Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/UpwWzQcuZOqlwfwyTsWpsjKDnLs.roa
File: UpwWzQcuZOqlwfwyTsWpsjKDnLs.roa (raw, json)
Hash identifier: iAhFqtTXByFPbYUlUiyjV3UPPxWEPgBI9+WbmFYO3X4=
Subject key identifier: 52:9C:16:CD:07:2E:64:EA:A5:C1:FC:32:4E:C5:A9:B2:32:83:9C:BB
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 01856DDD43342BD1C0E1DE9286ED87121C1B
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/UpwWzQcuZOqlwfwyTsWpsjKDnLs.roa
Signing time: Sun 01 Jan 2023 15:04:55 +0000
ROA not before: Sun 01 Jan 2023 15:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209162
IP address blocks: 178.239.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:43:34:2b:d1:c0:e1:de:92:86:ed:87:12:1c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Jan 1 15:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=529c16cd072e64eaa5c1fc324ec5a9b232839cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:f0:bf:52:2a:79:7a:5c:a8:ab:98:04:74:
87:25:4d:dc:ab:37:39:d0:50:23:d4:8c:af:71:3d:
23:9d:23:ae:61:61:eb:60:77:89:10:9a:95:25:17:
57:d0:d8:3b:cf:dd:2f:59:1e:5c:37:3a:b7:c7:62:
8e:1c:5f:ec:c4:b2:4a:6d:c1:96:92:d4:cc:5a:86:
d4:23:c1:ff:50:ed:bd:88:9a:ae:5d:03:9b:1c:f0:
12:2a:9e:a1:78:37:7a:79:47:9d:43:af:93:f4:4f:
19:5a:e0:64:c3:5f:25:4d:47:e5:f7:29:62:ee:28:
b1:57:7d:df:98:e3:ff:5b:09:b4:66:9d:e8:f2:75:
46:af:c7:37:d1:4c:e8:5d:a5:6c:c1:63:d8:94:ae:
42:ec:f7:e6:ab:16:9f:12:61:ec:75:92:30:d7:fa:
00:53:15:44:6a:68:ef:0d:35:22:1e:15:8b:af:2e:
39:c3:b6:88:a8:ad:f2:e8:bc:bc:19:3c:48:fd:3e:
a1:5a:b0:9b:8e:b4:da:c7:a0:75:62:c6:65:e6:86:
83:1d:f3:32:65:fc:d5:ae:a3:ab:d2:63:8e:ca:da:
41:54:45:22:62:3a:63:94:09:90:30:04:3d:a4:de:
40:26:43:9b:fa:6e:36:ca:39:37:60:18:ee:5f:c0:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:16:CD:07:2E:64:EA:A5:C1:FC:32:4E:C5:A9:B2:32:83:9C:BB
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/UpwWzQcuZOqlwfwyTsWpsjKDnLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.24.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ea:15:4f:4d:c6:f6:ea:5a:9f:6f:c2:fb:76:a4:2d:0d:31:
7a:61:94:e8:e4:6c:54:5a:47:45:1d:13:6b:fb:b5:6a:7f:23:
18:d1:b4:51:8f:5a:1c:2c:c4:00:a6:3e:06:2c:b1:41:49:d8:
1a:3f:32:df:d7:0e:c6:4e:18:08:80:e5:79:52:32:e2:6a:75:
5f:cc:38:47:40:c2:09:b2:75:f8:3f:7c:9a:aa:34:55:8a:52:
03:31:a8:20:52:13:2a:8a:35:25:c3:a0:f9:e9:15:27:2b:2c:
23:00:c1:a8:a7:57:33:31:12:df:c1:f3:9d:9a:68:d5:1d:bd:
fb:a6:f7:98:04:be:3f:86:14:2c:08:18:4e:a6:9c:21:8d:a7:
e5:82:9e:4c:c9:35:3d:c7:d1:20:2c:df:db:1d:b0:74:81:fe:
92:c0:6e:b0:4c:29:5c:17:e7:df:b4:dd:03:10:6e:2e:b0:76:
67:f5:d4:81:75:bc:32:7d:aa:12:f7:5f:46:33:67:0f:b1:81:
04:d5:06:84:6a:32:4d:a9:ce:66:6b:cd:2a:9c:b2:85:4f:f4:
87:b6:ec:cb:88:12:d0:9c:12:d8:b1:17:90:5f:3f:a6:ff:e0:
83:31:33:cc:6a:ec:6d:17:13:0a:f5:b5:cb:70:36:18:7d:d8:
8e:69:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:45 2025 by rpki-client