Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ijOMu7IMKeGbkCrKloaEvqT8XHY.roa
File: ijOMu7IMKeGbkCrKloaEvqT8XHY.roa (raw, json)
Hash identifier: SBRfksiTztbyRPbk58/K0ZHAz0Z7TDXQUHKKLe2IdaE=
Subject key identifier: 8A:33:8C:BB:B2:0C:29:E1:9B:90:2A:CA:96:86:84:BE:A4:FC:5C:76
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0185E8A7E32B3A3373EADE085321DA0CDAB0
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ijOMu7IMKeGbkCrKloaEvqT8XHY.roa
Signing time: Wed 25 Jan 2023 11:19:54 +0000
ROA not before: Wed 25 Jan 2023 11:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8866
IP address blocks: 87.119.104.0/23 maxlen: 23
87.119.100.0/22 maxlen: 22
87.119.127.0/24 maxlen: 24
87.119.64.0/21 maxlen: 21
77.77.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:a7:e3:2b:3a:33:73:ea:de:08:53:21:da:0c:da:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 25 11:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a338cbbb20c29e19b902aca968684bea4fc5c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:c7:c5:86:36:22:d4:59:44:b5:f3:b3:bb:
41:55:73:cb:c9:b0:d8:dc:0d:fd:12:3b:e1:24:70:
6d:f9:97:e2:7b:f5:0b:20:de:ed:5a:39:13:f5:9b:
cd:29:f5:98:62:b1:9b:71:7f:d3:90:29:5a:41:ca:
d3:fd:63:53:c2:a7:5c:0c:78:ed:a5:d9:87:bc:e8:
19:82:55:20:3a:45:51:c3:79:6a:4c:76:9f:33:7d:
a9:28:2b:4e:60:35:53:a5:3b:0f:b7:2f:97:2c:3e:
a6:5d:88:0b:87:76:65:77:01:ae:2a:e9:41:ec:5d:
d6:dd:0a:93:7d:e8:81:06:d5:96:a4:70:60:5b:b6:
8a:bd:3d:eb:e5:6d:9a:59:7b:c4:1f:48:b2:4e:a2:
9b:ec:2c:51:72:c2:48:3d:90:d7:e5:14:fa:07:57:
1c:2d:4d:cb:54:79:31:3b:eb:aa:5e:f9:93:1b:2b:
e4:b8:f9:c2:86:a2:b9:e4:9f:df:cc:dc:7a:4a:90:
9e:3a:67:2b:37:d6:9c:4f:4e:12:83:d8:e7:f9:5a:
3b:61:da:ea:ab:80:f5:c8:8a:b4:37:b4:d6:39:bb:
55:f2:11:d0:da:27:50:e6:81:23:e7:dc:2c:7a:b5:
67:45:e4:a5:b8:63:60:d6:98:cb:7e:58:19:d2:c3:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:8C:BB:B2:0C:29:E1:9B:90:2A:CA:96:86:84:BE:A4:FC:5C:76
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ijOMu7IMKeGbkCrKloaEvqT8XHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.164.0/22
87.119.64.0/21
87.119.100.0-87.119.105.255
87.119.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:1e:15:ca:02:c7:2a:55:01:04:05:66:0c:7f:55:1e:2f:e0:
01:cb:21:95:23:90:6f:86:51:ac:95:73:6f:04:45:c7:bb:85:
2b:d6:f7:03:a5:98:cc:1d:a0:51:bf:4a:f9:46:42:73:61:7a:
0e:88:0a:87:1c:d8:0b:b2:52:15:09:e8:ca:92:c4:87:01:c3:
ab:db:ea:6b:db:4e:44:fc:6b:03:d2:60:8b:10:87:f7:a9:8e:
09:c8:25:8c:47:e4:53:e1:e5:b9:33:11:55:84:52:86:36:d5:
66:50:dd:1d:c9:30:94:c4:ea:99:ad:c3:d7:97:f7:37:e1:5a:
e6:a0:c7:c4:91:88:3e:a1:f8:97:87:26:82:11:39:78:92:60:
d4:20:af:6e:af:81:f7:1f:83:52:89:27:20:77:87:fd:6e:e5:
25:5e:b2:dd:fb:09:2e:a4:a2:ff:25:6f:cb:76:fa:71:8e:98:
95:c8:28:1a:83:00:bc:c7:ca:2d:bc:0f:76:6c:f4:55:82:24:
ea:2a:17:fa:d8:0f:5f:06:e2:c5:37:ad:da:5b:17:33:a8:81:
85:08:a2:40:34:8c:51:a3:d4:85:d8:17:9a:d5:2c:bc:52:60:
9a:3b:43:77:5e:92:eb:e9:b0:0b:7e:9f:d7:ba:cd:e7:16:a0:
b7:53:45:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:17:01 2025 by rpki-client