Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_13BYhDEeOffEu_fyXePkripyqA.roa
File: _13BYhDEeOffEu_fyXePkripyqA.roa (raw, json)
Hash identifier: zwR2Nkq/A+f6OXjsceCl1ypwC1tRGZXpk10m8fMdAYI=
Subject key identifier: FF:5D:C1:62:10:C4:78:E7:DF:12:EF:DF:C9:77:8F:92:B8:A9:CA:A0
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 066A4046
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_13BYhDEeOffEu_fyXePkripyqA.roa
Signing time: Thu 21 Apr 2022 12:09:56 +0000
ROA not before: Thu 21 Apr 2022 12:09:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38971
IP address blocks: 178.57.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107626566 (0x66a4046)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 21 12:09:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff5dc16210c478e7df12efdfc9778f92b8a9caa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:84:e3:15:f9:12:9b:8e:d7:af:de:d6:59:
bd:a3:9e:52:70:18:0e:5e:ad:ad:c2:9e:9d:d9:96:
b9:9d:dc:81:27:46:c6:c6:f5:30:3c:24:d2:e2:12:
f2:3a:19:5d:92:42:7a:41:30:3c:c6:1e:08:fe:88:
1c:18:5c:74:2d:1f:72:7b:81:6e:2e:ef:48:aa:e7:
6f:31:10:16:23:b4:74:97:0c:5e:84:f8:53:57:0b:
b9:de:6f:0b:38:b8:76:ab:75:02:18:c6:a7:c0:4f:
a6:6c:a4:89:e4:a4:3d:ea:6a:0d:dc:d8:ac:ca:c3:
9b:59:d0:7e:39:62:84:4b:46:02:7a:6c:bd:a3:c9:
0a:c2:cc:68:2d:ed:7c:3f:47:24:3f:25:4b:d7:78:
69:9e:18:1d:9e:93:76:92:f8:57:c9:b0:a2:71:27:
a0:f1:14:bc:f3:43:47:90:c2:14:8b:81:e5:01:4f:
04:95:e4:86:49:a4:99:0c:c9:4e:63:f3:b5:28:95:
2e:c7:3c:96:c4:04:de:48:36:3b:89:1a:0a:2d:97:
86:de:f9:24:24:7b:3b:be:44:95:42:89:a2:e2:04:
20:89:60:cc:62:46:27:44:7d:4a:5a:d5:36:f8:56:
33:44:42:89:61:58:30:52:04:f5:84:16:ed:3c:52:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5D:C1:62:10:C4:78:E7:DF:12:EF:DF:C9:77:8F:92:B8:A9:CA:A0
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_13BYhDEeOffEu_fyXePkripyqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.57.71.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e7:2b:d8:1f:9a:03:05:32:e9:b6:f6:02:4a:21:58:9d:20:
5e:7f:20:0c:34:4b:99:2b:4b:44:ac:16:f8:6b:c0:c5:e1:26:
04:1b:8d:40:6a:37:35:8d:78:c3:98:f7:d9:33:60:96:9f:fe:
bd:be:c4:70:7f:fd:af:1c:5c:d3:2f:58:83:f3:b5:ff:50:6b:
33:5c:8b:c0:f9:34:fa:04:13:2a:92:33:2d:d5:bc:fe:63:02:
f9:70:47:6f:3b:d5:41:1b:79:cc:da:83:94:da:be:4c:01:60:
90:ea:76:4d:c6:0c:aa:18:ed:50:f4:1b:d5:4c:58:65:82:33:
e4:68:b5:d1:2c:de:71:8d:e6:19:de:2e:37:c9:ea:8f:62:ce:
a0:cf:38:e9:72:9b:61:42:0f:61:22:22:8b:37:4c:0b:9a:c2:
2f:a2:24:d8:78:ce:c6:5a:ff:fc:ef:a2:1e:46:74:5d:16:61:
0f:08:c5:2e:f3:1a:15:b7:c2:01:76:26:c4:4e:a0:39:04:25:
15:a0:98:c8:4e:2a:32:8f:5e:04:40:cf:6c:af:1d:0d:73:f5:
69:1c:78:80:20:00:82:c1:0f:91:42:31:ed:c8:0b:fc:f9:fe:
97:bb:65:7a:49:c8:b2:6d:87:1b:25:22:22:0d:fd:a0:91:e6:
25:30:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:05:05 2025 by rpki-client