Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Cv97aJ2sc4DncgwKKE6fG2je0IU.roa
File: Cv97aJ2sc4DncgwKKE6fG2je0IU.roa (raw, json)
Hash identifier: ABY77gQ7DTESDC5lQHfKRJUsPkzmJ9DCXeZ592dJ7Mk=
Subject key identifier: 0A:FF:7B:68:9D:AC:73:80:E7:72:0C:0A:28:4E:9F:1B:68:DE:D0:85
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 018571F9FC0F802C44F7DFC501AE3E9EE6FC
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Cv97aJ2sc4DncgwKKE6fG2je0IU.roa
Signing time: Mon 02 Jan 2023 10:14:46 +0000
ROA not before: Mon 02 Jan 2023 10:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12395
IP address blocks: 178.249.167.0/24 maxlen: 24
2a01:728:108::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:fc:0f:80:2c:44:f7:df:c5:01:ae:3e:9e:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jan 2 10:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aff7b689dac7380e7720c0a284e9f1b68ded085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:0e:c6:0c:a0:4d:7a:30:f2:53:a3:3c:2d:
52:6a:36:7c:94:98:68:be:05:d9:11:1b:b5:32:bf:
a8:cc:37:f3:72:69:1b:2f:3f:ac:75:ca:c1:d0:e9:
b8:c7:f2:1c:fb:34:84:e8:ab:e5:74:6d:bf:b4:c9:
2b:95:2b:2e:36:98:0b:e1:e1:d7:db:06:ce:7e:e0:
18:ff:c7:0a:34:cb:15:cb:ff:27:42:b6:ee:4b:f6:
b7:43:f6:97:30:da:e3:08:2c:ae:c1:17:a3:63:49:
d9:ee:79:e1:68:b4:92:a5:f0:13:c7:a8:6c:da:93:
6d:93:b6:fe:92:e9:93:97:fd:8e:e4:83:8b:65:00:
3d:85:81:86:e9:ea:3f:79:97:b6:7b:39:f8:72:e5:
91:88:5f:f5:92:c5:4a:71:ea:64:0f:5e:c3:e9:f8:
00:4e:a5:9f:58:0a:d9:66:cc:a5:7b:3c:c4:ab:e1:
f8:58:7b:ab:ca:ed:33:20:66:15:0a:7f:82:14:5a:
4c:86:df:93:c2:76:db:cb:42:ed:eb:7e:cd:f5:69:
9c:57:f5:ef:e3:9b:bb:ec:68:96:fb:69:a0:25:23:
63:52:1e:65:2d:42:ca:ee:3f:36:03:10:d9:74:65:
8a:66:2e:43:91:37:54:e9:f0:54:d5:cf:ef:72:01:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:7B:68:9D:AC:73:80:E7:72:0C:0A:28:4E:9F:1B:68:DE:D0:85
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Cv97aJ2sc4DncgwKKE6fG2je0IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.167.0/24
IPv6:
2a01:728:108::/48
Signature Algorithm: sha256WithRSAEncryption
72:93:ba:8a:f6:0f:91:65:76:cf:5c:54:89:85:63:a5:5b:ec:
42:b6:3c:fb:43:42:e6:e3:ed:e7:fc:c5:8e:53:1c:3b:70:95:
ee:2b:0d:57:64:84:5c:a8:7c:07:ef:64:e0:cd:e9:77:f3:00:
bf:48:63:90:1f:1e:34:d7:79:44:08:d5:5b:6e:47:a4:b0:17:
cb:30:ff:af:1a:28:3c:8c:11:45:e6:1b:1c:2a:22:d4:80:af:
0d:2d:05:c2:a1:4f:41:9d:a0:58:47:e2:b5:d7:cc:5d:eb:3f:
2f:42:cc:e5:fc:bd:61:fc:4c:46:0f:99:dd:9b:a2:cf:1f:a0:
e8:53:3f:7c:d9:25:21:3f:11:32:c3:09:a0:d7:ed:d4:fa:38:
48:31:38:2f:37:2f:e8:0c:e7:49:6d:cd:31:2c:30:0f:68:ea:
1a:28:b4:35:87:ff:e5:20:0f:fc:60:63:e9:d2:b2:90:b6:c2:
69:72:c1:97:f1:fd:cc:d1:3b:ee:26:96:41:7e:22:96:f7:76:
c6:81:7f:37:40:67:ae:0b:8c:b1:08:9a:51:c4:db:f0:dc:b9:
d2:6e:a9:9f:c9:02:b5:52:64:3f:cc:c5:b9:91:cf:6e:95:36:
49:33:64:27:7c:38:23:2b:4b:f1:c3:4e:7a:f3:4c:3e:19:82:
e2:2f:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:33 2025 by rpki-client