Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/1gccUuPhuVzh9ZsuGDwmZOc8c2s.roa
File: 1gccUuPhuVzh9ZsuGDwmZOc8c2s.roa (raw, json)
Hash identifier: rEgr92XwZY5mmplMyXA3o1AJ1awLtbz8ggbc1qifT7c=
Subject key identifier: D6:07:1C:52:E3:E1:B9:5C:E1:F5:9B:2E:18:3C:26:64:E7:3C:73:6B
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 01850749C4BDFE36AAB60D775259E7EF78EF
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/1gccUuPhuVzh9ZsuGDwmZOc8c2s.roa
Signing time: Mon 12 Dec 2022 17:02:33 +0000
ROA not before: Mon 12 Dec 2022 17:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 178.21.145.0/24 maxlen: 24
178.21.144.0/24 maxlen: 24
2a02:2c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:49:c4:bd:fe:36:aa:b6:0d:77:52:59:e7:ef:78:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Dec 12 17:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6071c52e3e1b95ce1f59b2e183c2664e73c736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:f7:a6:cb:0c:31:97:27:2d:c4:71:f0:31:
c7:b4:f5:75:00:66:8c:0a:5a:b6:01:6c:52:d8:c9:
fb:88:ac:9d:33:72:26:48:da:ff:9b:37:6d:45:c2:
44:61:1e:3c:f8:43:6d:d9:f6:fd:75:8a:07:39:c9:
75:b1:9a:b3:0a:dc:c1:2c:e3:35:b5:eb:c5:c8:4f:
c9:0d:e1:ce:e6:e7:21:9c:71:74:af:9d:5e:18:d4:
d8:ad:1f:d4:41:60:8f:27:5c:dd:18:c0:af:22:a4:
b9:13:3d:fc:88:88:d0:65:5e:28:de:9a:98:68:89:
d1:d4:75:e8:c1:93:ba:42:d2:f4:3f:17:d8:48:92:
b3:52:32:13:50:c6:86:40:b1:e0:fd:cc:d9:d6:89:
64:32:a2:1b:70:35:21:d7:67:24:b1:0b:67:55:bc:
63:3e:f7:82:55:c1:8b:21:a9:28:30:a2:ea:c5:c2:
2c:b0:3c:ef:79:f9:28:91:e5:60:3d:ae:fa:d4:fd:
ee:fd:05:dc:9a:74:c9:17:96:f6:f5:b2:d4:15:b2:
21:90:c9:71:65:fc:39:43:0d:9b:ba:c4:cd:18:4b:
39:2f:56:a2:38:66:93:91:26:d2:f6:66:21:a3:52:
4a:d9:dd:31:85:fc:e4:08:b0:7f:4b:f0:e5:b8:ee:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:1C:52:E3:E1:B9:5C:E1:F5:9B:2E:18:3C:26:64:E7:3C:73:6B
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/1gccUuPhuVzh9ZsuGDwmZOc8c2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.144.0/23
IPv6:
2a02:2c0::/48
Signature Algorithm: sha256WithRSAEncryption
0b:3b:b6:e1:2a:f4:39:55:47:2f:d0:18:77:6d:68:30:01:ab:
26:64:fc:ac:8f:a2:28:76:c7:b3:a7:43:02:af:25:95:7d:a1:
77:47:43:69:60:5d:c2:4d:ec:3f:67:00:d8:d5:8f:3e:12:ba:
33:49:bc:7d:9a:27:25:c6:b0:a0:4f:a5:27:37:0b:78:a6:3a:
ac:cd:8c:14:b2:78:c8:ee:af:c1:54:36:f8:e0:1b:80:15:bc:
6e:33:b5:db:a8:29:5f:67:b7:92:1e:a9:c8:e6:86:d7:9e:03:
92:37:09:67:18:e7:e9:56:05:87:a7:1e:ba:cb:64:5b:e8:a5:
c9:a3:0e:a9:19:18:ce:bf:33:ff:53:ae:96:56:c5:bc:57:b1:
a6:21:51:d4:95:e0:1f:f9:da:f9:98:c9:5c:c7:f5:42:a8:3a:
82:2d:76:e3:1f:bb:e2:28:e5:19:9d:4d:4d:bc:6e:06:ee:91:
d4:72:f1:66:3d:75:06:24:a4:4b:f5:0e:3d:2c:9a:a5:8b:8f:
82:2f:ef:7d:bc:05:35:5f:7d:dd:a4:5e:f2:96:43:05:d3:92:
26:75:1b:19:6e:58:0b:6e:20:b5:9c:9f:48:c1:be:ce:38:9d:
61:b6:39:3b:ed:03:ff:cb:8b:25:57:a1:9c:b6:8e:dd:cb:9b:
51:9d:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:12 2025 by rpki-client