Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/8LVqbHiP8Xex6hYRidV5zY40j58.roa
File: 8LVqbHiP8Xex6hYRidV5zY40j58.roa (raw, json)
Hash identifier: ssjSZx0I7fpDvBimYjQwy7QgmB+OAhMyOj8CtFsqUz4=
Subject key identifier: F0:B5:6A:6C:78:8F:F1:77:B1:EA:16:11:89:D5:79:CD:8E:34:8F:9F
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 01856F7990DB0C1001EF8E4458B70BAF46EB
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/8LVqbHiP8Xex6hYRidV5zY40j58.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44270
IP address blocks: 79.141.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:90:db:0c:10:01:ef:8e:44:58:b7:0b:af:46:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0b56a6c788ff177b1ea161189d579cd8e348f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:81:ba:96:33:01:34:ef:4c:54:95:18:1c:
19:ce:04:a2:90:4f:02:5f:f4:8e:56:35:a1:7b:88:
8c:7d:9e:e4:c2:74:97:3f:3f:08:f2:38:4e:4b:97:
18:4f:2e:2d:98:85:97:49:dc:67:06:7c:9a:e2:b1:
4f:40:a2:c8:10:82:36:c6:b7:fc:8a:25:0f:f7:52:
c4:8a:0b:69:ff:94:2f:b9:e2:41:48:12:1b:c4:fb:
85:33:8f:28:53:a5:93:63:f7:bb:a8:2c:5d:7f:b4:
70:a5:86:4d:a2:e5:b1:42:93:f2:fe:bd:fb:4f:4f:
8c:cb:af:4b:f6:90:8e:8b:ba:45:c0:f4:cc:ba:33:
22:ff:a6:93:28:41:75:47:d3:fc:ce:10:4d:cb:98:
33:cd:b7:b8:8b:db:81:ed:68:99:2e:22:41:c5:46:
ec:43:40:57:49:33:20:29:7b:4e:fc:c9:65:0c:d0:
08:62:a4:c5:22:d7:46:50:35:f3:1c:18:74:07:4e:
d4:68:32:e6:da:db:be:ec:e3:a6:de:63:4c:9f:2b:
5a:01:aa:e0:15:6c:ee:85:10:fb:07:dd:2d:79:b7:
00:93:44:83:3e:82:fd:c9:7a:8b:71:a4:c9:a9:8e:
51:f0:45:f5:49:ee:38:2a:cb:9c:15:a5:61:5a:14:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B5:6A:6C:78:8F:F1:77:B1:EA:16:11:89:D5:79:CD:8E:34:8F:9F
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/8LVqbHiP8Xex6hYRidV5zY40j58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:28:09:fe:fd:30:d7:1c:f8:35:4b:e2:e8:69:50:3a:ef:1f:
dd:0b:63:d6:34:07:55:76:19:90:90:ba:86:db:38:6c:c8:d7:
e5:5b:fa:9f:e5:02:f2:ef:99:54:2d:a6:e7:ff:76:1d:a3:51:
49:2f:a6:4c:f1:4e:4b:27:49:bb:80:33:25:9f:99:ab:55:4a:
b6:10:a5:d4:6e:d5:fe:72:7a:2c:1d:12:9e:a9:a6:1f:d9:c7:
d8:5f:6d:dd:f8:10:33:0e:02:a0:b9:c7:3c:40:f5:ef:61:b4:
42:b1:1f:cd:1f:5a:9c:9e:29:f2:96:ac:09:da:14:9a:5d:a5:
3e:cc:7b:8f:f6:ca:3e:8d:96:fc:d2:23:43:86:93:ab:27:46:
3a:92:70:73:2c:1d:1c:ae:fc:92:43:c9:84:34:24:be:fe:61:
ba:f4:53:df:b4:c9:5d:2a:77:21:71:81:2a:dd:95:66:5a:b4:
3e:79:e4:9e:b6:1b:09:0c:d1:eb:4d:0b:be:f7:bf:ee:07:8a:
0e:73:e9:f6:5c:e7:d9:0f:9f:b3:ac:42:b8:bb:39:e3:f5:45:
7b:c1:e3:48:03:7d:39:ec:cd:c9:2d:75:b6:91:67:06:5e:48:
cb:b0:ba:fc:70:c1:26:89:85:65:3d:92:7a:9c:99:2a:c5:b1:
7a:72:e1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:41:10 2025 by rpki-client