Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/znn0axBwtecrTHB5Lj14AOvx2HA.roa
File: znn0axBwtecrTHB5Lj14AOvx2HA.roa (raw, json)
Hash identifier: 0MdMgXfOntJVkPLL+dMG6piW4WhCv7XTN7hv/xA1Ggo=
Subject key identifier: CE:79:F4:6B:10:70:B5:E7:2B:4C:70:79:2E:3D:78:00:EB:F1:D8:70
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 02D991
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/znn0axBwtecrTHB5Lj14AOvx2HA.roa
Signing time: Mon 13 Jun 2022 07:40:26 +0000
ROA not before: Mon 13 Jun 2022 07:40:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202205
IP address blocks: 78.41.80.0/22 maxlen: 24
195.78.108.0/23 maxlen: 24
195.78.118.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186769 (0x2d991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Jun 13 07:40:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce79f46b1070b5e72b4c70792e3d7800ebf1d870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:ed:6a:7f:09:ba:20:24:0b:c7:79:ea:9a:
cd:91:e1:bf:53:25:86:51:78:ee:37:6b:1b:0d:7e:
0b:05:71:44:8f:c4:53:f8:54:31:af:e3:01:20:2b:
24:9a:25:78:be:41:eb:ae:d3:49:69:f2:59:be:92:
60:6a:69:0c:58:48:db:e8:86:94:53:7b:41:e5:8c:
24:48:1d:0a:3c:3c:41:da:5b:ba:29:a1:a3:8a:53:
7d:1f:c9:ef:f9:41:ca:99:e2:d7:f4:3a:22:41:c3:
36:57:5f:3f:91:af:2a:6c:11:0d:06:29:79:69:e4:
59:ca:cd:0f:d3:ce:10:b1:d7:e7:5e:90:f7:a1:db:
a0:39:68:ec:e7:ff:bb:c5:db:07:09:6a:a0:aa:ef:
08:5f:e7:88:f8:ae:dd:88:43:ba:b3:7e:a3:25:77:
9b:f4:3b:51:0b:6b:4d:cc:c0:3e:ab:6b:67:2b:b2:
0d:0d:5c:bd:9e:b7:b1:ac:2c:9c:42:3a:3c:55:45:
70:05:f2:ff:c3:b4:de:40:cb:f6:8b:3e:69:76:4d:
db:cf:7c:f4:61:90:76:d4:d0:31:da:78:b7:b9:7f:
a1:79:18:22:39:9f:74:8f:55:fa:76:70:d1:7b:27:
21:6e:a5:8f:2e:73:fc:94:53:cc:aa:97:09:31:58:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:79:F4:6B:10:70:B5:E7:2B:4C:70:79:2E:3D:78:00:EB:F1:D8:70
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/znn0axBwtecrTHB5Lj14AOvx2HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.80.0/22
195.78.108.0/23
195.78.118.0/23
Signature Algorithm: sha256WithRSAEncryption
20:b9:a2:7f:ac:2d:c2:36:52:8f:67:59:18:bc:ea:07:30:f4:
e5:ed:c7:5b:90:7b:db:b3:2a:07:f1:a9:9c:75:c8:3c:98:92:
0a:2d:42:60:ce:9d:a4:2d:45:7e:51:f8:bd:2d:e0:a4:8e:87:
de:09:91:5d:de:72:6a:4f:68:c1:05:ff:4e:81:ec:75:a7:60:
8a:ba:70:b3:74:d9:33:dd:c4:94:ad:01:b8:46:14:b1:e8:d8:
0b:b2:cc:42:d4:57:fa:89:87:2a:f1:eb:56:5f:e0:31:e7:32:
12:1a:72:9e:54:85:ee:2e:1d:e2:d7:28:03:0f:59:ca:95:d5:
1c:de:f3:9a:a5:8c:5d:75:4d:0b:f2:10:02:91:7a:b2:f5:b4:
09:28:70:9b:39:1c:88:5d:27:96:bb:06:ef:4d:bc:96:c0:72:
2d:05:96:5c:2a:70:ea:97:04:b4:57:97:d6:c2:e2:d7:04:00:
0f:b9:09:b3:13:97:7d:0e:67:77:cd:ff:9b:f5:4e:d1:96:87:
b4:c2:17:0e:79:40:92:a0:1b:1f:fd:ef:d8:70:34:bd:96:5f:
7c:92:4f:d9:cd:fe:8a:50:8c:d4:56:a1:8f:38:dd:a1:0d:a8:
db:63:56:ec:c2:57:47:e5:9c:8b:d4:1a:f9:59:85:31:73:69:
12:0e:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:29 2025 by rpki-client