Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/kyegPfZLGE35nYRx1qVzd-IvXKo.roa
File: kyegPfZLGE35nYRx1qVzd-IvXKo.roa (raw, json)
Hash identifier: 4ZVZFJFiL15E6dwdvjb07GEEkPhYanMSyiJn2o0CLgg=
Subject key identifier: 93:27:A0:3D:F6:4B:18:4D:F9:9D:84:71:D6:A5:73:77:E2:2F:5C:AA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 01856C9CA4573797AF0E065C12B542EF30CD
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/kyegPfZLGE35nYRx1qVzd-IvXKo.roa
Signing time: Sun 01 Jan 2023 09:14:43 +0000
ROA not before: Sun 01 Jan 2023 09:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51664
IP address blocks: 78.40.90.0/24 maxlen: 24
78.40.89.0/24 maxlen: 24
78.40.88.0/24 maxlen: 24
78.40.91.0/24 maxlen: 24
78.40.93.0/24 maxlen: 24
78.40.92.0/24 maxlen: 24
78.40.95.0/24 maxlen: 24
78.40.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:a4:57:37:97:af:0e:06:5c:12:b5:42:ef:30:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Jan 1 09:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9327a03df64b184df99d8471d6a57377e22f5caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:16:1f:a2:07:73:02:80:cc:d3:1f:fa:75:d8:
10:45:04:c6:15:6a:33:cc:ff:d8:b6:22:be:c5:cc:
1a:06:ab:67:ee:8f:39:7f:de:fb:03:18:b6:ed:04:
9b:7f:2e:8d:84:8b:64:05:5f:90:79:dc:05:57:22:
03:1c:59:3d:54:71:87:0b:8f:28:0e:40:94:8e:60:
b6:a1:81:ba:aa:a5:e1:0c:76:f3:b4:8b:d8:c7:3e:
1e:e6:de:a6:c3:11:4d:91:54:12:31:76:9e:63:e0:
ce:d0:08:fd:a9:77:a0:d0:13:10:c5:60:d7:99:df:
33:b1:41:e8:2e:52:14:d0:97:13:ba:c2:d0:01:89:
4f:1e:45:10:9b:52:a3:4b:7d:e9:31:80:03:4d:36:
8c:5a:7a:14:2e:03:49:41:c4:e3:0d:14:07:b5:e7:
42:9c:84:3a:cd:79:9a:74:69:26:75:a3:5b:a2:00:
3b:fb:a6:14:b1:ee:71:7c:af:7f:44:af:fd:11:d0:
5e:94:65:3f:17:9c:1b:9d:b1:d1:87:27:ee:51:0e:
95:7d:9b:1c:d1:b4:aa:cf:98:a1:d1:a5:13:2f:0f:
bc:a5:59:ff:dc:38:93:bc:b0:e5:2e:9a:93:d2:1b:
ba:af:a6:b8:ba:61:45:df:77:aa:ee:fa:5b:4c:4a:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:A0:3D:F6:4B:18:4D:F9:9D:84:71:D6:A5:73:77:E2:2F:5C:AA
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/kyegPfZLGE35nYRx1qVzd-IvXKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.88.0/21
Signature Algorithm: sha256WithRSAEncryption
74:c2:0c:3a:a5:8c:ef:65:40:99:b5:43:45:ae:7d:19:6f:0e:
b1:0b:8c:cb:a8:fb:7c:b1:86:c3:55:08:5f:a1:70:ba:d6:1c:
42:65:ad:60:9c:b3:13:b6:78:85:5f:26:cc:24:d4:39:11:d7:
50:d0:77:ab:0d:45:5b:b0:ba:65:ce:44:b5:88:ee:7c:9a:83:
db:09:a8:fd:b5:2e:d7:a3:61:94:f5:55:39:1c:17:12:28:42:
bb:ca:5b:65:62:c3:4b:85:53:ef:ca:db:d1:2e:f2:56:c0:aa:
8e:41:d0:de:cb:36:51:5a:51:7e:36:57:db:af:df:80:e2:87:
87:ea:23:48:e1:84:33:ea:b4:0b:48:b1:d7:f9:ef:32:78:3e:
d2:11:0a:e0:aa:44:59:0e:e9:aa:a1:46:7f:83:1a:c7:97:16:
81:25:aa:10:0d:5f:99:1d:74:29:0a:2e:fa:7c:99:f3:9a:83:
32:b2:24:67:40:46:25:85:76:cf:90:a3:82:d5:ae:21:4a:87:
cc:18:e4:f8:11:1f:15:03:0e:99:e3:49:05:ce:bb:8e:50:56:
77:e6:71:33:74:37:8b:2b:b6:5a:cd:7c:72:06:93:39:a4:ac:
f1:b9:d7:06:31:ab:f6:87:8e:ff:55:23:d5:09:48:46:4b:ad:
5f:8b:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:33:52 2025 by rpki-client