Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/OajP-ZGD7ML5f5DyEyn-RvThhtA.roa
File: OajP-ZGD7ML5f5DyEyn-RvThhtA.roa (raw, json)
Hash identifier: FbXg8Fn3I4glX1OyWHKl1+c53a405aFL1nMPdPGA0Yw=
Subject key identifier: 39:A8:CF:F9:91:83:EC:C2:F9:7F:90:F2:13:29:FE:46:F4:E1:86:D0
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018829890F8B8027F005671146574D1F18E8
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/OajP-ZGD7ML5f5DyEyn-RvThhtA.roa
Signing time: Wed 17 May 2023 11:47:08 +0000
ROA not before: Wed 17 May 2023 11:47:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.178.4.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
5.178.7.0/24 maxlen: 24
5.178.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:89:0f:8b:80:27:f0:05:67:11:46:57:4d:1f:18:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 17 11:47:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39a8cff99183ecc2f97f90f21329fe46f4e186d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:7d:e2:74:06:96:a2:a5:3c:1c:13:5f:e5:
43:e0:fd:5d:82:de:93:55:54:32:2c:1f:11:07:33:
5f:87:5c:0a:4f:d6:06:05:58:b6:08:fd:35:20:a3:
51:d8:b7:f7:9d:3a:18:83:8b:e3:52:81:41:9e:83:
68:4d:07:94:0e:d7:44:06:18:82:01:7b:1e:c9:03:
41:64:49:47:6b:42:69:ed:0f:40:8d:be:24:34:0e:
af:fe:db:5c:7c:54:81:19:a5:43:b2:3f:86:4a:4e:
a3:b2:e5:f6:2a:74:34:c1:0b:05:28:6e:83:6a:20:
78:3d:41:42:ee:e4:95:92:65:2f:eb:a9:49:87:73:
34:c3:cf:e9:d9:5e:e6:56:e9:55:c6:0d:ae:4f:eb:
51:20:dd:8b:b6:77:ac:d5:08:16:8e:a2:e4:78:08:
d9:90:70:9a:d1:b2:37:5a:1d:a7:0b:8b:b1:a4:4e:
e8:03:4c:eb:e6:14:5c:20:d5:ea:ea:ad:9d:80:36:
dc:dc:46:fd:12:8d:ac:77:75:49:62:21:ba:9a:e6:
b0:e5:71:a9:e8:60:bb:4c:6e:cd:68:70:59:4b:66:
1e:b7:8a:77:04:b7:3b:64:f0:dd:2f:bb:52:a9:f9:
3e:7e:af:63:d2:7f:2d:64:10:63:ee:86:fd:9b:8f:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A8:CF:F9:91:83:EC:C2:F9:7F:90:F2:13:29:FE:46:F4:E1:86:D0
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/OajP-ZGD7ML5f5DyEyn-RvThhtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:30:59:7b:fb:f3:a9:3f:2d:b1:2f:4d:fc:d3:66:92:08:8c:
90:3c:8e:86:8e:53:31:2a:96:a0:84:a4:11:ae:10:83:43:11:
8e:b8:48:61:52:88:fb:bc:5f:b3:63:22:da:83:3e:3e:bf:ef:
61:c7:74:22:81:2e:1c:a2:0b:06:26:1a:b7:ec:f1:d1:25:27:
cd:dd:2d:df:e0:8a:15:a5:4e:39:df:f9:86:58:64:ec:c9:de:
d9:13:31:9d:5a:45:94:3a:c4:22:28:b7:c1:32:8f:e2:ac:b2:
8c:86:96:d7:f3:47:09:40:9e:bf:79:56:b2:7e:2c:0b:9f:0d:
e1:ee:dc:87:4d:94:da:5c:cb:4c:c3:00:88:d3:f7:57:d9:d1:
27:62:56:04:12:6d:b6:2a:8f:42:88:e8:0c:f1:18:49:86:80:
db:48:06:51:32:d3:5f:04:da:18:fd:96:90:30:83:01:72:96:
67:26:48:e9:ab:ee:de:85:4a:71:a7:c7:94:62:e3:8c:35:a5:
98:35:bc:44:a1:33:69:42:2e:8e:1b:d9:70:df:dc:f7:c2:6e:
25:e8:71:29:22:4c:be:6a:e8:5e:df:83:73:0e:7f:98:cc:4e:
7f:e5:a8:36:a0:1a:50:3a:b4:ab:dc:d0:fa:98:ba:a5:f5:bf:
29:29:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:40 2025 by rpki-client