Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/VYtdYu8sYjROW5xaq6qrhids7i4.roa
File: VYtdYu8sYjROW5xaq6qrhids7i4.roa (raw, json)
Hash identifier: l1Z6I3//Li5tbQGddyaAdz4PUvaD9BQGTk+YgFqaEZs=
Subject key identifier: 55:8B:5D:62:EF:2C:62:34:4E:5B:9C:5A:AB:AA:AB:86:27:6C:EE:2E
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 01893E9047C211D07EF3FDAF408B1B397841
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/VYtdYu8sYjROW5xaq6qrhids7i4.roa
Signing time: Mon 10 Jul 2023 06:49:50 +0000
ROA not before: Mon 10 Jul 2023 06:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400810
IP address blocks: 78.24.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:90:47:c2:11:d0:7e:f3:fd:af:40:8b:1b:39:78:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Jul 10 06:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=558b5d62ef2c62344e5b9c5aabaaab86276cee2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:e7:75:5d:d8:28:ca:11:15:dc:2d:07:97:
8d:22:08:73:c7:04:0a:ca:28:59:d0:a7:3a:a6:f9:
1a:62:46:15:80:14:ed:f1:38:a1:6e:5a:4f:d9:29:
ff:cd:f7:5a:01:c2:8c:d2:42:2a:f2:06:bb:ea:0c:
75:5b:69:b2:c6:f8:a1:c1:7a:40:15:32:71:6f:15:
5e:bf:c2:b1:f7:c3:6d:a0:88:40:21:ca:00:78:f9:
fd:08:cd:f2:db:4e:f3:5f:d3:f4:38:ad:b7:0d:95:
f7:2d:2f:4d:96:d1:32:40:3a:8c:f4:f9:80:30:10:
75:0e:af:84:41:cd:5a:5e:a8:fa:f4:49:75:fe:8f:
cd:c6:1b:2f:66:2f:cd:88:07:bc:39:b8:08:a4:66:
37:94:23:02:3a:61:6a:c8:8f:57:0e:13:23:3d:fa:
e9:0b:10:8a:6a:04:ea:2d:c6:1b:41:b2:40:a2:50:
d8:cb:81:ea:90:fb:ff:b8:8a:ab:b0:f9:91:c0:5d:
bd:aa:3c:0f:07:a4:2c:6c:d7:6b:e4:e8:2b:49:c3:
83:be:63:a3:58:00:00:28:88:e9:dc:62:a6:d4:6e:
4e:15:94:a9:92:7b:00:5c:22:a3:9e:2b:8d:e6:86:
79:a5:aa:5b:09:9c:54:64:e9:f4:bc:d2:94:a9:bd:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8B:5D:62:EF:2C:62:34:4E:5B:9C:5A:AB:AA:AB:86:27:6C:EE:2E
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/VYtdYu8sYjROW5xaq6qrhids7i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d3:dc:f6:41:7f:b6:79:ce:04:12:eb:0a:ba:a3:50:e6:63:
76:ee:9c:89:f8:00:68:dd:0e:53:60:fe:2a:da:2d:5c:20:ac:
de:35:e1:9c:7b:e6:85:a0:ac:87:cd:4b:0c:2e:0a:38:7f:37:
c2:8d:ac:ef:6f:1f:53:c1:fd:b1:3d:e6:83:2d:6e:e8:84:15:
6a:f3:62:fb:3c:6f:ad:66:6e:c4:82:cc:eb:4d:47:26:a7:ea:
cf:f0:b1:01:e6:e6:7b:f2:60:26:15:f4:dc:2a:97:81:fb:c0:
47:59:60:3c:73:f9:d4:19:ed:29:c4:a9:57:4a:a6:b2:9c:dc:
66:48:d9:ff:67:b7:8b:cb:99:83:5a:43:16:23:5b:bc:a2:11:
11:60:c3:3a:11:8e:85:35:ba:dc:e4:76:30:84:1d:50:05:a7:
3c:cc:bb:14:03:24:e1:91:f6:0e:ed:ba:61:ca:4c:26:ac:00:
6a:f1:d5:66:22:48:7d:9f:3e:c9:d2:d5:a3:08:de:19:c8:a7:
6f:23:cb:7a:13:8f:2e:db:4c:60:2c:fb:5f:40:67:ac:7c:5b:
13:4e:ef:2b:b7:cd:ac:2c:05:9a:44:19:9b:38:3f:33:4d:e8:
91:1f:cb:44:44:43:a3:99:53:30:20:13:20:67:7e:fc:b6:78:
9e:08:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:54 2025 by rpki-client