Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/IJdt5rF5YHkbvpfSjYnSfUmsdls.roa
File: IJdt5rF5YHkbvpfSjYnSfUmsdls.roa (raw, json)
Hash identifier: AYAtC7r6+BWNPOIritRREEgtoHZZTw2+Duifb9hmzxQ=
Subject key identifier: 20:97:6D:E6:B1:79:60:79:1B:BE:97:D2:8D:89:D2:7D:49:AC:76:5B
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 0DAC47C4
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/IJdt5rF5YHkbvpfSjYnSfUmsdls.roa
Signing time: Sat 01 Jan 2022 00:50:10 +0000
ROA not before: Sat 01 Jan 2022 00:50:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34934
IP address blocks: 78.24.89.0/24 maxlen: 24
185.55.76.0/24 maxlen: 24
185.160.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229394372 (0xdac47c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Jan 1 00:50:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20976de6b17960791bbe97d28d89d27d49ac765b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:dc:93:36:02:e3:62:fb:e2:1e:d9:b2:27:
f1:90:74:a9:5c:d7:e0:e1:a4:57:60:54:24:5a:67:
ef:17:30:5f:15:ae:8d:67:01:f7:c5:75:45:56:60:
d5:d8:96:91:26:ca:e6:fa:a8:2b:0d:5c:3a:32:23:
b5:7b:ab:a5:94:02:a5:2c:58:6e:d1:91:92:24:dd:
41:6a:3c:01:51:a4:ae:2a:46:18:40:a2:60:7b:80:
29:e7:c8:f4:24:ef:ec:60:3f:9e:f4:6c:6c:f8:75:
6b:ee:ad:cd:83:62:82:4e:31:9e:1a:6f:67:a2:4d:
51:ce:1d:5c:2d:35:24:13:d7:0e:82:d3:9a:88:72:
38:62:8a:74:04:9a:d9:5e:71:05:35:5d:08:56:ad:
65:f1:7d:ec:14:83:a7:32:9e:70:8e:a5:18:a6:92:
3b:2a:f5:37:cd:b6:b4:9a:6c:f5:6c:ba:32:cc:33:
02:95:eb:b4:88:75:61:86:8a:a6:62:1d:06:24:90:
80:8f:05:0f:25:c9:8b:f3:1b:75:de:48:ab:ce:78:
b6:51:1e:39:c1:28:98:31:2d:df:25:97:95:b8:c9:
6f:51:57:16:7e:2b:a9:e1:fb:48:de:86:d0:a0:13:
cb:5e:64:d7:6e:2b:ae:43:ee:98:1f:17:0b:24:ce:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:6D:E6:B1:79:60:79:1B:BE:97:D2:8D:89:D2:7D:49:AC:76:5B
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/IJdt5rF5YHkbvpfSjYnSfUmsdls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.89.0/24
185.55.76.0/24
185.160.255.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9b:98:c3:35:df:46:e1:df:5a:e4:f2:7d:ec:f3:25:0c:57:
5c:61:44:2d:42:ef:5c:58:86:89:5f:c5:8e:b5:fd:b3:6c:f2:
85:bc:79:3f:65:d5:b7:71:42:a3:6f:c0:50:b8:9a:cf:5d:92:
49:c4:a2:5a:71:21:75:37:49:10:4e:d0:79:b9:c3:40:01:c5:
d8:3c:1f:a3:1c:91:d8:cc:37:fa:4b:20:26:55:d2:f1:2b:04:
c9:31:e6:3b:b0:d9:0f:b2:1c:69:7a:fd:18:f1:c0:ac:ba:3c:
5b:ec:70:48:8e:1b:9d:f8:d3:ad:c0:5a:4d:a1:34:bb:a2:53:
d2:3f:62:a9:5e:67:2c:8c:73:ef:e7:e4:10:96:86:d7:3c:32:
ee:03:68:ac:cc:e2:40:cb:b7:5f:e4:52:c8:ed:64:ca:ce:27:
9b:2d:d5:fb:9d:eb:25:1f:4e:dc:4e:de:ff:50:18:e1:81:84:
20:9e:ad:4f:63:06:ed:e1:88:cf:a6:de:df:73:7e:65:71:9c:
02:24:9e:9a:d6:db:9a:8c:3e:61:ab:ec:2a:2e:f4:36:59:52:
50:5c:c1:8a:ab:fc:dd:29:51:aa:d3:91:ba:0f:bb:95:4f:28:
b3:96:77:96:c7:c9:6e:12:ec:ce:34:7f:84:15:45:d5:59:65:
74:61:a1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:05 2025 by rpki-client