Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/F-1AVlEepc3ltdyRsgdn-srKGOc.roa
File: F-1AVlEepc3ltdyRsgdn-srKGOc.roa (raw, json)
Hash identifier: URailrJM4xbktAeyd4fYEiCrw588Ib5SSP42Oad3cXE=
Subject key identifier: 17:ED:40:56:51:1E:A5:CD:E5:B5:DC:91:B2:07:67:FA:CA:CA:18:E7
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01849F7C5C5AECA72AA390FF678390567811
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/F-1AVlEepc3ltdyRsgdn-srKGOc.roa
Signing time: Tue 22 Nov 2022 13:17:18 +0000
ROA not before: Tue 22 Nov 2022 13:17:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212908
IP address blocks: 78.159.64.0/21 maxlen: 21
78.159.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:7c:5c:5a:ec:a7:2a:a3:90:ff:67:83:90:56:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Nov 22 13:17:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17ed4056511ea5cde5b5dc91b20767facaca18e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b9:84:1e:91:79:aa:96:e9:97:55:ff:ab:7b:
e6:13:05:df:84:f0:cc:12:52:a6:43:1f:d4:a4:96:
99:d8:3e:e9:38:69:d5:fb:a7:1d:9f:ef:b0:54:93:
fd:0f:b6:ab:0d:45:54:82:55:c7:55:ac:a9:34:bd:
56:b0:25:f4:21:f9:78:3f:54:ab:e0:0c:ac:c0:98:
e7:b9:cd:69:26:4a:9e:0a:d1:f9:a0:c2:4e:51:2e:
ed:43:84:93:65:65:74:8a:60:57:9b:60:bf:0d:62:
0c:18:1b:98:a6:3b:fd:c8:bf:5b:8d:10:54:79:00:
18:1c:ce:b4:2b:73:1c:e4:f3:20:cc:78:13:16:7b:
f3:da:5e:08:f2:37:ea:48:9e:4f:40:d1:f9:98:90:
b7:2f:f6:9c:18:9a:26:25:cb:86:cd:2b:af:52:d5:
e6:a9:5a:b7:e5:fa:6f:4d:95:fc:5c:82:eb:84:7c:
7f:3f:5b:62:f4:c6:ed:2a:dd:f6:95:b2:f5:56:4d:
39:9b:e9:6e:ad:5f:92:a5:2d:89:af:7f:b6:5b:7d:
ef:fe:1a:2f:39:d8:44:7a:65:f0:cb:39:a1:91:8c:
52:3f:7c:2a:f9:7a:c5:e5:32:4c:5d:34:ba:e0:8f:
e0:ea:18:99:58:a1:ce:89:e3:19:2b:83:cb:18:d8:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:ED:40:56:51:1E:A5:CD:E5:B5:DC:91:B2:07:67:FA:CA:CA:18:E7
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/F-1AVlEepc3ltdyRsgdn-srKGOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.64.0/21
78.159.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fc:5d:17:02:c4:73:7e:45:c6:66:27:2c:ec:3a:fb:6f:33:
28:a8:47:47:44:62:b0:b5:1d:e0:2b:cc:77:a7:d4:38:4e:53:
3c:25:9a:8c:5a:17:ff:6d:ce:25:a0:1a:56:1c:15:83:eb:ed:
e4:10:bc:2c:74:b4:25:ac:8c:94:ce:32:5c:cf:7d:12:20:72:
78:aa:fc:7a:97:a0:19:95:97:20:78:46:dd:36:fd:bb:97:5e:
cb:e8:27:ad:dd:26:20:0a:f4:b8:0d:1e:63:94:1a:a6:89:b8:
3f:a0:9d:52:91:f1:a1:2a:7f:89:da:e0:7b:e8:12:33:14:61:
4d:b1:d5:dd:22:3b:00:07:83:c3:46:f5:ad:5a:32:56:ec:30:
7e:1b:36:20:5e:70:b6:80:07:d3:06:2c:2c:de:be:6e:c9:9f:
23:2e:d1:76:b4:fa:f2:bd:ed:58:41:5d:86:74:01:98:1a:d0:
71:7a:31:bb:e7:4b:5e:f2:af:e4:24:4c:33:e1:34:38:8f:3b:
ca:fe:d1:2c:db:ff:63:9d:c0:d5:f3:c2:2c:2e:b6:6f:d7:1d:
df:fc:ed:6d:94:c6:29:e4:45:9e:78:50:9f:69:1e:23:c7:05:
01:bf:2d:81:e5:87:98:25:5e:0b:4c:8d:ad:ef:96:e1:ce:a9:
28:e3:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 12:35:12 2025 by rpki-client