Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/yO76KLWuB10nHTZHqj-RCmHUOpc.roa
File: yO76KLWuB10nHTZHqj-RCmHUOpc.roa (raw, json)
Hash identifier: UKXri37hqIzHZIBIxLG5a6XWj1NRzXXwhvU14QJdHjM=
Subject key identifier: C8:EE:FA:28:B5:AE:07:5D:27:1D:36:47:AA:3F:91:0A:61:D4:3A:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 11D12A
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/yO76KLWuB10nHTZHqj-RCmHUOpc.roa
Signing time: Sat 01 Jan 2022 01:59:36 +0000
ROA not before: Sat 01 Jan 2022 01:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205499
IP address blocks: 178.251.16.0/22 maxlen: 22
178.251.16.0/24 maxlen: 24
178.251.17.0/24 maxlen: 24
178.251.18.0/24 maxlen: 24
178.251.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167658 (0x11d12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jan 1 01:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8eefa28b5ae075d271d3647aa3f910a61d43a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:2f:84:3b:a8:57:b0:6e:98:1c:15:d3:39:
0d:3f:3e:c7:3a:97:cb:46:f8:99:46:d2:78:ac:13:
32:a1:92:7a:a2:d4:05:78:52:8e:4e:cb:65:7f:18:
b3:88:18:34:80:46:cf:86:4e:ff:0d:81:8e:34:cc:
52:e5:a9:c6:2f:c9:29:f4:03:57:f3:e6:3f:83:24:
4c:92:d5:bf:fd:71:3f:ad:bc:1b:b2:09:67:42:6e:
90:39:e7:31:8d:42:e8:ff:2c:fd:fe:3a:04:6f:42:
f2:cd:da:70:35:31:c1:b8:e5:0c:d5:6d:c2:48:4f:
a0:a3:91:ae:4a:8b:57:0b:f9:cd:11:17:6f:2a:02:
01:fa:2a:fe:18:88:14:07:d3:78:a6:83:1d:59:2f:
6b:de:06:cd:47:43:17:65:82:3a:e4:7b:9d:6e:0c:
70:22:01:6a:d0:b9:85:c0:09:fc:ba:a6:a0:cf:33:
09:f5:7c:f9:f4:5c:9c:a5:18:62:52:d2:28:0b:79:
14:1c:4e:39:86:46:d8:04:26:3a:41:aa:88:c1:fe:
20:60:02:65:89:89:78:de:54:8b:88:5f:99:24:78:
0d:68:62:f7:c8:ad:38:fa:ab:c6:2e:cc:8d:e6:59:
6f:8c:82:32:4b:e9:1b:f6:91:14:ff:9f:7c:e3:ab:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EE:FA:28:B5:AE:07:5D:27:1D:36:47:AA:3F:91:0A:61:D4:3A:97
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/yO76KLWuB10nHTZHqj-RCmHUOpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:c1:61:e2:c0:bd:5f:1d:42:c0:65:ab:07:2a:52:ed:e7:40:
c0:15:7d:d3:64:59:2d:21:61:5e:b4:89:6c:39:89:f7:58:b7:
29:fc:71:e2:4b:b6:41:28:0e:7c:e6:f1:4a:d9:52:75:a1:98:
fa:6e:6a:b2:ac:0d:25:03:14:df:8b:d0:38:d6:a2:2b:9c:56:
f8:11:28:02:c7:91:a7:b8:12:29:b9:b0:4f:15:42:e7:9b:29:
e2:37:fa:08:91:d9:7c:0e:f1:78:f0:a0:f8:61:4d:0f:18:72:
4c:a5:09:13:f6:b5:84:44:fe:b3:db:67:d0:c7:82:d4:ed:e3:
85:ad:5c:ee:9d:03:3e:0e:98:1e:f4:58:ec:41:33:63:f9:96:
78:74:96:fa:5a:08:d7:63:c1:2c:79:34:a7:02:49:19:c1:88:
af:a8:40:09:ea:f7:36:c4:16:f6:7e:20:e7:1e:5c:b0:4e:29:
06:cf:c8:df:fc:80:49:40:9d:9c:d6:94:c2:bc:85:76:72:a0:
31:08:8d:19:c0:6f:d7:95:b2:cd:a0:4c:43:4d:fb:94:8d:1d:
7c:2d:a1:db:4d:af:8c:55:5e:1b:89:95:fb:6f:9e:23:37:88:
d9:ac:a0:2e:88:5c:3f:9e:8c:da:77:ca:ba:99:6b:db:da:3a:
da:a9:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:00 2025 by rpki-client