Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/etOQXJPyifTZ3IQE90ONvUXretY.roa
File: etOQXJPyifTZ3IQE90ONvUXretY.roa (raw, json)
Hash identifier: MiGgxPtC7VgfVT/z78N6CffwEa1oDO/YvnwJW91StbY=
Subject key identifier: 7A:D3:90:5C:93:F2:89:F4:D9:DC:84:04:F7:43:8D:BD:45:EB:7A:D6
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 018A93687133D30866123DA50ABD1300BFB3
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/etOQXJPyifTZ3IQE90ONvUXretY.roa
Signing time: Thu 14 Sep 2023 11:16:50 +0000
ROA not before: Thu 14 Sep 2023 11:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216303
IP address blocks: 178.175.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:68:71:33:d3:08:66:12:3d:a5:0a:bd:13:00:bf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Sep 14 11:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ad3905c93f289f4d9dc8404f7438dbd45eb7ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:44:fc:f8:b9:73:a0:13:1f:78:55:52:c5:16:
18:03:6a:22:cb:e6:82:74:a7:69:7a:9f:4d:74:af:
73:7f:4d:e3:e8:24:5b:8f:aa:1c:5b:03:95:d8:e8:
5b:39:d6:c8:65:13:89:3a:3f:d1:35:05:2c:78:9a:
de:61:93:58:9f:57:7d:14:61:a9:a1:9e:58:4d:f8:
56:ad:eb:6c:7d:d6:b3:e5:4a:99:cf:82:60:13:b7:
15:3f:2d:48:3c:94:1f:08:fd:34:68:25:9f:c0:ca:
c5:57:2f:da:f0:9e:55:83:b7:52:55:8b:65:71:c9:
a1:93:93:ba:aa:7b:61:bd:b0:4c:f6:8d:8b:a1:cb:
08:b3:0a:98:ce:c5:02:fd:dc:c4:bc:40:d8:11:df:
3d:a1:94:43:bc:57:1e:4b:80:ba:94:9e:c8:47:08:
a7:b4:6a:1c:e5:a7:2b:1f:3d:89:fa:2b:4d:b9:42:
f0:60:a5:fa:ed:df:57:18:d7:2d:42:8d:f1:73:71:
47:c3:55:1a:22:c7:6f:e7:8d:33:d1:62:9c:c0:69:
b7:15:5d:cb:36:ad:f0:9a:94:df:9c:85:04:02:52:
b1:02:66:76:52:35:2b:56:a7:36:75:b7:f6:44:70:
c1:aa:66:9d:55:83:94:c5:cf:74:65:04:87:27:e4:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D3:90:5C:93:F2:89:F4:D9:DC:84:04:F7:43:8D:BD:45:EB:7A:D6
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/etOQXJPyifTZ3IQE90ONvUXretY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.173.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d5:cb:11:05:f6:81:ca:33:e3:88:14:c3:0c:7e:72:ef:b1:
78:81:ed:12:2f:36:a3:7f:63:e4:81:0b:77:1d:a6:be:4a:72:
c3:1a:36:ed:01:02:eb:67:47:ff:55:ec:7c:90:40:ea:04:1f:
bd:fa:e0:ab:51:d9:94:f0:0f:21:7b:f8:ff:59:56:e4:7d:74:
87:05:56:bc:cb:bd:23:df:6d:c3:1e:57:10:7e:c6:66:88:84:
c6:5d:72:6b:e3:10:13:8e:d0:fa:df:9d:5a:ce:67:64:81:7d:
3e:43:9e:a8:75:28:5f:4c:05:19:ee:00:21:50:ca:54:5a:c9:
4b:9c:92:79:67:ae:eb:9e:06:e5:d5:72:af:26:9b:36:0c:43:
a2:76:1e:05:31:19:bb:a1:6f:0d:63:ea:e4:db:b2:a0:08:38:
d9:a5:71:03:25:5e:a5:a0:a2:93:b2:dd:66:96:a8:64:76:23:
88:95:b5:e5:34:50:42:de:fd:b4:53:60:ae:ae:30:7e:58:82:
cc:bd:3a:bd:15:ab:88:1e:7f:82:9b:e2:76:f5:67:97:5c:c0:
fc:e9:7e:e1:33:d9:bf:98:40:80:c2:54:55:9d:e4:19:b4:9e:
4d:d4:17:2d:5a:b9:b5:82:41:ae:ae:65:c2:92:22:db:d8:19:
39:c9:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:32 2025 by rpki-client