Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/1fpONClc1Uy10KiVRD7AikOD1Us.roa
File: 1fpONClc1Uy10KiVRD7AikOD1Us.roa (raw, json)
Hash identifier: 2bmE2q2pkaJciLxsRil+COajKNQpwwhoAb569ah8KL8=
Subject key identifier: D5:FA:4E:34:29:5C:D5:4C:B5:D0:A8:95:44:3E:C0:8A:43:83:D5:4B
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 02FE8EF8
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/1fpONClc1Uy10KiVRD7AikOD1Us.roa
Signing time: Sat 01 Jan 2022 13:04:21 +0000
ROA not before: Sat 01 Jan 2022 13:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211956
IP address blocks: 78.40.22.0/24 maxlen: 24
78.40.23.0/24 maxlen: 24
2a07:4247:3000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50237176 (0x2fe8ef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Jan 1 13:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5fa4e34295cd54cb5d0a895443ec08a4383d54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:cc:85:dc:d4:a5:ae:e5:bb:46:b9:e9:eb:
56:c3:28:50:14:b7:db:8e:fb:41:9e:95:4b:37:57:
59:cd:e5:f9:56:c7:24:31:d2:58:24:a7:5b:3e:92:
d1:48:e1:a7:10:93:2d:84:b2:15:66:6c:75:9b:00:
0f:9b:f6:e4:e7:14:e8:e1:71:31:1d:2e:3d:28:78:
04:af:58:a3:08:36:e5:82:8b:34:a5:a0:da:ef:2c:
b1:55:d7:4b:0e:41:8c:21:a8:ed:01:7c:4c:f0:53:
26:38:ac:c8:49:9e:76:83:ec:75:f9:3c:35:b7:73:
89:7f:9f:b3:6d:d4:dd:d6:b0:67:92:f7:59:e6:60:
99:bf:14:0f:4d:84:07:35:a6:3b:86:dc:15:18:4b:
6e:c2:19:05:31:18:45:2a:06:9c:e8:11:15:4b:ef:
f8:8e:47:ba:ba:77:32:97:c0:77:17:b8:34:a6:4c:
6e:ac:8a:28:4c:b2:f5:7f:f0:12:af:4e:a6:2e:b9:
d1:91:02:99:9b:b5:51:8c:0a:de:04:76:47:14:da:
40:e5:b7:b4:c9:1d:ff:2a:e8:5b:e9:26:a1:f2:5f:
3b:64:cc:92:f4:11:5a:bb:a4:b7:c4:ea:38:40:85:
6c:70:4e:0f:76:39:5f:91:1a:d2:55:f6:b9:36:72:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FA:4E:34:29:5C:D5:4C:B5:D0:A8:95:44:3E:C0:8A:43:83:D5:4B
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/1fpONClc1Uy10KiVRD7AikOD1Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.22.0/23
IPv6:
2a07:4247:3000::/36
Signature Algorithm: sha256WithRSAEncryption
95:03:c5:bb:19:aa:82:c1:21:4e:6e:3b:26:4e:e2:9d:cb:29:
c6:c7:3a:1c:c0:1f:81:b8:bd:9d:87:f0:64:35:d8:a6:a3:f4:
f7:11:66:6a:02:9c:27:fd:3a:09:64:55:a3:59:8d:5c:c9:48:
b0:2d:bf:98:cb:42:f7:72:f0:eb:c1:80:04:6a:11:7b:95:20:
d8:9f:bb:38:5e:48:9b:26:53:c2:39:8e:27:dd:bc:78:06:7a:
1e:df:69:0a:e2:01:e9:37:ba:02:7e:25:dc:6a:ef:f0:a1:e8:
be:4f:d1:f1:06:48:b8:67:a5:ee:e4:1d:42:ff:b4:ae:b4:7c:
8f:ba:5f:1a:f5:7e:b2:30:45:13:c4:ad:6d:cd:14:50:6f:cb:
4d:b2:a7:cb:a1:63:de:75:aa:89:ca:a2:7f:58:50:f0:6b:4c:
bf:9c:5e:55:ec:0a:d0:de:7e:d2:2f:54:18:9e:b8:07:3d:3a:
28:f7:78:6c:d5:69:b9:92:42:90:e3:f0:f4:7d:ee:6e:24:8c:
16:de:b5:99:47:f8:4e:a7:94:a8:a1:8f:d9:f0:90:24:f9:f9:
3a:93:52:bf:56:7e:8a:8e:d9:53:37:76:29:73:3b:f1:16:d6:
ff:ea:c1:04:19:c9:ba:3c:a3:b8:15:5e:6a:79:3f:2b:a7:6c:
f3:58:3d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:48 2025 by rpki-client