Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/9jYoP3zMoLdHw_JZAcSME10-gXc.roa
File: 9jYoP3zMoLdHw_JZAcSME10-gXc.roa (raw, json)
Hash identifier: T3Epp0gNAiv9f4uEPBGuCd/ztWtizhrTTTjdQspNnX0=
Subject key identifier: F6:36:28:3F:7C:CC:A0:B7:47:C3:F2:59:01:C4:8C:13:5D:3E:81:77
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 01856F795F1CC3ACB58E517EB10A71A0B333
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/9jYoP3zMoLdHw_JZAcSME10-gXc.roa
Signing time: Sun 01 Jan 2023 22:35:03 +0000
ROA not before: Sun 01 Jan 2023 22:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208507
IP address blocks: 178.218.240.0/23 maxlen: 23
178.218.240.0/24 maxlen: 24
178.218.242.0/24 maxlen: 24
178.218.242.0/23 maxlen: 23
178.218.243.0/24 maxlen: 24
178.218.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:5f:1c:c3:ac:b5:8e:51:7e:b1:0a:71:a0:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Jan 1 22:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f636283f7ccca0b747c3f25901c48c135d3e8177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:b9:cc:60:7d:92:c6:11:44:4c:32:ec:66:
a5:8e:cf:c6:cd:2a:53:52:86:aa:f3:2f:5d:a7:59:
15:94:ca:26:0e:a1:89:97:04:38:be:da:a8:c5:e7:
21:a5:2f:7d:14:12:bf:4d:07:57:d0:30:b7:e3:7f:
ea:9f:c8:c0:eb:54:36:be:96:5a:22:89:e4:d8:90:
06:9f:f7:85:25:81:49:86:fe:ea:66:dc:56:fa:6f:
04:47:b1:ba:46:60:3c:d5:c2:60:bd:30:4a:ef:25:
17:5f:26:81:66:d1:4b:16:5d:f2:6b:44:0b:0c:7f:
75:54:29:61:c2:77:7d:6c:05:ec:c5:df:0b:49:12:
23:31:d8:6a:72:90:b5:84:c1:9d:ef:84:b9:93:03:
fa:81:64:1b:a6:6b:39:e9:ae:f9:42:9c:a7:79:06:
2a:da:20:26:ee:e7:a7:c8:f1:de:f1:f3:c3:23:b0:
fd:94:b9:10:cc:b2:a9:9c:71:39:f8:5c:bb:66:be:
30:9f:08:65:01:29:ef:97:c8:94:5e:a0:65:d6:65:
eb:88:18:21:37:e2:01:f9:a3:6e:96:5b:ab:5d:2e:
27:b8:3d:2a:45:b7:8c:a6:0b:ad:47:c1:3a:bd:99:
14:39:83:9e:46:fe:f4:89:14:0a:58:bc:75:e1:24:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:36:28:3F:7C:CC:A0:B7:47:C3:F2:59:01:C4:8C:13:5D:3E:81:77
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/9jYoP3zMoLdHw_JZAcSME10-gXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.240.0/22
Signature Algorithm: sha256WithRSAEncryption
56:65:23:b9:5b:41:5a:c1:41:40:6c:d9:7f:b4:33:eb:4a:bb:
07:46:fd:6e:4c:cc:71:b1:08:18:b8:63:1a:5a:91:43:85:5b:
89:28:26:0d:6e:e5:92:3c:7e:f2:0d:fc:e2:38:5a:b5:02:38:
8e:23:44:33:b6:65:02:0d:59:9b:82:e7:d6:7d:68:18:f8:9a:
0e:09:b4:29:16:92:d3:f9:d9:91:6a:90:88:db:d6:ce:1a:a9:
ca:ae:0e:31:b8:53:57:d2:3e:f9:bf:90:a5:ba:76:49:ba:6d:
4c:85:48:bd:e6:c9:1d:7d:b8:fc:f4:10:a4:c2:da:9a:41:66:
e9:fa:5f:ce:97:4f:19:34:cd:e5:94:23:68:ec:ae:a2:ed:6f:
73:de:1c:4c:48:dd:8f:d9:5b:4b:cc:1a:1c:87:1a:da:52:96:
47:28:91:5e:9a:b6:13:99:00:27:e2:63:ae:86:32:f6:cb:28:
ac:55:74:18:40:07:c1:e6:d4:43:59:49:25:e2:c7:83:14:59:
38:87:4a:ce:db:77:21:c6:cd:40:fc:cd:1f:cf:41:38:ae:15:
46:24:a1:75:1b:22:24:52:7a:3c:7a:c3:54:84:f0:31:fd:bb:
d2:53:e0:c5:36:4d:97:66:38:27:ab:d3:0d:c0:07:e1:8a:3a:
06:fb:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:06:38 2025 by rpki-client