Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Cz-HvQ5IYekRl8r_9NF82a_0kvs.roa
File: Cz-HvQ5IYekRl8r_9NF82a_0kvs.roa (raw, json)
Hash identifier: su1WX6kzYd2TxNfN9yhoxAB67bp+c7fBELEya2BIFuQ=
Subject key identifier: 0B:3F:87:BD:0E:48:61:E9:11:97:CA:FF:F4:D1:7C:D9:AF:F4:92:FB
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018BE686E2F6FC794CA5E3089024BFCD7A6C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Cz-HvQ5IYekRl8r_9NF82a_0kvs.roa
Signing time: Sun 19 Nov 2023 07:41:21 +0000
ROA not before: Sun 19 Nov 2023 07:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43754
IP address blocks: 178.239.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e6:86:e2:f6:fc:79:4c:a5:e3:08:90:24:bf:cd:7a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 19 07:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b3f87bd0e4861e91197cafff4d17cd9aff492fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:0d:cc:a5:82:fb:27:b1:a3:e6:2a:1c:6c:
88:60:74:fb:08:fa:36:84:91:5f:5d:59:9a:e1:46:
4a:63:e3:17:34:92:00:9f:11:66:e2:de:7c:f4:14:
c3:d8:12:73:12:65:3a:9a:ab:9a:e3:5a:43:27:e5:
4c:36:a5:d7:f3:9b:d3:75:5f:81:b1:2e:b6:be:1c:
e9:e3:c4:f7:59:2b:7b:60:4a:e2:22:fe:e8:63:8a:
56:05:46:2d:c9:5d:8c:13:d1:79:36:0c:d7:40:e6:
6d:24:97:16:12:d5:20:42:2e:d9:a8:72:7e:9e:e2:
a6:cb:14:01:4e:31:22:bc:49:59:31:97:03:e3:4e:
ae:39:9b:05:3a:03:2a:03:c6:1a:95:7c:fe:12:31:
a9:34:8c:b0:92:83:36:b7:67:40:1a:e8:70:bb:0a:
a2:84:e7:38:c6:01:f6:d7:e9:e4:cc:0d:24:fd:61:
4b:37:85:68:5c:c8:38:b5:76:ec:05:ff:07:77:39:
8e:90:6a:d5:b6:2c:46:40:04:01:8a:29:62:6a:f8:
e0:f8:01:a7:a1:80:e0:e0:0d:a7:58:3e:cc:47:24:
b5:29:c5:2d:0f:85:af:d2:f2:25:99:2d:c8:ee:41:
f2:e4:a9:f8:30:58:8c:e0:a0:aa:5f:90:11:45:c1:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:87:BD:0E:48:61:E9:11:97:CA:FF:F4:D1:7C:D9:AF:F4:92:FB
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/Cz-HvQ5IYekRl8r_9NF82a_0kvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:d8:d0:cb:25:64:3b:9e:a6:2b:73:67:5a:ce:59:1b:20:ab:
4d:c2:f3:8a:84:0c:88:c0:01:9d:44:2a:8b:37:ac:5b:3e:dd:
b3:b6:da:a3:e4:9a:65:12:0c:f4:62:ca:c2:da:ea:ac:b2:dc:
3e:76:4e:5c:f7:df:dc:3b:cc:a0:13:a1:4c:a2:1f:ba:98:80:
5f:74:45:4c:20:a8:63:7f:bc:9e:5a:d3:4c:a6:70:c3:8c:d7:
1d:37:cf:16:a8:57:36:7c:d0:a9:d3:66:6e:28:45:ad:96:f7:
bc:a8:df:ba:04:4e:d3:96:2d:aa:e8:32:df:a0:cc:73:ec:d4:
21:79:f5:cb:3d:d2:26:8b:7a:f2:1f:4e:95:16:a3:c5:93:b2:
85:78:8a:e0:f0:a7:1e:22:b3:86:b9:8a:a2:85:bb:9a:53:37:
03:09:da:90:5b:cf:03:82:a3:d9:b2:bf:4f:0e:06:fa:43:7f:
ad:dd:4e:78:77:0b:fc:13:39:49:96:1c:0e:e2:83:87:45:71:
b9:80:d5:45:29:7f:15:f4:e0:84:9b:82:20:54:9a:5e:ca:a0:
36:56:10:4c:6a:a2:4a:78:1f:26:16:51:7b:6c:d6:94:fb:b3:
6b:b0:7d:bc:be:b9:20:32:b2:f9:2f:8a:94:9f:5f:6d:35:da:
ca:d6:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:36:30 2025 by rpki-client