Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/Xa_p_to6JhTBdAF7PnLRBoSYqPc.roa
File: Xa_p_to6JhTBdAF7PnLRBoSYqPc.roa (raw, json)
Hash identifier: OjtP8MB+qikGN2TeLZAm7L8PYxhqylI3rBiJqxcZg2E=
Subject key identifier: 5D:AF:E9:FE:DA:3A:26:14:C1:74:01:7B:3E:72:D1:06:84:98:A8:F7
Certificate issuer: /CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Certificate serial: 35218FB0
Authority key identifier: AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/Xa_p_to6JhTBdAF7PnLRBoSYqPc.roa
Signing time: Sat 01 Jan 2022 08:56:01 +0000
ROA not before: Sat 01 Jan 2022 08:56:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43611
IP address blocks: 78.24.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891391920 (0x35218fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Validity
Not Before: Jan 1 08:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dafe9feda3a2614c174017b3e72d1068498a8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:00:c7:15:c6:ac:17:16:6d:cc:33:25:13:
3f:2f:64:8a:f1:d4:45:d1:16:09:06:c7:aa:a5:01:
af:63:51:9c:72:38:23:38:7d:00:80:0a:69:05:f9:
44:28:d0:19:ba:f6:4e:3c:19:80:82:70:f2:94:88:
b2:be:5d:ef:32:cd:14:aa:b0:91:00:d2:17:1b:78:
2c:2d:29:04:e1:bd:37:00:65:7c:05:70:0a:7b:71:
6d:cf:7b:0b:b2:79:54:73:d2:64:cc:01:75:29:60:
8e:b8:29:21:4b:87:e2:5d:ce:36:5d:36:2c:dc:14:
e9:22:43:d7:58:fb:1a:fa:29:95:e8:e0:aa:ef:77:
07:fd:99:fa:51:e8:d3:f4:97:54:4f:c1:59:05:60:
d9:a7:1a:fc:2b:2c:de:5a:d8:fe:72:d9:0c:72:d6:
8d:87:f1:02:c6:1b:a7:13:4e:1d:83:2c:f2:43:26:
3d:bf:fa:6f:ab:60:1e:bb:77:8d:65:67:59:2f:db:
08:53:cb:30:3c:2b:c4:c1:37:02:b7:98:da:d5:30:
29:d8:dc:c1:5c:36:e1:2f:33:0f:07:bc:07:1b:27:
bd:bf:4e:88:e3:b1:2d:d7:0d:7e:3b:9c:cd:71:87:
2e:5b:79:7d:2b:f8:e3:11:89:ae:04:00:cc:9f:3f:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AF:E9:FE:DA:3A:26:14:C1:74:01:7B:3E:72:D1:06:84:98:A8:F7
X509v3 Authority Key Identifier:
keyid:AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/Xa_p_to6JhTBdAF7PnLRBoSYqPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.80.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:34:6f:15:cf:5c:d0:6a:81:dd:98:2e:41:3b:38:5e:2b:02:
e5:f8:ec:da:08:2b:6f:8b:92:1a:00:5a:de:fe:91:c4:3e:03:
7b:8a:95:20:9c:c0:93:a7:62:ce:18:c8:30:65:85:d6:a4:f0:
71:e2:93:14:43:41:e8:a2:3c:82:f3:7b:43:c8:ee:81:55:ac:
56:69:04:f8:42:95:42:b7:98:a4:93:89:b8:f5:7f:49:47:f2:
a9:ee:50:11:96:ff:b3:1d:9b:10:d4:4d:ae:df:9a:20:e1:6d:
3a:c0:f8:24:33:45:b1:44:de:b6:98:e0:93:66:10:d1:3f:99:
fb:98:4a:53:95:85:94:96:80:92:5e:3c:ee:56:4e:b4:68:1c:
be:af:17:40:65:da:17:fa:78:4e:60:5a:a2:9d:a7:62:2c:65:
57:6a:4d:b4:11:3c:1f:f4:43:c3:45:81:ef:4f:61:cc:cc:6e:
dc:ba:57:e5:5e:12:c5:51:86:7e:ab:54:ff:5c:b1:c5:1d:1a:
26:73:f3:89:d1:c5:de:52:53:b2:d2:e4:2f:b6:6a:68:d2:e0:
e0:70:ea:37:a1:72:07:d7:40:80:ef:6d:9f:c3:4b:2a:40:53:
38:92:9d:71:38:d8:5e:e5:17:19:76:65:79:c6:81:3f:a8:08:
13:f1:13:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:12 2025 by rpki-client