Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ucpv0V4OX__5vFoAxfERa_j6yZo.roa
File: ucpv0V4OX__5vFoAxfERa_j6yZo.roa (raw, json)
Hash identifier: Dbnvu1xxHsgK+Y4HGSLvE1+ISaF1B/iIjvunI7GMWWA=
Subject key identifier: B9:CA:6F:D1:5E:0E:5F:FF:F9:BC:5A:00:C5:F1:11:6B:F8:FA:C9:9A
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018BA0829BA1FC2C813530411D42C5AC35C9
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ucpv0V4OX__5vFoAxfERa_j6yZo.roa
Signing time: Sun 05 Nov 2023 17:23:15 +0000
ROA not before: Sun 05 Nov 2023 17:23:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216069
IP address blocks: 178.239.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:82:9b:a1:fc:2c:81:35:30:41:1d:42:c5:ac:35:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 5 17:23:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9ca6fd15e0e5ffff9bc5a00c5f1116bf8fac99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:7b:a7:9f:79:0e:70:03:0e:9c:8b:c5:3a:
35:12:00:de:72:56:80:1e:ae:14:1d:ba:6e:77:52:
7f:07:88:9c:ef:21:ac:3d:4a:d8:bd:1c:9d:ff:28:
1b:ac:65:d0:46:28:3a:d4:0d:b0:26:7f:54:5b:10:
a5:3c:35:b9:c3:fb:60:3f:55:d9:a8:b9:af:60:42:
88:3b:03:b0:3c:7e:fe:9b:07:5a:ed:9d:f9:17:dd:
85:8a:7f:5a:53:ab:e3:e6:bc:43:5b:a3:ed:3e:bf:
9c:41:0d:29:8c:3f:c9:43:17:43:3c:44:61:5d:6a:
d2:38:c9:6c:5c:c9:ab:b3:1a:86:ac:23:59:ca:04:
ef:b2:14:0d:1e:d7:17:5b:4f:c5:ee:17:57:0d:c2:
88:27:13:e2:ee:73:e3:63:c3:00:4d:bb:53:a4:e1:
95:bc:61:79:ca:fd:9b:ed:4a:88:28:e7:ef:4a:e3:
a4:e6:1d:46:a3:43:24:a2:22:be:49:b1:18:4e:85:
5f:f3:bd:75:5a:20:40:cd:0a:37:9c:26:c9:ca:2e:
ee:e1:cc:d3:d6:d6:a0:82:77:0c:ae:e9:34:16:aa:
9e:6c:ec:48:7e:ad:cb:ec:31:e6:ef:b0:b7:fe:6f:
9a:35:ca:51:8f:2b:51:cd:1f:39:27:d8:23:7f:e7:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:6F:D1:5E:0E:5F:FF:F9:BC:5A:00:C5:F1:11:6B:F8:FA:C9:9A
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ucpv0V4OX__5vFoAxfERa_j6yZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:55:32:cd:1c:d4:b9:f7:80:c8:28:99:d6:b6:1e:31:f4:be:
bc:0b:a8:d8:db:e8:07:a1:68:4e:79:d6:ab:56:75:01:1a:9f:
3d:26:96:1f:b7:12:a8:e6:07:51:fe:70:d4:03:bf:e1:94:8f:
2d:c7:8e:df:cb:78:72:ab:50:07:1e:47:53:04:a3:ec:1e:8b:
20:b8:1d:01:6c:1f:35:c5:b8:9c:85:78:35:64:e9:93:f1:10:
75:6b:ed:9a:ad:1b:af:8a:91:53:c9:6b:ef:aa:24:fe:73:b6:
ff:f2:31:2a:83:47:bc:55:d9:59:6e:fc:5d:17:d1:82:b1:b0:
8f:c9:04:43:2b:30:77:eb:ae:88:c9:6d:72:1a:df:ff:0a:c8:
44:4f:5b:bf:da:82:c1:53:8a:d6:62:3f:f9:e4:35:eb:f8:1c:
1b:a7:97:e6:3b:8b:23:dc:50:c3:a5:b5:23:86:c9:87:93:92:
59:16:07:d1:d2:65:06:de:dc:12:79:9e:1d:02:91:06:f8:fd:
00:7f:88:2f:e8:da:fc:91:8f:0b:37:d9:7a:75:e5:4f:92:21:
96:13:25:60:17:50:e4:21:47:5a:15:25:a0:32:bd:92:a5:64:
d8:cd:3b:38:b7:29:10:67:fd:ab:2b:39:2b:2d:ac:de:1a:92:
82:18:83:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:20 2025 by rpki-client