Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/h5zJ6YNR0wTQuEiVbTuT1RhEBXs.roa
File: h5zJ6YNR0wTQuEiVbTuT1RhEBXs.roa (raw, json)
Hash identifier: 2D6AgxLGfnbG1LOqk943K/OHzkEaHD0ZF//+8kyJNH4=
Subject key identifier: 87:9C:C9:E9:83:51:D3:04:D0:B8:48:95:6D:3B:93:D5:18:44:05:7B
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 03A633E1
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/h5zJ6YNR0wTQuEiVbTuT1RhEBXs.roa
Signing time: Sat 01 Jan 2022 03:02:46 +0000
ROA not before: Sat 01 Jan 2022 03:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197610
IP address blocks: 178.136.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61223905 (0x3a633e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Jan 1 03:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=879cc9e98351d304d0b848956d3b93d51844057b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ae:59:c0:ee:bd:20:89:65:bf:14:90:64:9f:
55:6d:41:f6:5c:0a:77:c3:c5:24:92:fb:2a:da:02:
54:c5:e4:91:d8:fe:82:08:b6:7b:0b:1f:2b:46:a5:
70:fe:ac:62:de:df:04:61:48:f2:a1:0f:40:22:c3:
05:19:7a:5f:88:38:97:55:7a:82:04:db:72:94:23:
7a:ab:6d:2b:ef:0c:22:ac:c3:b3:21:0d:0b:80:19:
77:bf:8e:05:8a:6c:2f:5f:ff:66:fe:89:25:a4:e1:
4a:a7:18:96:27:f7:6a:93:ed:c8:48:e8:07:f3:e2:
de:87:0e:95:34:f4:3e:b9:b5:ad:12:97:5c:2b:4a:
0e:33:50:82:04:0a:b8:76:75:28:1d:c6:0d:72:6d:
64:c7:4e:88:e9:dc:f5:07:cf:92:15:d7:53:b8:34:
b5:c1:20:34:27:60:ba:e5:7f:ee:66:4a:13:33:81:
96:38:b2:21:c4:a2:01:a8:fa:55:d0:81:bc:3f:ea:
fc:52:a1:99:61:be:70:8a:71:55:f5:e6:7b:e9:de:
18:26:fc:85:b3:23:8e:dc:d5:ad:37:44:b6:4b:e9:
18:36:09:ee:41:b9:c8:3a:de:32:4b:af:ec:ae:4d:
c2:c0:b2:7a:1c:8e:ce:bd:21:7e:16:05:cd:39:ff:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:C9:E9:83:51:D3:04:D0:B8:48:95:6D:3B:93:D5:18:44:05:7B
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/h5zJ6YNR0wTQuEiVbTuT1RhEBXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.136.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:1f:ad:c7:9b:7c:26:4d:7c:82:50:c1:f3:23:23:11:46:3a:
fb:0f:fc:a0:c4:e4:79:78:e4:62:ad:ad:80:26:f1:28:da:59:
2d:8f:71:f5:bb:a3:e5:c1:e2:6c:f4:4a:c1:ef:75:83:46:b5:
6d:64:4a:4a:cc:8b:28:2c:d6:ae:35:f0:89:ce:70:74:f6:d1:
34:fb:46:ff:46:0f:1b:2a:be:29:69:d0:59:af:16:b7:51:0d:
55:b3:9e:31:2e:e0:48:de:94:18:5b:2d:b0:7b:b6:ec:92:9f:
c8:e5:35:5f:a4:4f:46:3f:8a:19:2d:70:62:e2:f8:46:ac:7f:
8e:4c:ee:1f:a3:2e:b8:79:60:8c:b8:2d:e0:d3:45:c8:eb:e3:
be:06:4e:9e:d8:e4:4f:18:ea:6a:ca:10:dc:0a:17:95:59:7e:
01:5b:0b:3d:5e:3e:a3:48:25:3d:71:1c:53:7c:37:92:a4:6b:
cb:4c:82:1f:ed:94:97:00:d0:15:13:54:f0:d6:83:8b:6a:d8:
b9:18:ac:49:07:35:fb:aa:0c:43:16:3e:53:04:e5:9e:19:31:
57:70:99:7b:72:90:ca:35:fa:41:17:69:be:53:96:ba:70:37:
b8:be:4d:1d:b7:3e:18:f2:3d:5d:5d:f0:00:8f:3d:8a:21:3f:
87:b0:6c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:34:09 2025 by rpki-client