Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/DD3cCJ0FnixAxyMVbzxNAlOqKVI.roa
File: DD3cCJ0FnixAxyMVbzxNAlOqKVI.roa (raw, json)
Hash identifier: hlm9HGXKzIRtRKhx6wkGQBXMwU+yU8/ss0675NvKzjc=
Subject key identifier: 0C:3D:DC:08:9D:05:9E:2C:40:C7:23:15:6F:3C:4D:02:53:AA:29:52
Certificate issuer: /CN=090287256e25fa340d3afba780eac60d556adec0
Certificate serial: 018709EFDAB7A1D9F385362B98C63D292D2F
Authority key identifier: 09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/DD3cCJ0FnixAxyMVbzxNAlOqKVI.roa
Signing time: Wed 22 Mar 2023 15:28:46 +0000
ROA not before: Wed 22 Mar 2023 15:28:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212745
IP address blocks: 77.247.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:ef:da:b7:a1:d9:f3:85:36:2b:98:c6:3d:29:2d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090287256e25fa340d3afba780eac60d556adec0
Validity
Not Before: Mar 22 15:28:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c3ddc089d059e2c40c723156f3c4d0253aa2952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:74:1d:06:0c:35:6d:69:ba:20:00:de:e4:
89:ca:10:61:a8:5e:27:ed:4b:1b:83:e9:c9:43:62:
5e:97:65:8c:75:74:3f:47:98:23:d4:ca:5e:7e:92:
2f:76:e0:03:a4:a7:c9:4f:be:c0:59:54:6a:21:12:
fd:82:d5:78:23:b1:3b:b0:ff:5a:d0:d0:f1:e5:30:
36:4f:e8:ed:05:34:c9:a6:11:41:e0:8e:4a:f4:44:
df:77:2f:f8:db:88:1a:8e:72:9a:1d:8e:a8:f5:b2:
64:30:2f:26:ed:32:82:3d:6c:ef:7a:a0:14:0f:a9:
c8:fb:51:ad:22:08:0a:c7:7f:48:e6:aa:ff:2f:fa:
4b:1a:be:bc:f7:5a:11:df:cb:de:0a:e4:f3:34:05:
70:4e:1c:29:1a:64:11:12:4e:e0:dd:91:48:14:34:
b3:1d:53:ef:78:f5:41:8f:ff:3e:5f:d6:7d:9c:38:
c8:f6:53:54:b5:60:23:57:1b:21:f2:01:39:25:52:
6e:18:8a:39:ae:b4:0e:69:87:fa:0d:12:39:3f:aa:
9d:51:33:75:9b:ab:0c:70:06:03:25:61:c9:2b:6a:
51:fd:ba:1a:c0:79:22:69:ca:30:f7:c2:04:4b:e7:
7f:90:63:61:71:b0:77:c8:9a:72:fe:17:e1:e7:e6:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3D:DC:08:9D:05:9E:2C:40:C7:23:15:6F:3C:4D:02:53:AA:29:52
X509v3 Authority Key Identifier:
keyid:09:02:87:25:6E:25:FA:34:0D:3A:FB:A7:80:EA:C6:0D:55:6A:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQKHJW4l-jQNOvungOrGDVVq3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/DD3cCJ0FnixAxyMVbzxNAlOqKVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b0ff5-84c3-49bb-9fab-77b21c04bc7d/1/CQKHJW4l-jQNOvungOrGDVVq3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.193.0/24
Signature Algorithm: sha256WithRSAEncryption
82:46:89:81:b6:70:e5:74:d7:7e:c9:5f:06:76:74:8e:93:37:
17:bc:7c:b9:af:5c:b8:b4:5e:28:21:4a:2b:1a:dc:52:63:c7:
e6:22:d6:3b:ee:a4:c6:e7:51:5a:72:39:2e:3e:64:68:53:e0:
13:e9:77:6a:c8:6b:e0:1d:b2:02:ce:17:e5:1f:11:9e:5a:a4:
40:14:0b:b7:58:a9:55:aa:fa:69:80:69:82:c7:8b:09:8c:28:
b5:17:7c:82:4c:60:2e:ea:a7:21:12:ca:b8:a8:d5:46:58:93:
37:ef:15:86:27:27:11:50:ed:e1:50:d8:4f:00:a0:55:be:78:
e7:38:d8:78:d7:34:3f:50:c8:97:5c:a2:55:0d:99:d6:96:95:
06:89:0a:fc:a4:e5:ac:4a:06:0a:45:13:dc:25:ba:45:78:2c:
cc:f2:5f:1c:60:bc:9c:fd:70:e2:1b:e0:10:9b:9f:5c:87:d8:
65:5b:f0:c2:67:64:b0:1f:10:43:5d:2f:27:0f:32:d8:dc:96:
a8:83:58:31:07:85:0b:59:29:93:b1:3e:ba:43:cd:eb:c2:80:
63:0a:f0:8b:23:aa:da:e3:70:49:fa:17:f0:be:41:e0:33:8f:
68:b3:eb:d3:a2:6d:b6:ba:87:9f:68:d9:72:51:2a:02:9b:c2:
de:a4:c9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:31:42 2025 by rpki-client