Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/S8oRXiiVqTeWQ1d31MveGcDLIxg.roa
File: S8oRXiiVqTeWQ1d31MveGcDLIxg.roa (raw, json)
Hash identifier: CU/CKHTf7VxXa3WKh8Qxrh/PireOQbnLZDBfGDfxdFY=
Subject key identifier: 4B:CA:11:5E:28:95:A9:37:96:43:57:77:D4:CB:DE:19:C0:CB:23:18
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 03BFFA0D
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/S8oRXiiVqTeWQ1d31MveGcDLIxg.roa
Signing time: Sat 01 Jan 2022 11:01:16 +0000
ROA not before: Sat 01 Jan 2022 11:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56666
IP address blocks: 178.237.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62913037 (0x3bffa0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 11:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bca115e2895a93796435777d4cbde19c0cb2318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:bb:ff:de:c2:d2:59:33:19:e0:3d:b8:26:
ec:af:aa:e4:da:7a:0f:75:57:bd:69:65:c6:8f:52:
61:f9:5a:22:a2:a9:d1:7e:fc:09:db:8b:55:2b:b4:
22:ef:e7:e8:ca:43:97:5b:39:e1:c4:1e:c1:1c:f7:
47:fb:51:eb:bd:91:fe:61:94:d1:24:62:ea:fe:30:
4a:85:57:38:1f:9e:28:ea:1a:59:8b:5e:66:b1:2b:
6c:83:7a:17:6e:39:36:00:db:30:46:9f:22:ce:18:
c0:71:af:86:f4:a7:6d:76:64:32:97:07:b4:f0:0b:
a4:b6:8d:6c:5e:81:2e:cc:2c:a9:37:3f:ca:7d:5a:
ef:20:f2:b8:0d:9c:1c:dc:9e:7e:ef:7c:10:36:e8:
7b:b6:aa:7f:02:f2:29:6d:d1:d2:52:5d:b7:ad:b4:
db:89:a1:c6:26:6b:1e:75:85:1a:8f:60:f5:47:9c:
fb:27:68:6d:94:78:7e:9a:a8:99:08:26:b7:68:5a:
dc:0e:ba:8b:ba:57:0b:5c:8e:26:55:e3:f4:f7:c1:
91:37:1a:e6:a2:77:5a:aa:1f:94:a3:99:b5:e8:d8:
d7:d1:5e:52:c9:44:24:6b:7d:b9:23:e3:f2:f1:cd:
11:fc:fb:3d:95:1f:29:36:bb:da:c7:4f:ab:7c:21:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CA:11:5E:28:95:A9:37:96:43:57:77:D4:CB:DE:19:C0:CB:23:18
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/S8oRXiiVqTeWQ1d31MveGcDLIxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.206.0/24
Signature Algorithm: sha256WithRSAEncryption
24:03:fb:cd:1d:86:6f:79:30:cc:e5:a4:3a:90:85:d4:5a:cc:
fb:13:0d:7c:69:c4:87:08:fa:f6:3f:f8:84:67:e4:72:e7:e8:
50:0a:8d:48:10:74:c0:59:f2:39:89:7a:5e:d0:04:11:0a:09:
c9:a3:e3:bc:fd:d2:21:6d:29:78:f0:da:db:ff:cd:86:58:76:
ea:10:14:c3:34:cb:9a:45:af:06:7a:db:41:57:09:fe:83:5a:
e8:44:28:cf:c8:9b:1f:8e:e9:97:ff:4a:e4:d7:e5:28:0d:ba:
d2:15:ec:51:a8:fa:9b:71:6f:b1:66:7d:f4:b9:2a:af:99:95:
af:d1:90:32:ff:96:c7:2e:26:86:b8:d7:df:07:07:73:47:cb:
88:b2:e7:bc:10:b6:94:f0:3c:04:f5:38:28:78:cd:3a:d3:c0:
ce:05:4e:19:a6:98:e0:41:0b:1e:73:10:62:a4:8b:24:34:be:
14:3d:79:86:ae:7d:97:5c:58:ef:f6:a8:fc:4e:6f:61:3c:b7:
ff:82:8d:e4:22:3f:d1:70:14:10:36:71:27:14:98:f4:9b:cf:
8e:b5:63:d2:59:7a:a6:4b:44:54:50:b3:0b:3c:7c:45:d3:40:
40:66:a6:12:11:f6:4e:97:c3:47:ea:c4:03:b1:a1:6d:24:9f:
37:45:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:56 2025 by rpki-client