Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/6_5w6C7jKO7qhGn6mLF2HOG-Niw.roa
File: 6_5w6C7jKO7qhGn6mLF2HOG-Niw.roa (raw, json)
Hash identifier: 3Xy5h4GRI2mcqgdC0OpeW2QHM6m2PYNO3cXV26/ouvs=
Subject key identifier: EB:FE:70:E8:2E:E3:28:EE:EA:84:69:FA:98:B1:76:1C:E1:BE:36:2C
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 35819F66
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/6_5w6C7jKO7qhGn6mLF2HOG-Niw.roa
Signing time: Sat 01 Jan 2022 06:01:13 +0000
ROA not before: Sat 01 Jan 2022 06:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49936
IP address blocks: 178.22.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897687398 (0x35819f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Jan 1 06:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebfe70e82ee328eeea8469fa98b1761ce1be362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4b:4e:fb:03:15:81:4a:dc:a1:cc:d9:83:84:
4d:5e:94:63:06:c6:2f:ca:f6:92:60:83:59:a6:34:
f4:90:89:a2:f8:62:05:93:89:c5:a4:5a:98:2c:54:
d9:0f:c4:06:45:65:21:a5:db:91:d2:a7:33:98:fb:
b8:79:d7:1e:e1:f7:2d:6c:e1:7a:9e:a1:a7:9f:83:
06:8b:75:93:4a:e7:d1:20:c4:cb:b5:e8:80:d6:f9:
ab:56:42:0e:80:53:61:f3:65:86:c0:db:4a:23:11:
04:a6:f7:38:10:23:00:ed:fc:13:1f:97:dc:04:39:
b0:49:c9:15:4e:56:f8:13:10:64:55:f9:19:1e:91:
6d:9e:cf:a8:27:24:33:af:af:ba:b6:bb:0b:32:08:
59:89:fb:67:84:16:98:45:f3:1e:f8:ca:d7:04:c1:
40:76:77:56:bd:89:8d:a0:dd:0e:14:36:b1:b3:f1:
ee:69:bd:5a:08:08:09:1b:b8:1b:ab:0a:d9:00:26:
24:58:aa:98:8d:ea:c1:43:7b:22:05:94:9f:e7:f3:
2e:6e:13:f8:ce:3d:be:7f:f4:57:b3:6f:ad:80:77:
4b:04:1c:7b:64:a2:bd:21:bc:bd:73:a4:50:30:7b:
d4:73:a0:41:8c:a5:04:a7:04:9e:86:e5:58:0c:47:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FE:70:E8:2E:E3:28:EE:EA:84:69:FA:98:B1:76:1C:E1:BE:36:2C
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/6_5w6C7jKO7qhGn6mLF2HOG-Niw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.76.0/24
Signature Algorithm: sha256WithRSAEncryption
04:78:93:f4:f7:43:7f:dd:c2:c0:fa:35:e7:17:70:f0:ff:e0:
98:82:ae:bd:66:d4:f2:cc:3f:fa:c1:2d:bd:35:a9:e7:cc:30:
77:3c:6b:d3:01:97:66:af:72:63:fc:1f:17:27:61:e5:36:cc:
1d:85:a3:51:fb:1c:4c:0a:76:6a:07:36:58:5c:2a:17:c8:58:
1c:39:aa:08:21:3a:c9:02:ce:16:94:1c:07:cb:b1:1e:0b:7f:
2a:e6:da:d1:b7:cb:c0:e1:93:54:09:d2:17:8e:ed:5c:a9:06:
51:a9:96:4c:32:3c:05:1a:bb:2c:24:b1:34:77:6e:f0:a0:a9:
46:5c:95:af:94:f8:39:59:18:bc:c3:a5:73:d3:c5:25:98:f0:
18:0d:df:9d:83:be:b8:7e:6a:cb:ba:96:33:43:32:f7:b4:80:
88:5c:76:e8:a3:6a:a4:74:11:fa:d5:a5:65:e6:3b:d7:27:9f:
aa:95:a4:b7:b2:e7:12:3d:a3:97:0f:cf:11:57:27:3a:ad:69:
12:5f:d1:40:93:93:f0:ad:77:ce:8a:32:74:e5:0d:49:64:03:
7b:8d:ca:f0:5f:96:6e:5f:ed:79:2a:77:5b:5b:e8:8b:29:f9:
47:b2:a5:1f:be:4b:fd:ee:8a:a5:18:28:c4:29:b8:10:9e:12:
ff:94:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:38 2025 by rpki-client