Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/_SqM8xlvILAOuJnaIu6X-DPoYB8.roa
File: _SqM8xlvILAOuJnaIu6X-DPoYB8.roa (raw, json)
Hash identifier: GUszY68K4wUFmMtFNMSadTygaS6633KszpIAetr40wM=
Subject key identifier: FD:2A:8C:F3:19:6F:20:B0:0E:B8:99:DA:22:EE:97:F8:33:E8:60:1F
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01856FA6EC210F49CB44EC283607FFE06200
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/_SqM8xlvILAOuJnaIu6X-DPoYB8.roa
Signing time: Sun 01 Jan 2023 23:24:48 +0000
ROA not before: Sun 01 Jan 2023 23:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35534
IP address blocks: 178.175.162.0/23 maxlen: 24
178.175.160.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:ec:21:0f:49:cb:44:ec:28:36:07:ff:e0:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 23:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd2a8cf3196f20b00eb899da22ee97f833e8601f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:ea:eb:4e:04:d0:b5:27:5b:8a:ef:be:49:
24:ca:65:e6:fd:e5:cd:ed:6f:74:8d:be:c4:10:45:
26:61:ff:4f:62:ae:d8:3b:cd:9e:f0:6d:93:7f:6f:
f3:e8:27:e3:a2:a9:73:72:f1:48:0c:51:2e:1f:77:
93:90:15:52:11:44:72:a3:8d:2d:12:af:da:33:75:
1c:a3:32:3c:c1:a4:15:5a:58:88:51:7f:c6:3f:69:
e0:e5:3e:45:ec:42:ab:a2:e4:c9:fb:20:f6:81:c6:
81:4d:ff:19:f3:ad:88:75:b5:2a:78:16:cb:ec:63:
12:2e:39:52:03:b5:87:85:07:a7:1a:6d:35:d4:59:
db:d4:af:6b:f6:d9:4b:c2:dd:63:7c:2b:99:a6:9c:
2c:35:93:f1:7b:58:a3:35:a9:13:1b:8f:27:94:27:
9b:0e:96:19:95:cd:26:1c:00:70:3e:eb:42:eb:c4:
98:03:1a:6c:71:8f:e2:5f:68:3e:8a:ad:b9:53:c4:
d5:fe:e6:73:3f:58:98:3d:52:d7:7f:3a:80:45:c7:
0a:62:23:24:99:a6:6d:c7:db:c4:c2:61:82:b7:a1:
09:30:67:09:99:60:cb:da:f3:91:17:fe:6f:32:f6:
42:c7:c2:7c:6e:d9:8a:0c:0c:a0:4b:51:c2:cc:4b:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2A:8C:F3:19:6F:20:B0:0E:B8:99:DA:22:EE:97:F8:33:E8:60:1F
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/_SqM8xlvILAOuJnaIu6X-DPoYB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.160.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:3a:91:e4:61:bf:29:c4:b0:79:f9:45:7e:53:bc:66:9f:df:
20:d7:d6:34:e6:f8:03:51:16:de:55:b0:6b:94:fd:d4:0b:4b:
e2:65:bd:d4:ff:10:9c:59:ce:c2:e5:50:c0:39:36:db:b3:a8:
9a:e3:a9:f6:be:91:2f:0d:ff:ba:4e:8b:83:59:74:7b:4d:20:
f4:22:52:ce:da:de:66:54:3d:1c:5e:e6:19:6e:df:1e:c1:e6:
b3:d9:d7:13:0c:e2:e4:48:65:9e:54:29:bc:41:21:48:c8:6a:
10:93:4c:01:d8:6f:a0:00:e0:b5:db:e9:f0:de:9b:93:12:de:
f6:2e:8e:67:a1:95:09:0f:76:e4:b6:20:be:3a:0a:d0:54:35:
59:c6:85:20:af:9a:65:4c:04:57:06:63:fb:58:da:4f:92:0e:
54:ec:1c:83:be:9b:e5:6f:f2:ba:4e:94:b7:32:ab:09:99:d8:
e2:15:63:9d:a1:bb:31:eb:2d:5f:58:43:19:03:12:91:14:4a:
f6:da:8d:00:ed:a7:ba:5e:c7:4b:88:6d:4c:bc:de:e8:bd:c0:
1d:92:ac:7c:f5:44:14:ea:e1:4c:80:08:b3:56:d7:98:f6:a7:
6d:ca:af:22:3c:06:a9:4c:06:06:dc:e3:71:71:80:54:10:f8:
0b:47:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:54 2025 by rpki-client