Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/c3lbbWNtQLuFTJuXzN9qnh2yppA.roa
File: c3lbbWNtQLuFTJuXzN9qnh2yppA.roa (raw, json)
Hash identifier: 9FatzfvTQjAiQX8Mh5r1M4rGNOguCs3lblDY7HZlJyk=
Subject key identifier: 73:79:5B:6D:63:6D:40:BB:85:4C:9B:97:CC:DF:6A:9E:1D:B2:A6:90
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018897ABB2E24B9B48A149E56159D9E528F8
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/c3lbbWNtQLuFTJuXzN9qnh2yppA.roa
Signing time: Wed 07 Jun 2023 21:03:12 +0000
ROA not before: Wed 07 Jun 2023 21:03:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210392
IP address blocks: 178.239.151.0/24 maxlen: 24
178.239.152.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:ab:b2:e2:4b:9b:48:a1:49:e5:61:59:d9:e5:28:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 7 21:03:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73795b6d636d40bb854c9b97ccdf6a9e1db2a690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:3f:58:94:06:07:a6:e0:a1:6d:2a:98:1b:
da:bf:95:e7:0d:7a:41:b2:5d:cc:fa:b4:4b:79:77:
83:ef:af:a2:b6:fe:64:d0:1b:08:85:ef:be:10:b6:
35:ab:b3:39:03:2d:19:13:4c:1e:15:e7:c5:44:bf:
66:4e:0a:50:da:23:16:a7:57:93:3a:03:78:24:93:
22:82:4a:50:98:7b:63:25:b9:93:59:2b:27:89:f1:
7d:1c:ba:63:cc:5c:bd:87:7f:c2:49:d4:c6:c6:33:
a8:ee:30:e2:73:52:61:23:8e:51:65:d4:bd:22:7d:
7f:77:fb:ed:20:15:9d:3c:43:1f:a0:3f:3c:62:df:
dd:0f:8f:db:a0:a4:f0:2d:08:1e:7c:38:fa:2e:fa:
b1:db:99:47:de:5e:17:6f:fd:9c:09:76:28:7f:c2:
e1:c2:36:7a:62:9e:9f:8d:5f:a6:dc:86:16:2c:34:
ce:b5:d5:04:09:0a:0c:5f:d3:89:fc:28:ab:12:53:
09:b3:b5:3e:61:d5:d8:77:17:31:b6:79:9b:c7:c3:
1b:3d:c5:9d:ec:bc:15:56:7d:4a:ca:69:28:5a:3c:
7d:94:7f:31:33:ae:a0:80:34:45:45:7d:02:a3:87:
f9:cd:53:bd:d3:8f:d3:e8:62:d0:b0:4b:b9:d4:ed:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:79:5B:6D:63:6D:40:BB:85:4C:9B:97:CC:DF:6A:9E:1D:B2:A6:90
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/c3lbbWNtQLuFTJuXzN9qnh2yppA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.151.0-178.239.152.255
185.26.32.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:95:a7:98:e4:a4:8e:05:dc:06:f1:b2:91:7d:78:df:0b:a0:
80:a1:8e:4b:7d:c3:b4:fa:9f:0b:f6:53:e0:27:85:25:79:e2:
08:b8:48:64:fe:df:c1:56:ba:fc:4e:48:ce:83:74:95:b7:91:
2b:cf:cf:52:c0:40:23:6d:12:d2:58:f6:09:74:c5:a4:a4:5e:
4d:80:df:ca:ad:5f:22:dc:0d:cd:26:6f:57:c7:a0:98:96:01:
cb:5b:16:ae:f8:e7:fd:e2:ba:8b:39:b2:3b:9c:82:60:99:53:
de:53:09:a6:59:4e:d3:de:d3:05:a7:19:60:2c:48:81:b7:d3:
10:bf:76:3c:71:92:bc:68:ab:66:81:82:bd:5e:3f:dd:04:bb:
fc:11:40:44:5d:5c:75:d4:c3:d2:17:aa:9b:20:93:de:81:18:
8d:5a:02:17:25:23:19:14:83:ee:a1:31:37:ec:5e:58:f8:ed:
23:8e:40:b0:64:f0:9a:35:7a:b6:ff:6f:4e:93:00:ad:fe:86:
f2:ce:dd:d8:c6:9d:2d:ee:02:07:97:66:fb:88:36:7c:11:0f:
05:d3:fb:3b:e2:09:b5:c4:37:35:8b:de:3f:2e:9a:68:c3:34:
f8:f2:b2:00:c2:a3:a2:18:58:22:04:23:8d:2a:b3:c2:d0:f7:
a5:89:9e:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:08 2025 by rpki-client