Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/2Fga5j_bGEVtxu7dxdZLPXgqWYo.roa
File: 2Fga5j_bGEVtxu7dxdZLPXgqWYo.roa (raw, json)
Hash identifier: AEJQvJ5Rt6ZrzoFy0nUHZ4DEFHdvYvGPZJvg7AEo2ZE=
Subject key identifier: D8:58:1A:E6:3F:DB:18:45:6D:C6:EE:DD:C5:D6:4B:3D:78:2A:59:8A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186067A5F8622785ADF52FD9E82503C675B
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/2Fga5j_bGEVtxu7dxdZLPXgqWYo.roa
Signing time: Tue 31 Jan 2023 06:18:48 +0000
ROA not before: Tue 31 Jan 2023 06:18:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 85.158.150.0/24 maxlen: 24
5.178.1.0/24 maxlen: 24
5.178.4.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.200.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
37.128.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:7a:5f:86:22:78:5a:df:52:fd:9e:82:50:3c:67:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 31 06:18:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8581ae63fdb18456dc6eeddc5d64b3d782a598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:8d:58:c5:84:c3:99:28:ea:06:20:b2:11:
8b:55:c9:9d:6c:82:62:d4:95:2a:00:24:db:25:74:
bf:29:9c:16:88:45:68:4d:0a:cf:e9:d7:56:82:92:
f7:f1:5d:91:d7:b0:93:02:20:30:20:69:35:a7:82:
64:4c:82:f6:56:b1:9d:aa:9a:71:55:5f:cb:52:0d:
7e:fa:c6:d5:5d:53:88:2a:ee:2a:02:69:5d:3a:ca:
71:4f:97:f9:0d:86:f8:71:7b:92:cd:b0:8d:90:64:
73:aa:be:1f:d0:5b:44:4e:94:d4:96:dd:0e:fb:0d:
e2:44:58:4f:28:8d:b6:48:0c:0a:32:5b:5a:bb:b6:
df:4e:d5:07:8b:6a:0f:1c:6d:97:64:99:be:b4:56:
da:9d:52:a3:a3:17:03:3c:70:d8:25:ab:1b:de:c3:
bf:da:46:54:cd:18:45:b8:3f:53:b0:65:67:11:5a:
60:c6:70:d3:bf:ca:f2:ef:12:1c:67:c0:43:ad:65:
3a:54:c6:d6:65:d8:d9:a2:4f:92:ae:c3:33:e8:97:
c2:ed:8c:ad:3b:3b:64:a2:cd:e1:49:66:b4:39:c5:
d6:75:08:91:39:72:e7:98:45:81:91:fd:f5:18:88:
7c:51:6d:19:12:aa:5f:e7:74:42:4a:3f:c6:02:62:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:1A:E6:3F:DB:18:45:6D:C6:EE:DD:C5:D6:4B:3D:78:2A:59:8A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/2Fga5j_bGEVtxu7dxdZLPXgqWYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.1.0/24
5.178.4.0/22
37.128.200.0/22
85.158.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a9:89:ec:43:ab:d5:72:e2:db:f6:6a:f0:a3:95:44:bd:60:
49:bb:97:3c:04:25:b7:8c:e3:7e:e6:50:c6:06:f5:f5:02:8b:
7f:57:1d:c8:2f:bb:0c:ad:f3:ef:16:a5:e7:c6:1a:e7:ad:e1:
60:d0:61:db:c7:f7:1f:7d:a4:14:c8:be:39:31:e9:6e:73:6f:
dc:d4:41:e8:8c:45:11:c1:e1:8d:1d:83:96:a6:9a:a9:83:23:
24:49:c4:b1:e9:50:b3:e4:1b:6f:3f:f9:43:8c:ed:c7:54:83:
3e:68:8e:9e:3d:81:c4:a4:bf:2c:32:7d:e4:dc:5a:64:ea:29:
b7:1c:78:8b:d8:d5:58:45:4c:86:07:bc:51:76:80:06:5e:cb:
ea:77:76:8f:60:5d:7c:16:84:b1:f1:a5:8e:ab:07:48:a2:64:
9a:4e:a1:3c:bd:91:8d:09:ef:37:8d:65:8b:d3:dd:bc:6f:f9:
4d:df:8f:d5:8d:bc:3d:20:6d:86:a3:49:0d:a8:d7:25:69:de:
6e:5a:55:2d:12:a5:2c:3b:83:cf:69:37:93:98:a0:9b:64:a3:
1f:0b:d9:55:e5:74:f7:eb:85:16:44:6c:70:bd:6a:65:f6:f6:
89:c7:df:e7:27:18:48:af:2f:d0:76:18:4e:eb:ba:97:84:f0:
b1:96:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:01:51 2025 by rpki-client