Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/3L54Y6m_vMnXjlYLYqCMaoFR83s.roa
File: 3L54Y6m_vMnXjlYLYqCMaoFR83s.roa (raw, json)
Hash identifier: LHZXEzlhJe0osnG9TOsiPziCuiXhoRQUcoQtfwmXfQ4=
Subject key identifier: DC:BE:78:63:A9:BF:BC:C9:D7:8E:56:0B:62:A0:8C:6A:81:51:F3:7B
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 018C3965151B989E7A57AD2E343D1B46F8E4
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/3L54Y6m_vMnXjlYLYqCMaoFR83s.roa
Signing time: Tue 05 Dec 2023 09:52:54 +0000
ROA not before: Tue 05 Dec 2023 09:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48506
IP address blocks: 178.76.64.0/21 maxlen: 24
178.76.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:65:15:1b:98:9e:7a:57:ad:2e:34:3d:1b:46:f8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Dec 5 09:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcbe7863a9bfbcc9d78e560b62a08c6a8151f37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:e5:3c:ce:b8:ba:b7:eb:95:81:0b:51:33:
34:04:22:c1:95:b4:45:a9:28:7c:aa:64:4b:9e:c8:
68:cf:51:f0:2a:d3:68:6d:2e:2d:63:23:56:2f:7f:
e1:a0:32:69:34:9e:0d:f4:ac:76:56:b5:f6:6e:5b:
0c:b2:30:e6:09:13:50:64:a6:a1:8d:c8:d4:f7:53:
0a:18:e9:04:95:56:e0:ab:46:c0:69:87:8b:18:67:
4f:f1:a6:4e:3b:ea:2a:1e:bc:b4:53:34:88:ef:17:
69:e4:9a:03:b3:69:a1:cc:dd:de:c8:a0:8e:4f:a3:
6c:cd:66:e4:74:2f:b5:da:11:64:59:25:02:cd:c8:
60:a1:06:6f:28:2f:1c:19:e8:37:bb:f8:31:26:92:
36:ef:e9:ff:b9:29:eb:f2:50:4d:bd:5e:71:6a:ff:
ac:d0:81:30:b0:af:2a:86:9f:4b:f6:cc:52:4e:51:
68:7c:55:cf:48:48:07:66:01:92:6d:8e:b9:ea:f8:
01:5e:07:de:b1:4f:34:d6:16:55:df:c9:7f:3a:2b:
b4:ee:ba:e1:fa:4f:70:ab:6b:9a:0c:5f:34:d7:30:
8d:b2:22:a6:13:1d:39:36:dc:8b:a2:00:2b:7a:fb:
f1:89:d3:ba:69:cb:5e:26:da:9a:ab:24:e1:b2:8f:
7e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BE:78:63:A9:BF:BC:C9:D7:8E:56:0B:62:A0:8C:6A:81:51:F3:7B
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/3L54Y6m_vMnXjlYLYqCMaoFR83s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.76.64.0-178.76.75.255
Signature Algorithm: sha256WithRSAEncryption
96:5a:85:70:84:a2:42:b7:34:6f:60:be:8a:93:12:10:aa:10:
77:ba:9e:8a:15:bd:e0:20:73:17:d6:ba:0f:83:86:66:49:d3:
12:53:f8:44:9b:87:a1:6c:e8:d8:ff:65:6a:72:52:49:79:c1:
25:98:9a:7c:b4:a2:b2:38:02:9c:b4:6f:93:c0:2e:ca:6c:58:
e5:07:47:f3:ae:04:91:04:d6:39:7a:17:5a:74:aa:00:37:c7:
6a:3f:b8:ed:9f:d8:33:ef:b9:fc:6d:ae:ce:ce:3d:45:b6:af:
88:2f:cd:08:76:9b:b4:fe:82:e6:87:6a:b2:22:d1:08:71:34:
a8:7d:13:c0:46:9e:88:52:ae:e6:22:f8:a0:4d:31:2c:f3:26:
18:09:5d:76:c4:60:68:8e:6f:50:35:da:96:95:11:14:03:6b:
54:03:03:e5:09:d6:7b:34:ed:4d:31:00:e7:37:97:a2:60:cd:
f4:34:26:5b:9c:b8:f4:bb:b8:8e:62:81:82:04:2a:ee:39:e7:
ca:f4:fb:20:38:df:e1:36:2e:ea:14:42:34:86:de:fd:b3:b7:
8b:c2:d2:b6:05:19:da:27:bd:44:46:a1:08:c3:1c:c0:91:80:
a6:38:cd:68:66:db:c7:c8:c4:af:d6:24:cf:a6:bb:34:9b:c0:
5d:5a:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:04 2025 by rpki-client