Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gdgO4y04vPg2yWWd546BOnsRnhs.roa
File: gdgO4y04vPg2yWWd546BOnsRnhs.roa (raw, json)
Hash identifier: bHp1FL29PAWX+OWDdX2z61tf2G2Bzm9ilntztffOuJ4=
Subject key identifier: 81:D8:0E:E3:2D:38:BC:F8:36:C9:65:9D:E7:8E:81:3A:7B:11:9E:1B
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01856F66E7D3DBAE659D073E74FEB852DB51
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gdgO4y04vPg2yWWd546BOnsRnhs.roa
Signing time: Sun 01 Jan 2023 22:14:52 +0000
ROA not before: Sun 01 Jan 2023 22:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5483
IP address blocks: 178.238.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:e7:d3:db:ae:65:9d:07:3e:74:fe:b8:52:db:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 1 22:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81d80ee32d38bcf836c9659de78e813a7b119e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f4:aa:28:c7:e6:09:7f:b2:38:dc:00:25:06:
ed:64:09:c1:73:90:ae:d4:d8:66:a4:b0:0d:30:17:
34:d6:1f:63:4b:d2:95:55:e5:f1:6b:82:7d:51:c3:
30:91:92:ba:86:73:28:ab:0a:eb:dc:6e:3e:9e:a8:
f9:0c:d6:2c:93:66:32:48:0a:9d:c0:c2:74:c3:8b:
69:86:b9:ff:57:a7:5b:02:dc:b5:3b:69:29:27:c1:
40:78:d7:a0:68:fa:d8:eb:5a:64:de:38:72:6f:23:
18:96:15:ff:2c:c0:5e:a2:f6:65:90:d5:0c:22:f1:
37:1b:7e:43:6b:22:86:ec:f1:7f:42:d1:b3:bf:7d:
7c:e9:0e:79:a0:3d:a8:94:89:a4:f0:6f:2c:93:8c:
61:93:da:0c:dc:77:7f:9f:31:f8:b8:24:2c:c7:a5:
7a:81:87:f9:62:a9:f1:d1:6e:16:d6:76:cc:9e:0f:
1e:2f:d6:d5:ef:ec:18:61:d2:4c:f5:2f:62:a8:cc:
01:63:42:e3:0e:85:e5:86:cc:ba:fb:c7:c8:2f:c6:
6d:ee:45:b3:f9:85:8f:3b:8f:d4:de:0a:dc:0e:c5:
9b:27:d5:41:58:2d:28:00:70:ea:a0:d9:8f:86:c4:
c9:f1:38:4c:d3:f5:7b:c5:f7:85:89:ef:2e:0b:47:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:0E:E3:2D:38:BC:F8:36:C9:65:9D:E7:8E:81:3A:7B:11:9E:1B
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/gdgO4y04vPg2yWWd546BOnsRnhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.238.221.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2e:c8:5a:56:b3:4b:4b:ad:c9:4f:70:07:4a:a1:78:62:a9:
fa:0e:ef:c5:e1:3f:18:6f:b0:6e:43:e4:70:a3:1c:6e:ad:48:
57:ed:d9:f6:d8:ea:7a:39:33:fb:49:9d:66:a0:b1:13:8f:ce:
5d:15:8c:9d:94:e8:d0:bb:51:12:82:2a:e7:71:95:81:e7:9c:
a1:5b:15:55:ad:9c:2b:6a:6a:61:c9:67:dc:70:85:86:98:03:
8d:a4:09:8d:ea:4c:a9:7d:ed:94:ea:7f:21:27:06:b8:f5:cf:
6c:74:a9:7c:f3:ff:92:4a:cb:7e:27:f2:8f:cf:fa:36:94:e9:
4f:0f:44:ad:65:34:a0:17:a6:56:2f:29:23:06:49:59:d9:4c:
93:27:6a:d2:37:2b:fe:da:23:63:93:17:67:74:6e:f7:26:5d:
7e:34:6f:ae:8c:ab:6f:a7:bc:30:83:4a:f1:1a:dc:d0:03:4a:
68:6e:ee:99:9e:02:2c:49:24:14:bf:3d:6a:78:fe:d9:7f:b7:
96:03:28:6b:6b:13:b5:f4:cb:95:c4:24:53:a1:34:b4:4e:54:
f8:76:65:fa:c9:bd:3e:56:fc:27:9d:d5:69:ab:3d:53:ca:42:
ae:66:e2:81:d2:68:13:0f:04:31:f1:9c:1e:33:42:01:4c:be:
b3:fd:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:18 2025 by rpki-client