ec:39:3f:
b0:0d:79:15:3a:f7:42:42:2d:40:a5:a0:43:ba:b9:c1:4a:c7:
bd:6e:81:b7:b6:9e:ad:8d:2d:bb:5d:26:53:f5:ad:4c:a4:b8:
6f:12:78:6f:22:19:4e:d2:0c:14:ae:c3:bf:15:f5:42:e9:77:
e2:ca:84:2f:fc:21:ce:15:0a:b8:45:08:92:e1:f3:ec:2f:46:
41:4f:84:c6:81:32:f1:05:d4:07:05:a8:37:7a:5b:f3:2c:e2:
00:2a:53:13:36:4b:54:01:b3:ff:db:a0:71:c1:8b:ba:87:03:
93:9c:ef:42:4d:a8:f6:06:25:26:da:b4:a5:17:14:00:86:6d:
ed:8a:a4:60:e0:d7:36:3c:f2:2b:cd:d4:d8:4d:7a:6c:33:33:
42:cf:60:38:48:c8:ef:6b:03:ec:30:fb:b6:3b:04:fc:cf:30:
47:f7:26:e8:fc:be:65:9f:55:c9:32:ae:ba:45:ba:12:5d:a2:
1d:38:de:78:18:56:be:10:a8:66:7c:95:bc:a4:73:da:51:ec:
40:43:2d:f1:4e:71:de:3b:6c:db:0d:be:53:a7:a8:d5:48:15:
74:fe:10:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:35:41 2025 by rpki-client