Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2YueaJJXfNbYe-rKxCLX5C-PPs4.roa
File: 2YueaJJXfNbYe-rKxCLX5C-PPs4.roa (raw, json)
Hash identifier: upcGcxd5JTaL/SMtXokzd22b8K6RcrvZjbyxirgNkJ0=
Subject key identifier: D9:8B:9E:68:92:57:7C:D6:D8:7B:EA:CA:C4:22:D7:E4:2F:8F:3E:CE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E7B2BF5C1C1D1BFE2994AF1D5D23
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2YueaJJXfNbYe-rKxCLX5C-PPs4.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33908
IP address blocks: 82.140.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e7:b2:bf:5c:1c:1d:1b:fe:29:94:af:1d:5d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d98b9e6892577cd6d87beacac422d7e42f8f3ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:3f:1c:df:bf:e0:5f:b8:c3:41:61:9e:91:
4a:02:40:d1:e2:96:40:eb:9a:68:ce:66:47:59:ac:
7d:52:c3:7b:7a:3b:85:f4:c2:37:ee:14:c1:a1:d3:
35:2b:22:35:60:10:63:d7:9d:95:fb:f7:76:f7:bb:
f5:a5:22:36:d2:45:5d:6b:ca:ae:01:7a:2a:33:94:
46:b9:de:59:e6:e8:a7:9d:f7:ab:01:eb:57:3e:c5:
5c:01:a1:62:a9:70:bd:2a:20:82:2a:61:d4:2a:11:
08:bf:61:7c:7a:c9:c7:5b:cb:52:5a:62:6c:34:69:
26:2d:5b:be:33:a7:c2:9e:0e:f5:18:01:c8:21:95:
7e:77:7b:8d:cb:dd:19:e8:fc:aa:ae:ff:17:69:27:
47:cf:19:c1:c4:77:5f:22:d6:12:86:49:7b:8f:e0:
7f:f8:4e:ec:ad:c9:90:02:b2:35:e2:87:44:10:b9:
e3:a8:e7:39:0f:dd:81:35:38:f6:3c:bf:4c:a5:26:
5c:0e:ca:b3:d4:34:80:4c:f9:85:11:15:f5:42:a5:
a9:08:01:b5:c7:1b:23:61:6f:64:33:03:b8:b0:3e:
ad:5c:2f:d5:ea:bb:8e:d5:55:b7:43:b2:df:79:f1:
f4:45:08:d0:08:ab:b1:fe:c2:ca:df:4f:1f:f2:62:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8B:9E:68:92:57:7C:D6:D8:7B:EA:CA:C4:22:D7:E4:2F:8F:3E:CE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2YueaJJXfNbYe-rKxCLX5C-PPs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.78.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5d:c8:91:af:a0:b4:19:c9:39:cb:f7:81:95:50:3e:f3:ab:
58:2a:2d:2c:62:24:93:6e:f2:3f:b1:ba:a7:d7:3c:a1:76:58:
62:3f:b8:08:3a:cc:4b:e4:09:3c:ef:d0:0c:67:2e:52:a7:e6:
53:6b:94:01:d3:42:54:70:2c:d1:90:fd:19:23:4b:44:57:42:
b3:63:66:35:e0:32:0e:d7:f8:a9:9f:0a:86:82:a1:4a:9d:6d:
ba:76:37:25:dd:3d:2a:ac:4b:0c:8d:49:95:09:9b:5f:22:0b:
1b:db:c8:66:41:47:1a:6c:32:d2:42:4e:68:59:2e:7d:7c:b0:
16:62:bb:b2:75:94:bf:88:e8:53:91:62:c8:58:c3:61:83:9d:
01:b5:4b:6c:bb:d3:b0:a5:78:00:80:0b:18:03:14:1e:f9:a5:
0a:b1:9f:22:ec:10:d5:76:30:73:e1:c2:2f:43:4a:f7:42:55:
c8:6a:2d:4d:c9:86:32:04:a6:89:6e:cb:2f:19:0b:30:49:c4:
f0:1e:e9:d6:d5:f7:df:3f:c3:b3:08:e3:0f:c4:cc:e8:94:15:
d6:b3:60:7b:7d:93:78:b6:3d:fb:bc:d0:7f:50:52:1e:8a:6b:
96:6f:ba:f8:f4:14:98:5f:15:cc:29:68:30:cc:73:a6:d7:60:
e0:79:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:48 2025 by rpki-client