Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/0L6bZB90lhYX3PlDlFdIWBJ0CYQ.roa
File: 0L6bZB90lhYX3PlDlFdIWBJ0CYQ.roa (raw, json)
Hash identifier: SnHzWGV2y62ZFKzJpSGMKkILLm1B1Xa6beiNiXXSftY=
Subject key identifier: D0:BE:9B:64:1F:74:96:16:17:DC:F9:43:94:57:48:58:12:74:09:84
Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial: EBE38D
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/0L6bZB90lhYX3PlDlFdIWBJ0CYQ.roa
Signing time: Sat 01 Jan 2022 08:55:35 +0000
ROA not before: Sat 01 Jan 2022 08:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61094
IP address blocks: 178.23.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15459213 (0xebe38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
Validity
Not Before: Jan 1 08:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0be9b641f74961617dcf9439457485812740984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:73:d4:26:5c:b0:13:d9:23:80:4a:a7:b5:
5d:a7:1b:e2:75:2b:fe:63:2c:19:ee:1a:40:e4:83:
8d:20:b3:5c:21:d2:df:91:13:66:b5:40:df:51:89:
ac:a8:92:b7:28:89:29:e7:07:13:60:a4:50:36:9e:
97:76:d3:d3:79:b3:f9:41:5b:bb:af:4a:bb:53:b5:
de:8f:17:99:46:26:a1:76:ef:93:aa:e5:0f:f7:d2:
0b:34:65:77:f8:d9:fe:26:1e:63:92:57:15:3d:37:
4a:f4:4f:0e:47:90:d3:03:e9:fd:5a:0d:80:aa:03:
fa:2f:bd:c5:9a:bf:37:ec:43:95:b3:03:70:8c:fe:
16:56:83:c4:59:c6:94:95:99:c3:fc:e9:1a:8a:a6:
87:60:12:28:8f:40:b0:ad:2c:d2:c3:9c:d1:a2:43:
9e:54:33:eb:77:ac:9a:da:14:ec:48:63:fc:75:ce:
b5:f8:81:32:03:56:31:96:d8:20:54:9b:7a:78:b6:
cc:1c:ee:e9:24:92:26:5e:bf:5c:33:b6:c8:e8:9b:
02:80:37:c5:a0:0b:27:cc:a3:69:5c:6f:5b:71:69:
8e:48:af:41:84:cd:53:4b:91:54:88:e2:6a:cf:31:
8d:7b:25:76:52:d0:43:af:e6:23:bd:05:78:b9:a9:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BE:9B:64:1F:74:96:16:17:DC:F9:43:94:57:48:58:12:74:09:84
X509v3 Authority Key Identifier:
keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/0L6bZB90lhYX3PlDlFdIWBJ0CYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.184.0/24
Signature Algorithm: sha256WithRSAEncryption
66:28:af:8b:f6:c2:5c:de:5e:99:55:df:6d:3b:ff:7a:0a:b5:
63:f0:d7:85:6f:27:26:b8:69:73:67:1f:13:bb:a5:f6:75:e1:
7f:ff:b1:07:28:26:15:fc:da:bf:47:f8:79:0b:a2:93:9e:99:
74:40:66:e2:f7:1f:ea:1f:32:ff:2d:80:9e:0e:78:59:b5:7e:
77:b1:70:16:d0:1c:53:c5:bb:2b:fb:a8:fd:3c:a4:a3:c9:f1:
26:11:29:04:f5:57:74:0f:68:f3:72:f2:3f:97:80:4c:c0:c4:
7e:b0:62:b8:7c:7d:92:71:3a:a2:5e:73:50:dd:2d:31:e4:1c:
35:df:97:71:57:95:8c:20:4b:72:a8:41:b0:cf:70:53:a1:12:
d2:48:d2:6c:ab:50:36:1b:25:47:2a:99:2a:38:c4:73:2d:4d:
e1:72:6a:d8:01:f2:e3:71:91:f1:ab:7b:bc:49:f8:b2:e8:07:
52:4b:ef:f4:1c:6b:a5:b2:82:48:2a:e0:e5:7e:ca:0d:27:56:
53:7c:2a:95:f3:61:f0:79:c6:71:b1:8e:4a:83:aa:0c:b2:2d:
2a:27:a3:5e:d2:86:ca:86:40:d9:44:36:81:96:f2:63:d0:2c:
7e:30:b1:65:ee:0b:8b:a6:21:a0:4f:0f:b0:ec:1f:1a:15:a9:
b5:5a:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:41 2025 by rpki-client