Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/9ZqVj3B81Azvi-lk9CmeRPU1lT4.roa
File: 9ZqVj3B81Azvi-lk9CmeRPU1lT4.roa (raw, json)
Hash identifier: wP6l/i+y/HLHyMVgaWzs0Ia5HLi8ZTszuzdZA3PEIMk=
Subject key identifier: F5:9A:95:8F:70:7C:D4:0C:EF:8B:E9:64:F4:29:9E:44:F5:35:95:3E
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 04A8CDE2
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/9ZqVj3B81Azvi-lk9CmeRPU1lT4.roa
Signing time: Fri 11 Mar 2022 06:23:56 +0000
ROA not before: Fri 11 Mar 2022 06:23:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29667
IP address blocks: 84.22.27.0/24 maxlen: 24
84.22.28.0/24 maxlen: 24
84.22.25.0/24 maxlen: 24
78.130.136.0/22 maxlen: 22
78.130.142.0/24 maxlen: 24
78.130.140.0/23 maxlen: 23
84.22.2.0/23 maxlen: 23
84.22.4.0/23 maxlen: 23
87.116.96.0/20 maxlen: 20
89.25.112.0/22 maxlen: 22
89.25.118.0/24 maxlen: 24
89.25.112.0/21 maxlen: 21
89.25.116.0/23 maxlen: 23
89.25.16.0/22 maxlen: 22
89.25.24.0/21 maxlen: 21
87.118.142.0/24 maxlen: 24
89.25.26.0/23 maxlen: 23
89.25.28.0/22 maxlen: 22
89.25.25.0/24 maxlen: 24
87.118.156.0/22 maxlen: 22
78.130.132.0/22 maxlen: 22
213.145.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78171618 (0x4a8cde2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Mar 11 06:23:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f59a958f707cd40cef8be964f4299e44f535953e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:86:e0:c5:c9:2d:1f:7d:88:78:74:71:81:
24:16:64:6d:23:fb:92:6f:4d:50:19:fd:39:be:2f:
64:92:d1:3d:16:d3:d3:c4:ca:2c:db:aa:31:2b:62:
ab:8d:c7:1f:6c:c2:bd:55:50:59:6c:e9:3c:c3:47:
12:a8:97:f4:78:dc:b0:b4:83:fb:6b:96:56:86:04:
d8:f1:11:2f:ad:8a:61:2e:e8:e4:97:6a:68:65:8f:
bc:81:f3:e6:6b:26:55:bb:04:76:fa:b4:74:d9:aa:
aa:1a:a4:e9:35:10:50:70:bc:13:e6:65:e5:7e:bd:
69:57:c1:89:d7:ab:01:42:a2:24:02:93:89:5b:ab:
e8:88:e2:13:d5:9a:df:4c:76:dd:be:b1:a1:e7:98:
75:75:8b:8a:93:48:c0:43:91:53:ac:7e:68:a1:14:
0c:fc:bf:a9:ee:75:eb:ad:81:fe:e2:2f:73:75:f2:
62:6f:7f:a1:93:87:99:ec:c3:5b:70:75:f8:66:90:
a2:37:0b:27:a5:41:6f:5b:40:cc:db:f0:f0:fa:b6:
3b:fa:4d:b9:a4:08:43:0e:d9:f7:91:46:f7:76:a6:
8f:ad:99:5c:ed:cf:58:71:82:23:3c:b7:20:f6:46:
60:99:a4:c0:a5:9c:f4:a8:7d:cd:6f:ce:11:f3:50:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9A:95:8F:70:7C:D4:0C:EF:8B:E9:64:F4:29:9E:44:F5:35:95:3E
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/9ZqVj3B81Azvi-lk9CmeRPU1lT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.132.0-78.130.142.255
84.22.2.0-84.22.5.255
84.22.25.0/24
84.22.27.0-84.22.28.255
87.116.96.0/20
87.118.142.0/24
87.118.156.0/22
89.25.16.0/22
89.25.24.0/21
89.25.112.0/21
213.145.105.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f5:3a:39:bc:2e:e9:fd:fa:48:cf:81:25:00:d6:92:4b:52:
91:35:b8:03:7f:ff:e0:59:a7:b2:84:29:f5:a1:4d:01:a3:b1:
f7:d3:66:04:df:7f:57:b3:27:3a:51:29:b3:19:b3:af:35:38:
5c:bb:7f:fe:c7:12:f1:8c:8a:99:60:ae:f9:26:7f:bf:bc:c3:
40:e0:e4:d4:07:80:77:c8:1e:47:6e:58:ef:f5:0b:86:7a:5f:
25:2f:ea:36:5a:ac:da:9e:84:23:1c:e5:7e:82:97:4b:c8:df:
f0:dc:b2:02:ee:31:47:d1:d6:22:27:9e:9e:b4:4f:21:6c:42:
3f:75:d7:0e:83:18:d8:17:c5:b2:b0:36:68:51:6c:c8:46:ad:
85:64:89:1e:c2:8a:f7:81:39:d7:ff:c5:12:4b:80:e0:ea:1c:
d7:15:d0:cd:b7:cb:1c:40:63:01:38:bd:e8:bb:f6:32:f5:89:
6b:da:05:2f:61:9e:f7:2d:9d:26:31:fa:d4:9c:2d:70:f0:76:
b3:e3:41:73:58:80:85:d9:ab:6c:e2:98:49:b9:22:a9:d5:50:
5a:cb:1c:86:84:44:98:22:5d:2d:61:fb:9d:a7:b2:c7:8e:1f:
82:fd:49:46:76:a0:da:21:3f:e6:bd:36:bd:d6:75:19:d2:c7:
aa:ec:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net