Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/fzTCwOVgGFWPo7m6wNiiTRttX5Y.roa
File: fzTCwOVgGFWPo7m6wNiiTRttX5Y.roa (raw, json)
Hash identifier: wIqfiMEVTR4YZ+mVQ9kPlXMJHc6pJoW4EAbDGX7VdZE=
Subject key identifier: 7F:34:C2:C0:E5:60:18:55:8F:A3:B9:BA:C0:D8:A2:4D:1B:6D:5F:96
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 01837E488B43DCACB0F3FF7891EBD98DB76F
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/fzTCwOVgGFWPo7m6wNiiTRttX5Y.roa
Signing time: Tue 27 Sep 2022 09:30:26 +0000
ROA not before: Tue 27 Sep 2022 09:30:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41227
IP address blocks: 78.111.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:48:8b:43:dc:ac:b0:f3:ff:78:91:eb:d9:8d:b7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Sep 27 09:30:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f34c2c0e56018558fa3b9bac0d8a24d1b6d5f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:7c:f0:c8:ec:56:df:e8:c0:a0:2d:cc:dd:
88:71:2d:fa:79:dc:e7:92:8b:39:0a:5e:42:7a:e1:
99:3a:91:39:5c:71:2d:ee:f1:43:21:c5:e4:c5:13:
68:ad:09:70:af:a4:c7:20:16:24:b8:dd:10:04:8d:
92:8b:e2:3a:bb:49:f8:43:26:3b:90:e4:95:f7:85:
bb:e3:10:e1:00:1f:45:22:f4:c5:e0:0a:a4:3d:b0:
08:90:e6:9a:2b:85:16:83:ad:29:1b:66:32:e9:7d:
da:c1:f3:f3:03:3a:2d:80:94:08:64:ed:6b:95:16:
31:96:ed:61:84:f2:0c:2e:92:86:c0:b7:a8:02:53:
06:47:65:31:16:0b:0d:1b:81:6b:a0:32:05:d5:7a:
dd:a2:6f:8b:36:70:18:48:77:80:80:de:d4:0a:b9:
50:d1:c2:5b:eb:8e:22:51:8e:52:4e:c4:e2:d1:1e:
cd:be:0a:52:66:8c:64:7f:6d:6e:ee:e5:28:5e:31:
a5:b1:df:6a:27:02:3d:45:fe:a0:a0:99:42:44:fa:
09:74:b3:d9:78:d1:0b:ad:c4:dc:67:cf:08:72:c0:
05:3e:2e:bc:c2:57:fb:96:74:54:95:68:d2:a9:f1:
52:1f:54:9c:6d:2d:a4:a9:9a:54:a6:cb:85:bd:35:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:34:C2:C0:E5:60:18:55:8F:A3:B9:BA:C0:D8:A2:4D:1B:6D:5F:96
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/fzTCwOVgGFWPo7m6wNiiTRttX5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:78:12:2a:3e:db:b1:2f:37:71:86:f3:07:4d:af:cf:37:1d:
07:29:58:47:49:4e:9d:74:6f:6a:59:fb:ac:35:ec:64:40:6d:
74:b1:5e:52:17:59:52:33:5b:02:5a:90:aa:5f:1f:d0:f3:5f:
60:db:4c:4b:3d:0a:69:f0:f1:5f:22:a6:43:64:55:fd:bc:dc:
4c:0c:8e:3a:2d:9d:82:f8:d1:39:7f:c1:a1:68:69:74:8b:47:
9c:ed:ac:df:aa:fe:b9:29:b8:d9:99:5f:ce:e4:07:e0:de:7f:
5f:94:5a:0f:5d:12:48:40:e4:01:d9:9f:14:38:a5:22:30:c4:
95:ae:22:e3:8e:58:c5:12:78:c5:29:be:b5:cc:fa:ff:8a:bc:
93:28:c0:37:97:ac:09:99:b4:ff:a8:a6:73:67:cc:c7:af:99:
f8:87:72:e9:91:40:7c:17:0d:d3:76:1d:4e:23:ee:3c:b8:ec:
35:39:92:18:c8:c9:df:6e:c1:36:e9:3c:e7:04:01:94:e5:82:
00:c3:1d:af:da:a4:72:81:ba:fe:d0:e3:9b:5b:cd:44:0e:e2:
c5:1d:6d:fb:28:84:bc:a8:fc:cb:a9:e9:d3:00:a2:9d:2d:56:
a6:c8:c3:08:cc:00:dd:d7:99:43:e0:b9:a3:d7:aa:c8:45:91:
a6:e2:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:18 2025 by rpki-client