Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/TK8Bx8X15pSw7HasjF5Q7plvItQ.roa
File: TK8Bx8X15pSw7HasjF5Q7plvItQ.roa (raw, json)
Hash identifier: /td77RWw+77NSiL4sKv6xH+4cX1f7aYCqjT5/59jX8I=
Subject key identifier: 4C:AF:01:C7:C5:F5:E6:94:B0:EC:76:AC:8C:5E:50:EE:99:6F:22:D4
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 0185724C9271FB771008685A64D58B86FB4A
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/TK8Bx8X15pSw7HasjF5Q7plvItQ.roa
Signing time: Mon 02 Jan 2023 11:44:58 +0000
ROA not before: Mon 02 Jan 2023 11:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50618
IP address blocks: 178.20.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:92:71:fb:77:10:08:68:5a:64:d5:8b:86:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Jan 2 11:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4caf01c7c5f5e694b0ec76ac8c5e50ee996f22d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:fb:b3:c4:59:1d:82:98:5d:ec:96:d4:33:
3a:3b:18:38:3a:18:86:f4:95:4c:05:f9:5c:aa:2a:
e8:79:2b:a0:02:66:32:f0:8c:94:c2:f3:f8:c3:cd:
34:8c:ff:0b:9a:95:5b:15:5a:3f:ec:0c:ae:68:8e:
4e:c7:98:cc:65:db:71:1b:d4:17:8b:29:69:fa:80:
26:c6:68:82:ea:6f:f5:42:5b:e6:ec:1e:2b:70:c3:
e3:63:a5:f7:90:67:0a:9c:08:92:01:d2:0e:c8:8e:
df:b2:03:b9:18:87:97:d4:19:5d:1b:14:0b:a6:e5:
aa:82:6f:16:78:1f:35:37:0d:cf:b9:b0:ba:cd:db:
b4:c9:54:d6:a5:12:8a:13:1a:71:68:c0:0a:0e:20:
d3:ce:fc:93:db:7f:60:09:ab:df:aa:21:07:e2:64:
0a:f4:b2:b4:0a:8c:b0:6d:63:8b:66:3c:96:3f:f0:
dd:39:87:a1:0e:0a:d7:96:58:05:1e:cc:78:ee:9f:
1e:86:e8:9b:ec:e7:44:07:c9:e7:94:62:d4:9b:b4:
58:77:65:7a:4a:83:0b:47:ce:f9:ce:13:6b:ad:d0:
3a:71:79:b7:3a:1c:86:e6:ba:9c:2d:cf:cc:c2:c0:
70:62:ff:03:fd:ab:9e:50:f5:d5:e0:ef:e6:ac:1a:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AF:01:C7:C5:F5:E6:94:B0:EC:76:AC:8C:5E:50:EE:99:6F:22:D4
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/TK8Bx8X15pSw7HasjF5Q7plvItQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fb:82:cc:0e:ad:40:83:46:fc:5a:26:8e:5f:95:df:cb:4d:
f1:a9:04:6c:80:d4:8e:75:05:5d:d8:08:40:ee:35:22:f4:2e:
0f:80:d2:a5:c6:e9:8c:5d:51:d8:6c:a4:1e:98:db:6b:d3:4d:
ed:e1:90:d8:07:c8:3e:46:d9:e1:c2:95:04:8e:1e:ee:e4:f0:
e6:83:93:2b:b6:08:01:d1:c1:d3:4d:db:8c:12:31:60:5f:d2:
75:91:f2:67:3b:36:de:a7:02:ac:0e:31:67:d2:06:77:ab:68:
f0:62:83:2f:96:9c:35:15:e3:3e:71:26:63:73:55:1f:6f:23:
de:b8:61:15:fe:c9:82:d7:b9:9d:73:23:70:d1:7b:48:67:b2:
f8:70:cc:d1:de:96:8e:32:50:e3:b3:12:3e:6a:c1:68:04:58:
c2:2b:ee:91:08:6c:50:a5:88:51:94:5d:1b:24:7f:6b:e5:da:
7f:87:f8:dd:37:b6:9b:ed:b6:ae:6e:42:e4:d2:c4:76:33:5f:
15:a2:cf:83:13:94:95:05:13:ab:3b:1e:12:96:a4:1d:b9:01:
f1:f8:7f:ad:a4:74:8a:9e:eb:6a:3c:1f:ff:19:d0:6f:79:3f:
60:80:1c:80:d6:a4:71:b1:37:fd:e9:a9:e8:48:6e:46:a5:d4:
e4:c4:9f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:12:55 2025 by rpki-client