Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/r5jF4K48FcihrGeV-tBI47_JsYA.roa
File: r5jF4K48FcihrGeV-tBI47_JsYA.roa (raw, json)
Hash identifier: Sq/WupUo4weNuXo70ZpkpdLaiuokuka1oIbgwxPg3CM=
Subject key identifier: AF:98:C5:E0:AE:3C:15:C8:A1:AC:67:95:FA:D0:48:E3:BF:C9:B1:80
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 018C6D5DB2E3ED7FFDDD90AE8C5016578EEE
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/r5jF4K48FcihrGeV-tBI47_JsYA.roa
Signing time: Fri 15 Dec 2023 12:05:06 +0000
ROA not before: Fri 15 Dec 2023 12:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62336
IP address blocks: 141.78.128.0/18 maxlen: 18
2a02:2761::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:5d:b2:e3:ed:7f:fd:dd:90:ae:8c:50:16:57:8e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Dec 15 12:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af98c5e0ae3c15c8a1ac6795fad048e3bfc9b180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:53:bf:d1:75:1f:5c:43:da:c2:48:cc:ec:
c5:af:d1:54:53:47:a7:48:7c:52:6f:1d:27:94:19:
00:31:f8:9b:7c:36:ee:07:eb:d8:63:ef:45:1d:32:
2e:f1:11:4b:ae:1e:71:91:4c:53:cf:b4:e4:9a:6f:
37:5b:3d:c0:77:60:7d:e7:e3:b5:41:f9:42:b2:83:
ef:00:12:42:fe:03:82:ae:31:17:b6:a7:80:6b:1a:
02:bf:89:2b:fa:23:13:3f:c7:84:92:05:4d:d6:ef:
c4:a6:38:b8:a4:0f:f2:fc:49:7e:88:96:26:18:12:
3c:8a:89:fd:0b:9d:86:fc:0b:d4:cd:0b:ec:05:6f:
7d:8c:3f:3f:3d:4c:32:c5:d6:8a:35:a9:04:09:94:
91:d4:33:7b:7a:af:3f:a7:91:f7:81:17:50:59:8a:
51:a9:5f:1d:34:f3:94:60:6e:fc:c0:54:58:6e:6a:
b3:76:6b:2a:79:4c:be:c1:b3:81:03:89:e0:b6:73:
37:bc:98:c5:99:01:81:1d:b6:f9:b9:09:72:26:6f:
99:47:41:37:a2:99:b1:8a:0e:67:e8:21:fb:de:4d:
b9:e1:c6:9d:55:36:53:72:49:1d:50:07:4f:01:f3:
7c:59:d5:f2:9f:d4:5c:58:dc:ef:53:42:80:ba:96:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:C5:E0:AE:3C:15:C8:A1:AC:67:95:FA:D0:48:E3:BF:C9:B1:80
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/r5jF4K48FcihrGeV-tBI47_JsYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.78.128.0/18
IPv6:
2a02:2761::/32
Signature Algorithm: sha256WithRSAEncryption
0c:fe:3c:18:80:3a:ef:37:79:aa:01:b5:22:b2:01:6e:67:88:
42:a3:dd:16:71:de:90:67:4c:5f:7e:d7:43:48:b6:88:14:70:
a8:a8:92:4f:f4:82:fe:19:c1:40:b7:77:5b:af:a5:8d:b2:1b:
9f:ee:77:c9:2f:1d:31:11:bf:e7:72:6f:c8:f6:7a:6e:96:a3:
8f:ec:ec:81:3b:48:6c:b7:51:ba:bf:50:5d:97:a7:df:99:ea:
21:5f:77:b9:e8:df:0d:1e:82:17:a6:81:95:49:22:99:ce:05:
a4:c2:2c:62:3d:e3:e7:c4:96:0f:fa:e1:a6:31:bc:b4:00:30:
a9:68:9a:83:59:5f:e0:41:de:80:46:b2:64:de:99:c9:0e:82:
ad:02:9c:6b:c1:e6:6d:bd:cc:cd:51:ef:3c:e2:47:2d:c7:4f:
e8:d0:03:c2:49:68:ed:0d:61:6b:06:2b:44:4f:f2:27:9d:ec:
4a:9a:e0:97:fb:fb:1f:95:2e:8f:45:70:f2:b1:76:5d:19:35:
c8:a5:5b:cc:79:21:d2:be:9e:0b:cd:6d:39:96:63:05:d9:89:
11:e2:2f:b5:a0:86:d7:5e:98:7f:06:00:d9:4b:e2:e6:56:99:
61:04:2a:4a:b9:51:e8:92:05:97:19:1e:f3:e1:f3:06:ca:10:
79:18:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:04 2025 by rpki-client