Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/vN_THITiffWzrQ28p7un_yY_pSk.roa
File: vN_THITiffWzrQ28p7un_yY_pSk.roa (raw, json)
Hash identifier: 7Yik/nyD5/LvaX6x7iwERCJy8NMCXXqG2esj90Kaxag=
Subject key identifier: BC:DF:D3:1C:84:E2:7D:F5:B3:AD:0D:BC:A7:BB:A7:FF:26:3F:A5:29
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 01892B0E9788E18FBDA85D0085B95B11EBC7
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/vN_THITiffWzrQ28p7un_yY_pSk.roa
Signing time: Thu 06 Jul 2023 11:55:23 +0000
ROA not before: Thu 06 Jul 2023 11:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.64.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:0e:97:88:e1:8f:bd:a8:5d:00:85:b9:5b:11:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jul 6 11:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcdfd31c84e27df5b3ad0dbca7bba7ff263fa529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:f6:f4:63:ee:72:b9:55:03:5a:34:80:ec:
3f:66:28:02:b4:cd:68:5b:4f:a1:04:08:ef:30:9e:
5f:25:6e:16:fe:67:4b:2c:b6:31:55:89:d2:60:61:
a4:e6:54:8d:81:e8:1e:e9:dd:31:41:0b:21:ad:00:
8f:d2:14:65:03:27:20:5b:95:66:38:1e:37:8d:62:
3b:69:91:c0:8d:17:9e:31:08:7f:31:55:f2:51:71:
7c:f3:21:45:c6:c6:cf:73:7b:8f:74:e8:43:8f:3b:
fb:76:00:49:e7:6d:70:d5:8c:d1:f0:57:af:8e:40:
28:7c:70:6f:0e:a5:d2:4f:cf:86:c9:be:49:6d:25:
39:b6:25:da:15:21:00:31:8c:14:1d:d1:63:63:e4:
73:87:85:7a:bb:1e:4f:4d:e8:0a:bb:23:6d:fe:82:
e7:34:5e:51:a3:6a:bb:9d:7a:19:2e:64:cc:6a:5b:
2f:c3:f2:0b:e3:a8:f4:d5:2c:00:22:9a:e8:99:19:
c9:26:d5:f6:71:0b:8f:e6:8e:a3:b0:a1:3c:9f:eb:
bd:36:6b:57:42:e4:d8:1f:08:28:99:0a:28:b7:92:
84:6c:c7:f5:d8:10:b0:98:08:15:d4:4b:49:7e:b9:
49:47:ee:87:5a:aa:88:50:65:cc:ab:05:1d:9b:a8:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DF:D3:1C:84:E2:7D:F5:B3:AD:0D:BC:A7:BB:A7:FF:26:3F:A5:29
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/vN_THITiffWzrQ28p7un_yY_pSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:57:cb:06:75:4b:20:96:fa:76:dd:73:0b:ee:2f:c7:30:b1:
4d:a4:7a:b9:55:d6:9b:b6:f8:98:01:7e:32:6c:74:84:64:4f:
ab:ce:90:17:cc:25:7b:ea:a0:50:b1:4c:db:48:bc:48:56:ec:
b3:8d:63:0b:50:86:c3:04:f7:6e:f5:2d:54:42:7b:49:46:25:
b5:d5:2c:1c:d7:5b:05:a2:f3:ed:eb:95:32:8f:a4:f0:c1:75:
f2:26:2d:3c:5a:39:0b:b3:55:a6:7b:4d:0c:bf:62:3a:46:f4:
ed:b8:22:09:65:0f:8c:90:2f:dc:78:96:05:20:f6:9c:3f:ba:
d8:1f:2b:23:55:a7:ce:d4:ec:ee:c0:74:a4:22:d4:f6:25:e0:
18:c7:8d:84:03:14:62:97:28:ce:9e:f1:51:91:57:40:ca:12:
a1:c9:9e:7c:c4:07:e4:40:ad:32:cf:48:a1:72:5c:6f:d4:f1:
eb:4d:2e:76:47:21:c9:ee:6a:db:92:73:a8:8d:c0:c7:d5:20:
a3:95:b2:d1:0b:b1:6c:08:70:de:7f:a7:10:fb:79:57:48:e3:
d4:53:2c:7c:1d:b2:be:d1:45:ba:67:93:c1:bb:cc:0d:7a:02:
bc:15:a9:a4:15:61:45:6d:e3:c7:73:d9:d7:04:c1:ba:23:cc:
b3:e8:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:30 2025 by rpki-client