Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/OAAA4f8MZsjvmAoXrH20b_3liBs.roa
File: OAAA4f8MZsjvmAoXrH20b_3liBs.roa (raw, json)
Hash identifier: pdbN7eA+QsyW2U9tF0kh+al4KQAhK0iBlfsA8FGcmn0=
Subject key identifier: 38:00:00:E1:FF:0C:66:C8:EF:98:0A:17:AC:7D:B4:6F:FD:E5:88:1B
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 01856FC27B584C6841E4D8D9662ED7ACC9A0
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/OAAA4f8MZsjvmAoXrH20b_3liBs.roa
Signing time: Sun 01 Jan 2023 23:54:54 +0000
ROA not before: Sun 01 Jan 2023 23:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 178.213.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:7b:58:4c:68:41:e4:d8:d9:66:2e:d7:ac:c9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jan 1 23:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=380000e1ff0c66c8ef980a17ac7db46ffde5881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:3a:21:ec:2e:73:8c:0c:97:c6:bc:e0:37:
b6:2b:ba:9a:ff:b1:59:3f:da:f2:8e:7d:2e:c6:ce:
32:2d:e4:3a:74:a2:08:4b:77:c6:09:71:dd:ac:52:
c6:c2:ee:40:3e:c5:a3:4c:2c:78:88:82:de:85:3f:
f9:8a:97:bb:a6:56:70:80:84:92:fe:9e:49:9a:04:
52:88:90:7e:eb:25:43:d2:5d:d0:eb:51:46:0c:d7:
30:83:57:5a:19:71:31:8f:42:c9:8d:f2:05:fc:14:
a6:1b:09:5d:10:44:73:70:fc:6d:c7:2c:75:fe:f3:
be:e1:60:fd:fd:ac:3b:64:e4:ce:14:49:d7:c2:ef:
60:68:33:11:a8:cf:a0:8f:cf:5b:c6:12:97:ed:e1:
ab:77:7a:fd:78:0f:db:9d:f1:b2:8b:b1:a0:03:4b:
71:38:63:ec:c0:58:1e:04:19:7c:5a:0d:24:a4:8b:
53:ac:99:05:e1:b4:13:3d:00:79:bf:a0:8e:f9:5a:
f6:3a:34:ff:cc:9d:95:de:6f:da:f5:f2:7e:31:16:
d7:ae:ed:44:80:c2:b7:44:98:fb:85:71:45:bc:ce:
59:f4:1c:d0:c2:6f:f8:48:0a:d0:2e:95:97:10:36:
66:05:45:c2:f1:b9:8f:53:aa:60:e4:e7:4b:3b:dc:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:00:00:E1:FF:0C:66:C8:EF:98:0A:17:AC:7D:B4:6F:FD:E5:88:1B
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/OAAA4f8MZsjvmAoXrH20b_3liBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.75.0/24
Signature Algorithm: sha256WithRSAEncryption
78:28:d2:33:6e:f5:22:d3:52:bc:c3:b4:1c:9d:34:ea:fc:1b:
e0:7f:29:e2:da:be:9d:58:57:b9:c5:95:a1:38:f5:3d:a9:e5:
85:f2:b9:4e:7a:69:b3:c2:1a:6b:9c:08:54:63:a1:b9:e5:05:
a4:5c:21:9f:62:75:ec:61:dc:22:11:2a:cd:bf:8c:19:a4:4b:
a6:61:3f:27:f6:aa:6b:38:2f:b9:46:91:bb:94:9e:c0:26:75:
d6:e6:80:4e:fd:16:a2:b3:d4:64:6c:9d:10:29:30:87:5f:5f:
ee:2f:c7:74:6b:4a:89:f1:ab:5f:4e:94:e9:87:61:85:b6:db:
86:4b:fc:58:59:2a:c8:a7:fe:c7:2a:98:79:7b:5d:75:e7:83:
5d:2a:46:26:0d:62:69:64:2d:86:bc:23:20:eb:a7:b6:38:2a:
bd:bb:77:b1:85:f7:7a:f8:b4:0d:eb:29:21:db:bc:47:af:1e:
f1:ea:d2:e7:99:8f:08:be:11:ee:a1:b3:a1:d4:f4:e8:14:15:
31:22:ea:50:e8:71:85:dd:d5:91:3f:11:ba:cd:d4:17:cd:eb:
ed:41:0a:be:bc:fe:50:36:09:f1:43:4d:47:a0:7a:cd:3e:7c:
d9:b7:13:76:87:af:50:cd:a2:91:5d:93:ce:d8:c6:2c:50:fa:
eb:0c:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:19 2025 by rpki-client