Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/6h3G_Z-d_F4plQOrVkK7nMTMzsE.roa
File: 6h3G_Z-d_F4plQOrVkK7nMTMzsE.roa (raw, json)
Hash identifier: A4g+iJp73HKLOZUB9dLwDGDl6UrKxQKgx75xovmCE1I=
Subject key identifier: EA:1D:C6:FD:9F:9D:FC:5E:29:95:03:AB:56:42:BB:9C:C4:CC:CE:C1
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018321FBF2F398D48521699C871002A99286
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/6h3G_Z-d_F4plQOrVkK7nMTMzsE.roa
Signing time: Fri 09 Sep 2022 11:21:43 +0000
ROA not before: Fri 09 Sep 2022 11:21:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203671
IP address blocks: 147.78.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:fb:f2:f3:98:d4:85:21:69:9c:87:10:02:a9:92:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Sep 9 11:21:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea1dc6fd9f9dfc5e299503ab5642bb9cc4cccec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:aa:f7:20:8f:82:99:9e:08:8b:ba:f1:16:
d4:10:a6:e1:b7:ac:85:30:55:8b:77:f0:02:f5:b7:
3b:80:7c:73:9b:8e:94:af:f4:43:4b:37:11:33:e4:
42:1f:e1:27:e6:da:fb:49:0a:77:4d:85:7d:e9:95:
cb:85:64:f8:8d:f3:43:40:08:66:c3:aa:30:19:b9:
88:23:40:30:da:ea:a9:58:07:ed:30:54:92:14:e8:
15:b8:10:6b:56:a6:7f:82:fb:2d:9b:c4:89:95:65:
3c:73:12:5d:95:53:11:53:41:10:8d:03:4d:ba:4a:
85:fd:21:f5:74:18:a6:69:f1:0a:48:41:6f:2e:c2:
6e:81:52:18:01:ae:15:06:41:bd:78:00:b9:c5:fc:
4d:08:f1:27:07:15:05:f4:53:ea:37:a9:ad:b6:37:
76:96:75:e3:e0:a2:96:dc:e3:77:ce:c5:ea:43:4d:
4e:ff:1b:92:f3:35:7b:dc:34:e1:77:f3:10:58:70:
a3:3d:0c:e1:db:88:ff:7c:76:b4:67:98:e7:c5:97:
ec:9b:52:93:10:39:29:f6:ab:24:ad:f2:04:73:dd:
85:79:86:87:eb:85:49:5c:06:73:b7:ee:0b:02:49:
0c:b8:28:b5:da:04:e3:77:13:5e:5e:10:d4:f0:4a:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:C6:FD:9F:9D:FC:5E:29:95:03:AB:56:42:BB:9C:C4:CC:CE:C1
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/6h3G_Z-d_F4plQOrVkK7nMTMzsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.216.0/24
Signature Algorithm: sha256WithRSAEncryption
28:84:e3:65:41:75:02:12:5a:5a:6e:b2:97:69:3a:64:32:6a:
c6:ca:ee:45:78:60:68:95:17:e5:cd:d6:55:e3:ed:f7:12:17:
3f:57:ad:7b:56:91:b4:64:02:40:51:ca:5f:66:3d:6f:42:32:
0b:2a:02:26:78:b2:0e:88:49:6b:fc:84:9a:52:9d:3b:10:4e:
b2:9b:18:8b:65:11:3e:b6:d1:49:dc:52:b0:43:df:b7:32:f8:
d5:96:d2:65:31:ee:cb:5c:60:b3:b0:5a:53:d8:d0:62:2c:96:
25:66:c1:58:25:56:47:b7:79:f8:4b:d4:e8:8f:17:cb:6e:61:
f0:5a:f6:51:d9:28:d0:15:f5:ae:d4:2c:38:f9:d9:b5:8e:48:
5c:68:6e:5e:44:e8:56:0e:7b:1d:67:42:6c:75:24:5e:ad:63:
31:19:fb:9a:1e:c2:15:fb:b3:ee:6c:93:d7:32:d6:21:74:b3:
86:7a:cb:fc:c8:90:06:d3:50:d6:20:5a:6a:c9:66:21:5a:2f:
67:ad:ca:d7:1f:89:66:74:aa:eb:5c:75:88:c1:cd:28:69:82:
85:4e:05:b3:5a:04:e7:40:7d:f8:94:78:82:be:cc:c6:53:52:
9f:a4:df:c0:73:b8:0d:cd:ea:f2:71:46:b2:5a:a7:6e:7d:45:
cf:f0:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:35 2025 by rpki-client