Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/e__J1P9sqilIwTlUxXpIf9CTToc.roa
File: e__J1P9sqilIwTlUxXpIf9CTToc.roa (raw, json)
Hash identifier: 24jEzoaqaMSSABPmC/1V87LcgqNpk07aTw2OcvpOE/Y=
Subject key identifier: 7B:FF:C9:D4:FF:6C:AA:29:48:C1:39:54:C5:7A:48:7F:D0:93:4E:87
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 06BE31C9
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/e__J1P9sqilIwTlUxXpIf9CTToc.roa
Signing time: Sat 01 Jan 2022 06:52:24 +0000
ROA not before: Sat 01 Jan 2022 06:52:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8680
IP address blocks: 185.16.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113127881 (0x6be31c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jan 1 06:52:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bffc9d4ff6caa2948c13954c57a487fd0934e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:79:49:0f:d1:b2:06:75:df:38:b4:71:10:
b1:52:aa:f0:0c:3e:f9:49:a8:82:e2:2c:66:72:e9:
c1:26:bb:33:6e:1e:c9:ae:65:06:1d:54:10:59:ae:
56:9b:fb:48:1d:00:0a:79:f3:b7:9b:97:51:ab:2d:
ba:61:11:95:a0:25:22:eb:a1:fa:f2:ef:71:79:44:
db:8c:2c:b1:ae:e1:95:f4:81:90:0a:27:7c:02:f5:
33:a2:69:62:24:25:90:3e:9a:5e:a5:d0:ba:1b:b7:
a6:96:81:5e:fc:7a:94:11:c3:8c:e4:f7:9a:c3:fc:
2c:1c:48:77:9f:1c:e6:82:83:5b:29:6a:f3:1c:ad:
44:ea:ee:22:c2:8d:8c:b4:b1:ce:13:5c:d2:11:32:
fb:b9:08:be:dd:c0:bd:fb:5f:cf:9a:ff:65:ef:e5:
1e:dd:29:5e:ca:bc:52:60:4b:c5:13:e9:7a:0d:13:
e2:6e:e7:4f:42:54:55:b3:76:5e:39:fe:3c:b0:af:
ba:74:67:2b:64:d3:f3:fc:ce:1b:a6:46:90:9e:89:
68:37:27:ce:b2:60:1a:9a:38:0b:f8:fb:63:01:ab:
98:d7:a2:31:c3:49:72:6d:b7:75:d7:41:63:cb:29:
54:da:88:d7:a7:43:93:f2:9d:75:7b:05:40:ce:30:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FF:C9:D4:FF:6C:AA:29:48:C1:39:54:C5:7A:48:7F:D0:93:4E:87
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/e__J1P9sqilIwTlUxXpIf9CTToc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:28:0c:d6:06:d1:41:8c:4f:05:1b:9a:15:5d:d2:a1:b7:92:
f6:16:88:ee:0f:07:88:f8:50:7b:2b:b5:20:a6:83:76:fc:fa:
05:68:e6:9a:44:3f:34:a9:1b:36:f2:e6:98:b9:fa:a8:c8:f2:
0c:a5:cc:6c:c4:f9:72:c8:a5:41:0d:76:45:88:7a:2f:25:bd:
a8:c8:fd:86:5a:5a:00:85:4c:3a:14:d1:21:9a:1a:52:0e:5c:
a9:e9:4d:57:14:6b:ca:74:de:f3:2d:47:c5:26:ce:09:39:8c:
2a:0c:8e:b5:e7:87:9a:e8:34:01:aa:db:a2:9c:67:4d:ac:cb:
48:0f:56:e7:89:7b:02:ec:2d:c0:5b:62:69:c0:f1:cd:a1:97:
99:f4:ac:cc:38:bf:d5:a5:10:3f:f8:2d:18:e3:da:68:d8:f0:
a1:76:0e:fa:2b:d4:8e:7e:80:84:7f:ff:ed:12:0f:58:6d:d5:
4b:94:a2:c4:dd:cd:76:dc:b1:2e:5a:33:91:b6:19:b4:03:ef:
53:80:2a:25:c6:6c:9b:57:2d:4d:bf:bc:fc:b5:00:a8:d4:36:
88:99:68:79:66:71:89:c3:93:0a:61:3e:56:4a:44:5c:81:d6:
07:eb:d6:8e:d9:d8:a6:d4:80:20:00:05:f4:b7:78:60:53:68:
7f:d4:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:52 2025 by rpki-client