Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/r7u0IE2bOu5C5iohVOqYCap6J68.roa
File: r7u0IE2bOu5C5iohVOqYCap6J68.roa (raw, json)
Hash identifier: QP0IGLZ0eki6mJpLuB5QOPnLrmqkhZzz8hGjh4pe/DY=
Subject key identifier: AF:BB:B4:20:4D:9B:3A:EE:42:E6:2A:21:54:EA:98:09:AA:7A:27:AF
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E156B94F8086971C6A4AF5C2635B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/r7u0IE2bOu5C5iohVOqYCap6J68.roa
Signing time: Sun 01 Jan 2023 19:35:23 +0000
ROA not before: Sun 01 Jan 2023 19:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24866
IP address blocks: 178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
178.176.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e1:56:b9:4f:80:86:97:1c:6a:4a:f5:c2:63:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afbbb4204d9b3aee42e62a2154ea9809aa7a27af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:b2:cc:4f:01:55:d1:ea:90:10:6d:b6:c4:
32:1d:ee:ef:c0:02:18:ba:dd:7e:42:95:6e:28:a5:
48:81:4a:98:1b:7d:45:5e:30:b9:3d:d5:5c:89:52:
38:e3:ea:6d:fb:32:7c:7c:a7:c1:2a:68:7c:17:e6:
59:53:a4:aa:b5:70:0a:9e:0e:ec:4c:c7:6e:31:f1:
17:fb:e9:15:33:ad:61:68:1c:f1:73:a1:8c:4b:38:
d4:5e:a0:8c:3d:d8:ce:fb:ff:11:dd:92:03:8c:0b:
7b:19:c7:1a:2f:19:21:ee:24:e6:e3:6d:c3:9a:f1:
d9:e2:86:2a:71:90:b9:26:6b:b3:e3:6b:73:7f:ad:
10:0e:2c:bb:04:e9:03:26:1b:75:b3:73:a2:97:fc:
d3:23:61:98:e8:2a:40:04:e7:17:d8:e6:35:33:79:
1c:ca:5b:b6:d0:f9:be:e7:0e:df:9e:f0:8d:c3:97:
c8:94:66:1e:8e:93:b4:f8:01:35:df:33:e3:73:50:
ed:f8:a7:4c:52:f5:4e:e9:7c:ed:27:a0:6d:68:13:
0e:4b:3c:b5:30:b4:fe:c5:72:f5:87:35:80:03:5b:
90:06:01:82:83:6c:33:26:32:38:6d:03:4a:fd:ba:
ac:bf:2e:d4:66:04:bc:28:7e:1f:de:6b:f3:13:cd:
2c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BB:B4:20:4D:9B:3A:EE:42:E6:2A:21:54:EA:98:09:AA:7A:27:AF
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/r7u0IE2bOu5C5iohVOqYCap6J68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.227.0-178.176.229.255
Signature Algorithm: sha256WithRSAEncryption
4d:34:7f:f0:21:10:7b:0b:ea:98:a9:e5:98:c7:f6:42:18:fd:
0c:d0:6a:23:b5:11:68:91:be:39:80:94:1c:96:4c:2f:db:a1:
4a:43:d3:8b:2b:4a:a1:e8:51:ed:a0:1e:2a:7d:35:62:56:1a:
8c:49:a3:a7:c5:36:be:45:10:38:cb:bb:57:4b:7d:b0:dc:58:
d0:d1:93:b4:4b:fe:27:ac:9b:a2:95:c4:bc:7f:4a:01:aa:f1:
63:56:3d:47:8d:ea:18:06:fd:0f:8e:77:c4:9f:7d:0f:b5:d6:
18:4f:fc:9d:e0:66:9e:0b:0f:14:a2:84:f6:0a:20:d7:8b:15:
ca:31:84:8c:c2:e8:ba:09:81:21:4d:47:95:3c:3c:2c:f4:1e:
7f:92:5f:fc:46:d5:21:ab:43:a7:87:3c:03:34:fc:c7:d8:df:
0e:c0:1a:e4:0d:46:dc:df:af:ad:d4:3e:79:07:5a:f1:fa:0e:
1d:40:f6:1a:e1:19:ba:83:5c:ef:82:0c:8b:f8:a5:9c:5c:5a:
35:ae:9e:f1:60:a5:ae:46:be:56:f3:c4:17:56:3f:22:d3:c5:
72:20:ee:fa:39:20:e9:f2:d6:f6:1d:c6:a8:bc:1d:d4:0a:c8:
16:bb:d5:4c:94:a4:f5:ea:63:43:a1:7a:76:92:7c:41:4d:62:
7f:6a:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:35 2025 by rpki-client