Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/z1HXC633jVNLINl5zuOtegaOAqg.roa
File: z1HXC633jVNLINl5zuOtegaOAqg.roa (raw, json)
Hash identifier: jaCqIjsFUZdw67FPsAQeCa06iX5pop+jIcMb7NhURC0=
Subject key identifier: CF:51:D7:0B:AD:F7:8D:53:4B:20:D9:79:CE:E3:AD:7A:06:8E:02:A8
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 0711CAE2
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/z1HXC633jVNLINl5zuOtegaOAqg.roa
Signing time: Sat 01 Jan 2022 10:57:50 +0000
ROA not before: Sat 01 Jan 2022 10:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 178.213.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118606562 (0x711cae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jan 1 10:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf51d70badf78d534b20d979cee3ad7a068e02a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:b9:ef:59:ec:12:b0:11:6f:28:49:c9:06:
98:8f:1c:b0:f4:ba:2a:03:16:e2:94:1a:cc:cb:12:
44:12:f4:ba:26:d4:11:09:a0:25:2e:dc:74:e2:52:
96:84:40:54:71:d0:df:99:a8:f2:60:1f:97:d0:8c:
f3:a8:4f:2b:3d:ee:16:97:05:d4:62:b4:c6:dc:40:
88:a0:3c:61:6f:07:62:3a:83:16:de:f9:dc:1c:e4:
b5:72:48:46:3d:4b:ee:6a:ea:5f:50:ca:06:24:ab:
e3:be:77:2a:66:4f:e4:bb:dc:d0:41:fe:3f:26:12:
25:a4:15:0f:66:25:8c:1c:f6:da:e0:85:c9:a4:18:
22:64:60:2c:9a:ac:00:8a:d5:21:57:01:e3:0d:17:
38:c0:81:2a:a5:ee:78:ea:8f:fc:24:74:c7:19:be:
f8:0c:7e:93:ae:4e:03:67:6f:44:95:36:84:07:2f:
31:f9:98:43:33:60:b1:bb:90:10:c2:6f:d3:88:47:
87:33:d1:af:af:72:87:cd:8e:ed:6f:78:5d:11:b2:
fd:00:ad:fd:dd:99:47:e8:99:be:d1:31:33:f7:f8:
0a:d0:cc:71:65:ca:37:dd:aa:e5:40:58:33:54:c3:
a3:d4:81:58:b9:68:a7:db:2c:0d:c6:f3:ee:15:ed:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:D7:0B:AD:F7:8D:53:4B:20:D9:79:CE:E3:AD:7A:06:8E:02:A8
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/z1HXC633jVNLINl5zuOtegaOAqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.75.0/24
Signature Algorithm: sha256WithRSAEncryption
00:61:f1:71:ec:ab:86:57:4e:b1:49:55:35:72:37:75:bc:59:
78:60:a3:8e:cf:53:e4:ac:3d:95:a6:4f:d0:a5:90:17:29:90:
ae:3f:21:79:39:26:d0:23:86:5a:94:b6:4d:cd:90:48:44:89:
60:54:c5:5c:8d:46:0c:a2:ff:4f:f4:14:cb:f8:ba:62:ad:c5:
96:3b:3b:75:52:67:87:cd:52:63:18:86:48:85:99:8d:30:e6:
10:da:9a:58:61:74:99:75:1c:85:f4:db:dd:e4:8f:94:15:89:
52:bc:0c:af:c1:e5:1b:80:b2:60:71:25:90:78:2e:85:fe:97:
c8:2d:25:a9:f3:5c:8e:c9:00:c2:08:d2:cc:19:e5:46:d3:e4:
e8:bb:6e:9a:f4:47:8b:11:fb:ab:8c:e1:00:48:28:03:78:73:
0a:78:02:37:12:84:61:c2:dd:67:a7:5c:8c:80:a8:72:1c:ca:
be:23:4c:f4:78:aa:54:2b:03:13:84:78:f7:8a:6a:92:1b:bd:
72:a6:49:ff:a6:17:5b:7d:5c:5c:18:3b:fb:43:64:f0:af:f7:
f7:2d:73:82:02:e1:50:e7:55:99:20:7a:e0:2e:55:d1:94:9d:
b6:e3:cc:69:52:3c:39:84:9a:e1:62:85:b5:5a:82:ae:b6:79:
46:28:27:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBxHK4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OGEyOTdmOGNmYTFjZTZkM2ZlMmM1MjY5MTFjNDY4YTlhNjMxOGQwMB4XDTIyMDEw
MTEwNTc1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2Y1MWQ3MGJhZGY3
OGQ1MzRiMjBkOTc5Y2VlM2FkN2EwNjhlMDJhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOItue9Z7BKwEW8oSckGmI8csPS6KgMW4pQazMsSRBL0uibU
EQmgJS7cdOJSloRAVHHQ35mo8mAfl9CM86hPKz3uFpcF1GK0xtxAiKA8YW8HYjqD
Ft753BzktXJIRj1L7mrqX1DKBiSr4753KmZP5Lvc0EH+PyYSJaQVD2YljBz22uCF
yaQYImRgLJqsAIrVIVcB4w0XOMCBKqXueOqP/CR0xxm++Ax+k65OA2dvRJU2hAcv
MfmYQzNgsbuQEMJv04hHhzPRr69yh82O7W94XRGy/QCt/d2ZR+iZvtExM/f4CtDM
cWXKN92q5UBYM1TDo9SBWLlop9ssDcbz7hXt9P8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTPUdcLrfeNU0sg2XnO4616Bo4CqDAfBgNVHSMEGDAWgBQIopf4z6HObT/i
xSaRHEaKmmMY0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NLS1gtTS1oem0wXzRzVW1rUnhHaXBwakdOQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvNWYxNTNkLTcxZDktNDcwYS1iYTI3LTk3MTEzOTUxNGJiMS8x
L3oxSFhDNjMzalZOTElObDV6dU90ZWdhT0FxZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
NWYxNTNkLTcxZDktNDcwYS1iYTI3LTk3MTEzOTUxNGJiMS8xL0NLS1gtTS1oem0w
XzRzVW1rUnhHaXBwakdOQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLVSzANBgkqhkiG9w0BAQsFAAOC
AQEAAGHxceyrhldOsUlVNXI3dbxZeGCjjs9T5Kw9laZP0KWQFymQrj8heTkm0COG
WpS2Tc2QSESJYFTFXI1GDKL/T/QUy/i6Yq3Fljs7dVJnh81SYxiGSIWZjTDmENqa
WGF0mXUchfTb3eSPlBWJUrwMr8HlG4CyYHElkHguhf6XyC0lqfNcjskAwgjSzBnl
RtPk6LtumvRHixH7q4zhAEgoA3hzCngCNxKEYcLdZ6dcjICochzKviNM9HiqVCsD
E4R494pqkhu9cqZJ/6YXW31cXBg7+0Nk8K/39y1zggLhUOdVmSB64C5V0ZSdtuPM
aVI8OYSa4WKFtVqCrrZ5RignJQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:26 2025 by rpki-client