Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/z-2j4EC7bUBpGyh5v6ItGtxjeDI.roa
File: z-2j4EC7bUBpGyh5v6ItGtxjeDI.roa (raw, json)
Hash identifier: ITPx9EvtH2zl+K9USrbR7rJSVAQjNxT9U0SToVtLEwk=
Subject key identifier: CF:ED:A3:E0:40:BB:6D:40:69:1B:28:79:BF:A2:2D:1A:DC:63:78:32
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01899CD7F9E7E932D28F798165389E1CA57A
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/z-2j4EC7bUBpGyh5v6ItGtxjeDI.roa
Signing time: Fri 28 Jul 2023 14:12:27 +0000
ROA not before: Fri 28 Jul 2023 14:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61208
IP address blocks: 178.175.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:d7:f9:e7:e9:32:d2:8f:79:81:65:38:9e:1c:a5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jul 28 14:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfeda3e040bb6d40691b2879bfa22d1adc637832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:76:dd:58:ef:7e:54:54:07:a6:fb:e7:3c:
8a:96:9c:f7:ab:26:f6:3c:ac:79:e0:45:9f:16:7b:
d0:ec:61:37:2f:86:22:da:bf:97:55:a5:b0:4c:c8:
37:40:16:8c:57:11:ec:7e:74:7f:2e:d6:0e:e8:14:
d3:a7:2f:44:52:6b:5d:e8:11:9d:81:71:61:c1:49:
00:74:9c:66:24:b5:a7:f3:a2:a9:40:df:ff:72:a1:
a6:01:11:11:d7:28:d5:49:fc:0b:43:f5:53:51:bf:
2e:f1:18:7a:07:12:33:a9:49:bd:ce:38:c0:09:17:
b3:38:05:43:72:2f:c2:92:1b:46:77:42:61:74:9d:
ee:d7:24:2e:38:56:8d:47:da:9a:87:2f:a3:ad:de:
56:b7:ba:94:22:69:e4:fa:f8:35:8e:87:e3:ba:91:
14:8a:d2:b7:5f:5e:c2:0c:9f:34:bf:64:04:7c:74:
35:4b:2d:91:48:a2:5b:d5:9d:42:7b:62:d9:d2:d5:
ce:6c:7f:6e:a4:ed:54:0a:50:bd:21:58:8a:5a:55:
82:bb:e6:c9:81:33:0e:70:8c:be:30:51:09:89:5d:
aa:e8:88:fe:59:d9:47:ab:fa:10:af:3d:f2:b7:24:
39:c9:b6:d5:42:54:72:32:1e:10:71:22:ad:15:ad:
36:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:A3:E0:40:BB:6D:40:69:1B:28:79:BF:A2:2D:1A:DC:63:78:32
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/z-2j4EC7bUBpGyh5v6ItGtxjeDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.168.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:96:5b:7e:30:fc:8c:16:51:93:21:d1:9c:f7:62:ab:67:51:
1e:c3:2c:8e:03:cd:5f:f2:d7:7d:73:fa:1b:2d:72:4b:f6:be:
91:71:d0:d5:9f:74:9e:9f:6f:40:a2:f7:2d:1e:2e:85:1d:bb:
76:bc:f6:a3:3b:ba:a7:6f:2d:54:af:e1:5f:1b:ba:c2:62:d1:
46:2a:d8:56:d9:b5:bf:9d:0e:6b:7b:3b:45:87:de:1b:2b:aa:
a4:a7:b0:d3:fd:0f:e1:45:51:d8:a6:cd:30:ff:9f:37:e0:2e:
2e:33:e3:f6:82:35:32:23:21:8e:18:15:b3:f3:74:98:12:55:
a7:76:d0:fe:ad:55:1c:25:fc:4d:87:61:0e:54:ca:a1:eb:b0:
95:4b:72:ab:8d:f0:ee:60:e4:b0:76:6b:53:38:46:0c:72:3a:
4c:31:85:7b:97:48:19:83:69:7b:68:2a:91:66:c2:00:cc:48:
0c:66:f7:86:ca:ba:64:f3:ec:4b:35:8b:d5:c3:20:03:f0:38:
a8:75:8b:01:ea:cd:40:36:83:19:50:59:b0:2c:85:e8:b7:5e:
51:9c:40:7b:62:ac:8f:bf:a4:16:11:ca:40:ae:ac:b5:c1:59:
3e:b7:cd:2a:60:a0:f6:ba:ae:86:0a:ef:32:3b:34:2e:b0:8d:
d1:6d:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:39 2025 by rpki-client