Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/cSV-V-MeVUXJV-bnncYDL79jMts.roa
File: cSV-V-MeVUXJV-bnncYDL79jMts.roa (raw, json)
Hash identifier: jotswbSIFkRue5BeldmWXTpkdViCZTRy8yNF/eBsd84=
Subject key identifier: 71:25:7E:57:E3:1E:55:45:C9:57:E6:E7:9D:C6:03:2F:BF:63:32:DB
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 04A0BA4B
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/cSV-V-MeVUXJV-bnncYDL79jMts.roa
Signing time: Sat 01 Jan 2022 16:05:22 +0000
ROA not before: Sat 01 Jan 2022 16:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208574
IP address blocks: 147.78.40.0/22 maxlen: 24
2a09:1cc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77642315 (0x4a0ba4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Jan 1 16:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71257e57e31e5545c957e6e79dc6032fbf6332db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:d6:e1:29:c7:cc:09:24:4a:b5:6a:9a:d3:
e3:b0:d0:b7:fe:01:8f:1d:72:cb:8b:35:f2:9b:12:
b5:d8:4b:61:90:f4:85:af:91:82:89:e1:47:8d:47:
c8:54:2e:8c:12:8b:b4:3c:3a:8d:a9:1d:1d:42:42:
47:54:31:da:9d:24:cd:21:9e:45:e5:6e:42:90:93:
ae:aa:08:40:db:cd:70:b8:06:5c:33:9d:ea:9e:74:
2f:8a:d2:96:bc:c2:bd:56:c8:b9:f9:86:83:f8:a1:
39:c5:07:91:f6:b6:69:ba:d3:bd:b2:95:bc:24:e2:
5d:62:6c:b7:e6:e9:a9:fc:5a:7d:3a:fb:9f:d0:8b:
34:e7:70:f8:f8:7c:27:0f:49:e8:4e:84:5c:d2:67:
a7:be:3a:b9:af:3e:c0:a7:7e:18:da:63:45:1e:44:
7c:17:78:c4:9d:10:bc:81:d9:2e:60:4b:07:bd:8f:
f5:ae:3b:13:09:c2:da:b6:a6:a1:78:81:51:cf:8f:
80:44:f1:ca:cc:75:a6:4b:96:e2:31:94:21:b6:bb:
ba:b1:ed:44:0a:d7:0a:5c:c4:26:33:5f:2e:b8:85:
b1:2b:f4:d5:a7:3a:04:f8:c2:90:11:71:ba:e0:74:
fe:84:fb:0c:a6:bb:0b:2c:f7:1a:5f:5b:98:21:73:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:7E:57:E3:1E:55:45:C9:57:E6:E7:9D:C6:03:2F:BF:63:32:DB
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/cSV-V-MeVUXJV-bnncYDL79jMts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.40.0/22
IPv6:
2a09:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
83:79:16:9b:29:54:60:ae:07:61:f3:d6:65:72:5a:d7:df:06:
d1:ca:f9:ed:75:20:8c:cf:d1:d3:6c:30:02:36:94:da:e7:ae:
7d:63:16:1a:c0:eb:98:f5:13:9a:e7:be:9a:60:5e:01:9c:9f:
bf:93:69:31:3c:f8:1f:48:8f:58:ff:96:e4:dc:0e:87:5e:be:
31:50:33:f9:cd:b3:39:c0:3f:97:34:7e:b8:1f:f4:2c:b9:ca:
cb:ee:32:45:9e:ae:83:3f:d2:df:46:90:44:f3:70:5b:3a:4a:
d0:e2:19:14:f3:10:b2:12:09:ae:c8:71:25:16:7e:48:21:32:
c3:57:a2:d5:75:9a:50:ab:5c:ff:f7:89:c2:4c:bc:05:38:d9:
04:30:04:3a:da:a1:fa:d3:5a:b3:f1:2f:e0:8d:ca:bd:21:c7:
da:28:16:fa:ed:70:da:a2:60:15:a3:f6:ec:82:e3:b2:b0:72:
80:3d:f0:04:1d:fe:1d:cf:87:00:e3:05:0e:da:52:f7:a8:17:
80:e3:19:be:af:05:02:36:b7:16:96:cf:25:9a:dd:ea:43:bf:
0b:ba:75:c4:bc:71:e9:f1:fd:5b:23:14:aa:fb:dd:49:02:c5:
c3:97:0a:69:cf:94:87:79:e1:87:81:00:cc:43:d8:bb:4a:6d:
41:a7:d0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:18 2025 by rpki-client