Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/7K8dHLR3W5yWloQonEd5v4zDkKY.roa
File: 7K8dHLR3W5yWloQonEd5v4zDkKY.roa (raw, json)
Hash identifier: G0QCGsarf9ldFZ4O1I3dwC28Ze6vQ1fQFtT7Rpm8UxU=
Subject key identifier: EC:AF:1D:1C:B4:77:5B:9C:96:96:84:28:9C:47:79:BF:8C:C3:90:A6
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 018262DC084C14B8C4C1F7692CAF2721B219
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/7K8dHLR3W5yWloQonEd5v4zDkKY.roa
Signing time: Wed 03 Aug 2022 08:39:23 +0000
ROA not before: Wed 03 Aug 2022 08:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200107
IP address blocks: 185.85.15.0/24 maxlen: 24
185.85.14.0/24 maxlen: 24
185.85.12.0/24 maxlen: 24
185.54.222.0/24 maxlen: 24
185.54.220.0/24 maxlen: 24
93.159.226.0/24 maxlen: 24
93.159.230.0/23 maxlen: 23
93.159.228.0/23 maxlen: 24
77.74.178.0/23 maxlen: 24
77.74.176.0/24 maxlen: 24
77.74.176.0/23 maxlen: 24
82.202.185.0/24 maxlen: 24
82.202.184.0/23 maxlen: 23
82.202.184.0/24 maxlen: 24
77.74.182.0/24 maxlen: 24
77.74.183.0/24 maxlen: 24
77.74.180.0/24 maxlen: 24
77.74.181.0/24 maxlen: 24
2a03:2480:802f::/48 maxlen: 48
2a03:2480:802a::/48 maxlen: 48
2a03:2480:8025::/48 maxlen: 48
2a03:2480:8020::/48 maxlen: 48
2a03:2480:80::/48 maxlen: 48
2a03:2480:8023::/48 maxlen: 48
2a03:2480:8027::/48 maxlen: 48
2a03:2480:8022::/48 maxlen: 48
2a03:2480:8000::/44 maxlen: 44
2a03:2480:8031::/48 maxlen: 48
2a03:2480:802c::/48 maxlen: 48
2a03:2480:70::/48 maxlen: 48
2a03:2480:8030::/48 maxlen: 48
2a03:2480:8033::/48 maxlen: 48
2a03:2480:802e::/48 maxlen: 48
2a03:2480:8029::/48 maxlen: 48
2a03:2480:69::/48 maxlen: 48
2a03:2480:8024::/48 maxlen: 48
2a03:2480:8032::/48 maxlen: 48
2a03:2480:802d::/48 maxlen: 48
2a03:2480:8010::/44 maxlen: 44
2a03:2480:8028::/48 maxlen: 48
2a03:2480:68::/48 maxlen: 48
2a03:2480:802b::/48 maxlen: 48
2a03:2480:8026::/48 maxlen: 48
2a03:2480:8021::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:dc:08:4c:14:b8:c4:c1:f7:69:2c:af:27:21:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Aug 3 08:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecaf1d1cb4775b9c969684289c4779bf8cc390a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:09:76:cd:b5:e1:a7:4c:d1:42:b6:21:47:
c6:04:11:4b:a8:c8:4b:85:ef:2f:2e:57:8b:79:36:
a1:97:15:9f:d2:67:b9:1d:3a:58:98:87:84:0f:81:
23:d7:de:85:98:2d:b1:90:42:c0:48:7f:8d:1b:39:
80:3c:62:c5:bd:f0:ea:7a:12:9d:19:6e:25:7c:d1:
6d:f4:b6:95:9a:3b:53:1a:b6:b3:0f:3d:0d:e5:ce:
d2:e6:06:87:cb:50:53:85:0f:ba:c8:d4:f4:2d:48:
64:e2:cb:e2:96:98:fe:e2:88:f9:28:8c:ef:29:66:
6b:6c:58:99:3e:55:12:a0:3b:0f:14:7e:7e:d1:b3:
3c:09:76:e9:b3:7d:60:98:71:37:a3:9f:6c:7c:01:
23:ee:a4:3c:ce:18:1b:a8:43:80:27:66:df:a1:cc:
9e:31:6c:8a:7a:ab:f6:05:0d:c3:31:6b:6e:b8:6d:
ec:1a:21:8a:2d:7d:e8:e3:a7:d2:f2:77:fc:c7:21:
ce:8f:8c:7b:be:e3:57:fa:fe:31:8c:f8:26:a3:20:
2e:a2:e3:3c:69:bc:39:d3:e4:55:1a:13:12:0d:b5:
cc:c8:b8:5b:06:6b:49:8b:e4:84:5f:4d:eb:e1:5c:
86:aa:0a:ee:0e:30:ec:99:16:af:fa:67:59:85:ef:
94:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AF:1D:1C:B4:77:5B:9C:96:96:84:28:9C:47:79:BF:8C:C3:90:A6
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/7K8dHLR3W5yWloQonEd5v4zDkKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.176.0/21
82.202.184.0/23
93.159.226.0/24
93.159.228.0/22
185.54.220.0/24
185.54.222.0/24
185.85.12.0/24
185.85.14.0/23
IPv6:
2a03:2480:68::/47
2a03:2480:70::/48
2a03:2480:80::/48
2a03:2480:8000::-2a03:2480:8033:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:8d:ca:41:29:d3:3f:d4:e4:96:76:4d:1a:bf:01:58:a9:b7:
a3:b0:46:10:4f:7b:9a:bd:49:d5:56:83:a2:ba:10:65:75:0b:
9c:cc:56:31:29:a7:d8:e3:7d:d8:c3:ad:d8:62:fc:85:e3:41:
99:72:7d:cc:d8:ed:01:2b:62:ef:ac:14:f0:f8:8d:74:73:c8:
f7:11:50:21:3f:65:2d:a0:27:62:aa:51:56:ac:d8:95:66:66:
24:8f:05:3a:16:6c:0b:8a:74:c2:8f:1d:04:dd:c0:8a:86:c0:
f7:d3:79:26:c1:95:d3:70:ff:0d:82:df:61:7f:f1:34:78:93:
77:d9:5d:ca:12:05:8f:8b:54:98:5f:8e:f7:21:d5:9e:8d:27:
aa:c7:eb:2b:c1:24:dd:1c:76:f4:94:1e:ba:36:11:ab:b4:a9:
89:79:27:1a:21:df:62:5b:ba:ac:57:7b:eb:61:cf:d0:b1:2e:
9c:85:f7:f3:06:b2:76:71:22:f1:85:d9:36:d3:08:e9:24:51:
76:89:a6:62:5d:80:04:16:d1:ca:01:1d:39:22:1c:e4:f6:91:
66:dc:91:60:e4:21:7b:94:bf:e0:15:7e:da:a6:b5:6b:95:5b:
b0:73:f2:a2:65:84:97:77:80:11:03:e9:d2:81:30:7d:18:20:
3e:55:4d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net