Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/xwl1dkiTgvE6m95ITa75bHC6_84.roa
File: xwl1dkiTgvE6m95ITa75bHC6_84.roa (raw, json)
Hash identifier: DRvsBHOOJThK+V3ayxtmZHGIyERqLRFypAj445QLBEk=
Subject key identifier: C7:09:75:76:48:93:82:F1:3A:9B:DE:48:4D:AE:F9:6C:70:BA:FF:CE
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01856C9CA4BCF02EF0941EDD5EDFF2F52C02
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/xwl1dkiTgvE6m95ITa75bHC6_84.roa
Signing time: Sun 01 Jan 2023 09:14:42 +0000
ROA not before: Sun 01 Jan 2023 09:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3266
IP address blocks: 78.24.73.0/24 maxlen: 24
78.24.74.0/24 maxlen: 24
2a00:1909::/32 maxlen: 32
2a00:1909::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:a4:bc:f0:2e:f0:94:1e:dd:5e:df:f2:f5:2c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 09:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7097576489382f13a9bde484daef96c70baffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4a:b3:42:ed:1a:10:f6:df:a3:a4:81:31:1d:
2d:3b:69:c9:e9:d2:4f:5a:ea:da:0e:07:24:c4:b9:
32:7d:97:12:34:40:22:2d:3a:0d:0e:aa:89:4d:94:
4d:70:be:07:78:14:8e:cb:a6:88:15:ef:ad:5b:2f:
c5:c0:a1:ad:a9:f1:f8:9b:e2:ba:94:82:b4:fa:48:
a0:7c:05:2e:48:28:b5:cc:1d:7a:8a:a5:1a:b2:ca:
eb:9c:38:1d:c8:3d:9b:3f:e5:60:35:1b:20:67:98:
70:33:44:cc:10:fd:f1:dd:da:7a:f0:f5:9a:ad:fb:
10:a1:a9:fe:9f:ff:48:cb:db:29:db:f0:77:bb:43:
5c:41:89:2a:cf:cd:57:ee:b4:2a:a2:7e:14:5b:06:
a3:d2:64:7a:a0:0b:1e:c1:71:e7:30:59:f6:80:b5:
20:95:5a:3c:9b:40:e2:55:f2:59:10:58:09:dd:4f:
d0:90:6e:8b:85:7e:8e:46:f6:f7:71:d9:7c:e1:ba:
c3:73:67:7e:77:95:30:8d:71:fe:b8:f2:3d:77:0e:
c9:86:ce:ff:38:8d:82:84:59:2a:8e:f1:84:12:96:
5d:42:c5:11:d0:2a:a0:19:ab:f0:d2:c6:1b:ab:f8:
3d:e1:6f:ef:f5:52:8a:81:ec:77:8b:ed:ca:81:d5:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:09:75:76:48:93:82:F1:3A:9B:DE:48:4D:AE:F9:6C:70:BA:FF:CE
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/xwl1dkiTgvE6m95ITa75bHC6_84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.73.0-78.24.74.255
IPv6:
2a00:1909::/32
Signature Algorithm: sha256WithRSAEncryption
28:40:f7:2f:6f:db:66:7b:a9:13:da:ef:2a:f8:e8:bd:a8:0a:
4a:da:20:12:08:e8:d1:45:a4:88:d5:9b:6f:47:d7:d8:24:d4:
16:c9:3e:ce:39:0f:5a:9c:7e:36:bf:55:d3:7f:55:b1:74:8c:
14:40:d5:bb:4a:02:2f:01:ee:b8:29:cf:9f:91:30:ab:f9:d6:
b9:c7:b4:60:ad:fd:f4:bf:7e:6b:fc:da:24:d7:a2:ae:8d:47:
aa:0a:07:58:8a:64:78:ab:b7:56:ba:29:c5:34:5d:78:ab:15:
fe:32:98:13:04:8c:54:11:fc:ec:fd:46:bf:92:de:71:01:df:
85:1e:8e:9c:ea:cb:a1:a9:3d:5c:e7:e2:df:7c:3c:de:00:6f:
0f:40:7f:2b:b6:d3:98:10:8c:d6:4c:28:f6:e0:87:50:00:88:
f0:1e:f8:98:ec:af:0c:db:d0:19:47:e1:3a:36:9e:fe:f9:fd:
2d:1c:06:fc:05:2c:b8:34:31:6d:33:a9:cf:ab:e5:99:b5:25:
d6:b0:28:ac:30:8a:ce:10:1e:3b:6c:28:72:c3:c3:00:f0:d3:
75:65:80:54:d5:6c:74:39:d1:77:b1:d7:20:1f:a9:18:3e:22:
f2:fc:03:da:4c:b8:17:d9:ff:28:5d:8c:fe:2a:ab:42:f7:b1:
57:27:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:22 2025 by rpki-client