Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/z637uDRV9Sf3Nd3ij3HlJJkbImE.roa
File: z637uDRV9Sf3Nd3ij3HlJJkbImE.roa (raw, json)
Hash identifier: zvTS0Xle9H6ycsXPts9tb1bOPb9eSWXzXhbzI6kXPjM=
Subject key identifier: CF:AD:FB:B8:34:55:F5:27:F7:35:DD:E2:8F:71:E5:24:99:1B:22:61
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 19B7C266
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/z637uDRV9Sf3Nd3ij3HlJJkbImE.roa
Signing time: Sat 01 Jan 2022 15:55:45 +0000
ROA not before: Sat 01 Jan 2022 15:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31132
IP address blocks: 178.249.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431473254 (0x19b7c266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Jan 1 15:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfadfbb83455f527f735dde28f71e524991b2261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:70:cc:93:be:ef:55:4e:fa:24:63:0f:6a:
45:7b:a1:b8:e3:25:c6:17:80:de:86:29:03:5c:a7:
4b:41:d3:a5:ac:ea:cf:ac:68:21:3c:f6:47:a5:46:
ee:6b:fd:21:0e:04:f3:48:eb:a1:cc:42:99:53:ac:
60:a4:48:b9:3a:86:be:ef:25:b9:72:d1:df:47:e8:
2b:04:52:2d:1c:46:67:f6:e4:91:55:5b:cc:6a:8d:
b5:4c:89:d4:5a:cb:46:b0:8e:d5:7f:97:55:97:c5:
09:21:6a:e7:d2:a8:c1:68:15:c7:19:55:71:6b:c6:
a2:37:c0:82:30:7a:f0:c0:97:b2:0f:1c:52:43:06:
e4:de:70:66:a2:b9:74:7c:46:1b:0d:1c:d5:b1:8f:
12:70:2b:b1:16:f4:61:bd:45:a2:0d:81:f4:5c:4f:
ba:3f:ce:bf:f4:c1:3b:c2:d2:b3:24:d7:5d:2d:b1:
d7:f9:7c:29:a2:63:0f:ae:8b:7f:a0:7e:4f:33:4c:
73:73:77:f2:c5:de:65:a4:f3:f1:96:dd:1e:d1:64:
99:c8:e3:b6:34:82:93:d8:08:42:97:a5:28:5d:90:
1d:67:dd:49:3d:fa:1b:d8:c8:e5:e8:9a:2c:93:38:
4d:79:b6:f1:12:52:2c:37:82:32:d1:4f:2a:6e:a6:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AD:FB:B8:34:55:F5:27:F7:35:DD:E2:8F:71:E5:24:99:1B:22:61
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/z637uDRV9Sf3Nd3ij3HlJJkbImE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.164.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b5:c0:69:c1:ff:8c:eb:7e:9c:4f:28:b2:2c:31:23:50:e6:
90:83:0d:20:50:57:b2:1e:97:b1:69:65:eb:d8:4b:58:18:e2:
69:76:ed:2a:ce:7f:8d:50:a8:ed:83:be:a1:4f:6d:a8:42:d6:
22:1a:97:b9:67:2a:5d:28:6c:66:01:fc:82:39:4c:23:ca:72:
ee:78:ce:bf:c6:83:d2:93:16:dd:46:7c:db:2a:bf:7f:69:b9:
8c:2c:54:af:ad:15:77:ea:60:55:42:42:0f:ad:b8:6e:13:e2:
f1:c3:19:c0:de:72:e8:44:56:02:19:5a:86:06:07:fc:49:56:
b1:04:12:14:e4:7d:17:b0:ec:67:ee:02:08:73:2c:8a:0f:b9:
a4:e8:1e:2c:96:55:5e:00:9a:ea:08:f9:db:b9:f1:35:45:9c:
de:9b:28:ab:09:44:19:c1:d0:33:be:1e:c7:91:80:bd:a2:48:
92:b4:af:bf:aa:57:4e:3e:50:9a:82:75:a2:28:a8:3c:f5:f1:
0c:cd:95:06:52:7f:40:75:e6:90:9a:21:48:e6:b2:41:14:6a:
be:cc:9d:00:47:20:a3:cd:a3:27:2e:38:33:c6:7a:9d:3b:c6:
56:89:b2:da:7a:e3:ad:7d:2c:a3:80:52:13:43:b4:87:86:24:
2a:36:b1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:48 2025 by rpki-client