Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/7JHsPcUDzylfN2dm-SNZFAAVnNA.roa
File: 7JHsPcUDzylfN2dm-SNZFAAVnNA.roa (raw, json)
Hash identifier: mf0dzcy+r7sp4uYx9dTSUuk6HhT9/JYeqDeEVqF2kFQ=
Subject key identifier: EC:91:EC:3D:C5:03:CF:29:5F:37:67:66:F9:23:59:14:00:15:9C:D0
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 0185E8E89095091A828AD7608AAC50CC7A5E
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/7JHsPcUDzylfN2dm-SNZFAAVnNA.roa
Signing time: Wed 25 Jan 2023 12:30:33 +0000
ROA not before: Wed 25 Jan 2023 12:30:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24675
IP address blocks: 193.178.2.0/24 maxlen: 24
193.178.3.0/24 maxlen: 24
193.178.4.0/24 maxlen: 24
193.178.1.0/24 maxlen: 24
193.178.9.0/24 maxlen: 24
193.178.10.0/24 maxlen: 24
193.178.11.0/24 maxlen: 24
193.178.5.0/24 maxlen: 24
193.178.6.0/24 maxlen: 24
193.178.7.0/24 maxlen: 24
193.178.8.0/24 maxlen: 24
193.178.16.0/22 maxlen: 22
193.178.12.0/24 maxlen: 24
193.178.13.0/24 maxlen: 24
193.178.14.0/24 maxlen: 24
193.178.15.0/24 maxlen: 24
193.178.20.0/24 maxlen: 24
193.178.21.0/24 maxlen: 24
193.178.30.0/24 maxlen: 24
193.178.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:e8:90:95:09:1a:82:8a:d7:60:8a:ac:50:cc:7a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Jan 25 12:30:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec91ec3dc503cf295f376766f923591400159cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:0f:34:b5:a4:b1:8f:65:0a:3e:fc:c0:dd:
f2:97:bb:a2:2e:d9:1d:c4:24:80:36:27:21:24:e6:
26:14:49:68:02:cc:98:5a:1c:93:1c:ce:6c:66:0b:
c3:51:22:c8:ff:42:4d:d3:8b:9a:88:81:27:00:14:
78:f9:0b:8a:d7:20:61:5d:01:7b:96:ff:d0:e0:2a:
22:e0:fa:52:05:c8:26:df:a8:68:70:ea:51:c8:68:
a0:57:23:f5:b8:b6:4b:59:50:1a:1e:17:eb:13:a1:
f8:87:95:62:85:9f:7b:2c:0f:27:03:61:02:e9:86:
7b:fc:a8:35:d8:47:1c:d9:1b:92:6e:bb:f5:3d:44:
02:44:44:bc:e9:32:50:6b:06:1a:c8:28:a0:ad:5a:
a6:14:f6:44:50:f4:61:3a:53:ba:74:4c:04:68:d6:
45:4e:ea:2f:2c:61:5f:c5:55:0c:36:75:a5:d1:f1:
05:08:47:98:0b:7d:b6:62:ba:91:ec:7f:ca:ae:89:
8d:0e:82:8b:4b:59:25:5b:da:b6:08:2b:5e:c0:51:
0a:53:dd:cf:7a:4a:4e:e4:e3:a4:dd:d5:31:3f:c4:
8c:7f:4c:de:6d:e1:7c:10:0b:f3:4a:bd:f2:54:e9:
23:37:f2:65:86:66:85:44:a9:23:b4:81:bb:18:6b:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:91:EC:3D:C5:03:CF:29:5F:37:67:66:F9:23:59:14:00:15:9C:D0
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/7JHsPcUDzylfN2dm-SNZFAAVnNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.1.0-193.178.21.255
193.178.29.0-193.178.30.255
Signature Algorithm: sha256WithRSAEncryption
82:34:cb:7c:bc:f4:ea:e2:b6:af:a2:20:c6:de:c0:44:77:04:
27:35:ef:22:55:40:88:ff:40:68:4c:f4:33:1c:05:cd:ab:a5:
9a:aa:83:81:69:ed:2a:1c:ea:86:bd:20:ff:b3:95:05:90:8c:
a1:4e:78:a4:f3:fe:83:c2:9a:5a:49:09:77:37:f9:45:83:3f:
c3:fe:b7:7c:9b:7c:05:d6:80:67:1c:54:37:64:86:01:c1:1f:
e2:2b:d6:31:e2:ff:ee:e6:4f:10:4f:13:0c:e4:13:3b:a1:d1:
2e:2d:68:d6:b3:18:f6:f8:0d:92:7f:d2:0d:59:cc:42:6e:56:
a8:5d:c5:29:17:c8:d5:ba:83:ce:7d:e9:3b:33:68:fb:d5:2e:
b4:b1:20:35:6d:eb:22:64:25:f0:30:e3:d8:73:89:b4:65:29:
5f:1a:85:92:c8:ec:be:2c:37:92:0b:49:35:52:a8:89:eb:75:
d8:00:e4:36:02:97:b4:b1:57:4a:92:0f:f2:42:01:92:da:f3:
37:80:9a:94:d9:ef:76:ae:f5:63:8c:0c:f1:01:1e:01:5c:b4:
36:f6:ba:7a:e1:a6:ea:f1:89:6c:1e:34:1a:21:ca:8c:19:d4:
83:be:4d:16:8b:55:54:66:ca:87:a3:a3:ef:37:37:d1:84:cc:
f7:d8:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:57 2025 by rpki-client