Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/RcuCvVErtBRdgyaLHsnstHL5uOI.roa
File: RcuCvVErtBRdgyaLHsnstHL5uOI.roa (raw, json)
Hash identifier: NHBgARrkEdMCi9ZpRoFm8gM1wIRpJ1sHjGc+QBVJP3k=
Subject key identifier: 45:CB:82:BD:51:2B:B4:14:5D:83:26:8B:1E:C9:EC:B4:72:F9:B8:E2
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018B050128A44C86AA9764936C4931D62F23
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/RcuCvVErtBRdgyaLHsnstHL5uOI.roa
Signing time: Fri 06 Oct 2023 12:40:43 +0000
ROA not before: Fri 06 Oct 2023 12:40:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 5.178.5.0/24 maxlen: 24
5.178.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:01:28:a4:4c:86:aa:97:64:93:6c:49:31:d6:2f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 6 12:40:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45cb82bd512bb4145d83268b1ec9ecb472f9b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:02:f6:60:0b:ba:97:b0:2c:a6:16:c8:50:
7c:c8:72:50:29:f1:d7:2a:f4:73:1f:17:e4:51:9a:
c7:0a:4c:cc:25:6d:ff:62:81:41:61:3c:81:97:84:
c4:37:89:62:3b:ed:36:48:bf:bc:97:b7:08:01:1b:
1b:80:ba:12:de:b5:a3:60:08:a2:9e:36:4f:8b:ba:
58:16:6d:14:cd:de:ed:5f:c5:ab:23:4e:64:1a:88:
94:11:23:6c:21:99:64:13:07:7c:9e:04:fd:1d:bc:
0b:02:85:fc:de:b6:e6:f3:a4:2a:ba:b0:94:18:99:
4f:d4:b5:c0:d2:14:86:95:5c:a8:70:95:d3:bb:48:
fd:d5:36:98:d1:31:79:6f:6b:6e:ab:b5:9e:7a:9e:
17:e3:0c:14:14:9a:a2:65:cd:af:ce:55:f1:77:5c:
dc:0f:74:fd:e5:cf:0a:6e:3d:8e:d1:de:64:d9:b7:
4d:d2:7f:2a:30:6e:b6:e4:d2:42:ce:42:1a:d3:4f:
99:2d:b5:19:c2:95:8f:e8:66:58:d1:b4:5f:4f:e7:
d2:8d:d4:ee:83:8b:00:80:df:10:75:7c:e2:27:7d:
4f:5f:93:86:9c:dd:c0:90:00:a3:48:37:7d:be:75:
3f:9f:8c:37:c3:ef:d1:f7:96:67:a6:5c:ea:ca:24:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CB:82:BD:51:2B:B4:14:5D:83:26:8B:1E:C9:EC:B4:72:F9:B8:E2
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/RcuCvVErtBRdgyaLHsnstHL5uOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.5.0-5.178.6.255
Signature Algorithm: sha256WithRSAEncryption
bc:52:66:1c:de:fd:55:8e:2a:14:4f:9c:80:68:38:49:0b:84:
4d:47:2d:5a:56:6a:1d:1a:1c:4f:63:42:f5:4f:8f:98:ea:0d:
5d:8f:bb:29:37:20:db:d6:ae:94:3e:d1:c3:d1:e5:07:22:ec:
10:e6:0c:a1:a1:e4:50:00:c8:f7:cf:dc:09:42:42:33:46:c7:
36:46:18:94:31:6a:ef:d1:5f:f1:62:e2:51:91:3d:1b:e0:c9:
ef:7e:11:eb:f4:f3:80:fe:6c:01:bf:1d:5d:65:c5:73:2c:93:
04:9f:9d:a4:87:f0:8c:3a:2c:3d:72:f0:59:ac:fc:6c:50:9e:
17:63:18:aa:c6:dc:ae:35:3d:15:d8:7a:11:15:33:df:13:64:
0f:c6:a3:0d:63:64:88:a1:f4:c7:d4:4b:70:15:a9:76:3c:5f:
0a:3b:0c:b7:16:bd:5f:24:25:8b:51:0b:fa:a1:d2:0a:39:e2:
4a:01:b4:24:16:55:e3:fb:70:69:b6:af:ee:06:02:4d:21:f6:
66:82:6f:e7:54:69:a5:bf:72:3e:30:ad:25:59:84:5b:3e:f9:
ee:1f:6f:16:70:41:15:04:f4:6b:69:9c:e4:5d:c9:81:c8:df:
56:6f:dd:d7:48:09:9a:b0:57:77:f8:cc:32:82:b2:46:ca:dd:
49:34:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:47 2025 by rpki-client