Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1LW1OK5HM3MXYaBTPMcc2dqTguM.roa
File: 1LW1OK5HM3MXYaBTPMcc2dqTguM.roa (raw, json)
Hash identifier: H9/6mKQSjo9ch5sk3tntbLGEaxy0TzgPAII6EqzvgeQ=
Subject key identifier: D4:B5:B5:38:AE:47:33:73:17:61:A0:53:3C:C7:1C:D9:DA:93:82:E3
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018B6174091A36EBC5BAADEF9F7EC16E6894
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1LW1OK5HM3MXYaBTPMcc2dqTguM.roa
Signing time: Tue 24 Oct 2023 11:31:16 +0000
ROA not before: Tue 24 Oct 2023 11:31:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210392
IP address blocks: 178.239.151.0/24 maxlen: 24
178.239.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:74:09:1a:36:eb:c5:ba:ad:ef:9f:7e:c1:6e:68:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 24 11:31:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4b5b538ae4733731761a0533cc71cd9da9382e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:f2:fe:25:1c:ea:fd:54:fe:1a:72:30:f9:
2d:5a:2d:4c:04:e3:f4:65:7f:04:ae:19:ef:e8:e3:
c4:ca:8c:af:38:74:94:b1:f9:43:d6:61:e5:87:57:
1e:26:d3:ba:f1:0e:2d:32:98:9f:7d:5f:ca:6f:a4:
db:94:8d:3f:28:e4:8e:e4:cd:c4:f8:ce:4d:66:2a:
2d:a8:41:6e:88:65:bc:82:6d:7d:f1:07:fa:17:93:
f7:9e:ae:e7:e3:38:4c:c9:57:b0:18:7d:f3:f5:86:
f7:b7:43:44:f0:6b:3a:0b:fe:55:95:b8:a0:50:cc:
3f:cc:7b:1d:0e:b4:e1:e2:cd:24:44:58:53:aa:27:
78:28:bf:34:cc:16:5d:9d:a7:fd:5d:d6:ed:d2:a2:
13:14:5a:bc:5e:da:f1:64:c4:45:80:4b:f2:b0:7d:
1a:22:74:7e:80:ea:16:52:97:16:1f:54:ab:9f:9e:
b2:f2:e9:98:3a:59:5c:81:8b:58:36:87:d6:1b:7d:
8b:f2:6a:b4:bf:aa:8a:b7:e1:ef:0d:8a:52:c2:37:
90:66:63:aa:b2:77:a3:de:9f:a3:f9:e1:0a:b1:72:
a8:36:47:c4:20:d8:e2:c0:46:d7:a7:fe:a7:45:a5:
ba:2b:1b:2d:cd:03:e5:07:2c:f7:79:6e:cc:20:bf:
d9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:B5:38:AE:47:33:73:17:61:A0:53:3C:C7:1C:D9:DA:93:82:E3
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/1LW1OK5HM3MXYaBTPMcc2dqTguM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.151.0-178.239.152.255
Signature Algorithm: sha256WithRSAEncryption
13:09:6e:8a:c3:11:67:ba:c1:8f:7c:66:bd:b8:8a:c1:e0:2a:
e4:f5:00:4e:16:46:82:30:15:46:de:ec:a1:21:cf:14:24:5a:
ce:3b:71:8d:3e:45:10:6a:6d:71:43:b8:d5:f5:a7:32:1b:84:
2b:77:f2:71:ba:e2:22:aa:bb:2a:c7:90:fc:b9:9e:be:86:1e:
09:ff:bf:79:0a:e5:ab:e5:7b:e4:8f:d2:2a:4e:90:0b:c9:a4:
86:ba:22:e4:e4:1d:1d:9e:a5:4b:1a:ef:18:fe:29:23:95:dd:
0d:3e:78:a9:92:cc:87:2b:28:da:58:67:6c:56:b5:ca:f8:6b:
bd:6e:c4:cd:69:88:0f:c3:99:4e:46:89:e3:e8:be:22:cb:ed:
2b:f9:67:16:c7:3f:26:ef:db:18:96:40:11:84:39:56:75:59:
71:7a:3c:bf:20:ed:a1:a9:a8:a8:30:99:fb:fd:b2:ea:d7:bb:
cc:54:e3:07:48:a4:8d:dd:e1:69:0a:01:85:4c:2e:9d:4f:7e:
4e:c5:d7:fc:9f:71:f4:53:1a:d0:ae:d6:c1:5b:78:1c:54:c6:
24:14:9c:0c:e7:0e:64:13:57:fe:b6:4c:c7:b2:95:06:f1:71:
de:23:34:0a:11:40:77:ed:8e:53:44:c3:f0:86:51:db:19:02:
cc:c4:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:44:04 2025 by rpki-client