Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ghdzcwnfImtZ2ii1BpQEQ1wn_Vo.roa
File: ghdzcwnfImtZ2ii1BpQEQ1wn_Vo.roa (raw, json)
Hash identifier: liiHqIGH690TLmpiW/3lzaNBDAZcm07/q7+PcdTQMjw=
Subject key identifier: 82:17:73:73:09:DF:22:6B:59:DA:28:B5:06:94:04:43:5C:27:FD:5A
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 0188C054333709040F3537BE3E6EA23EB18A
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ghdzcwnfImtZ2ii1BpQEQ1wn_Vo.roa
Signing time: Thu 15 Jun 2023 18:32:03 +0000
ROA not before: Thu 15 Jun 2023 18:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8708
IP address blocks: 185.178.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c0:54:33:37:09:04:0f:35:37:be:3e:6e:a2:3e:b1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Jun 15 18:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8217737309df226b59da28b5069404435c27fd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:65:a0:35:16:4f:3e:e8:f9:3a:b1:6a:00:b9:
e7:5f:24:15:94:9d:f7:d5:ee:07:1e:6b:58:1c:48:
ef:1d:24:7d:b2:5a:43:29:49:42:90:4a:44:9a:16:
1c:56:f0:df:70:4b:63:94:7a:7f:19:93:41:eb:d9:
73:37:d3:5a:94:43:9d:1d:00:ed:db:ba:50:01:36:
b4:c1:e8:22:e6:c5:da:ea:b6:87:e5:95:de:61:e6:
c6:c4:86:e2:c9:5b:2f:24:cb:c9:59:ea:51:63:26:
d5:25:64:b3:a1:56:3d:42:11:c8:8c:20:c2:89:3c:
3a:0e:71:48:e7:24:f9:be:6a:df:1a:d9:ba:32:75:
20:41:87:8f:0f:55:55:17:f6:cc:1d:78:35:78:d1:
ef:8c:39:00:8e:97:c2:43:79:da:56:50:59:1d:1d:
67:10:74:39:95:de:a1:33:cb:74:d1:46:9a:8b:4e:
b3:0c:5b:06:2a:b5:ae:aa:e4:42:63:ef:a9:55:c8:
ce:f8:ed:d6:0e:83:52:30:17:0b:fb:15:d6:95:c6:
ea:b9:2c:fe:29:b5:64:b9:a2:4d:b4:d2:23:23:68:
57:51:59:ef:d3:18:5a:08:d7:ae:5e:72:5f:9b:5e:
a6:79:42:2c:46:bd:75:84:c8:16:47:33:b4:34:8b:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:17:73:73:09:DF:22:6B:59:DA:28:B5:06:94:04:43:5C:27:FD:5A
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ghdzcwnfImtZ2ii1BpQEQ1wn_Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:42:d0:24:7b:77:c8:b3:73:e1:0a:13:4d:f6:2c:92:5a:f4:
c6:c7:b3:38:4c:64:c8:e5:53:fd:e6:34:ea:2e:0e:3a:64:bf:
92:2c:91:f7:d2:00:31:65:c2:5d:4c:d5:50:c1:ee:49:5f:30:
74:ca:e7:c8:9e:31:67:c5:d4:6c:58:aa:74:06:53:fc:57:f6:
ac:6c:33:e8:0b:29:1f:f2:d3:fc:18:be:ec:58:b1:74:01:fc:
c4:0c:47:4b:0d:3d:5c:e7:ed:a8:45:13:47:3e:d5:f6:fb:3a:
59:78:52:e3:1a:ea:82:9b:cd:cf:72:9c:67:e2:d5:80:bf:75:
30:b9:ca:d6:ba:5b:0c:2d:ff:27:66:79:10:82:47:63:0b:68:
bf:2a:8a:55:8e:dc:3d:f6:3c:84:e1:a0:d8:7a:10:0a:4f:13:
d3:b2:24:01:39:c5:5b:0c:46:1d:dc:a1:0b:dc:9c:73:ad:f6:
d6:19:d0:6a:48:21:21:3b:10:0d:ec:22:15:c7:05:22:98:91:
39:52:85:52:d8:ff:e3:56:0d:9e:11:36:4b:65:4b:00:d9:84:
dc:4d:23:b0:13:05:06:20:97:05:3d:01:00:50:8b:60:09:16:
2d:b7:80:da:f2:c4:33:41:64:6b:ef:e2:2f:f0:c3:14:60:7e:
79:a9:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:24 2025 by rpki-client