Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/4WcWHAVknRuOLotNpq84eYbpbX0.roa
File: 4WcWHAVknRuOLotNpq84eYbpbX0.roa (raw, json)
Hash identifier: ZvmwxTtytsDXbX5kjLIwFwdHclMD2CFBA0F+SX0v55w=
Subject key identifier: E1:67:16:1C:05:64:9D:1B:8E:2E:8B:4D:A6:AF:38:79:86:E9:6D:7D
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 24203339
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/4WcWHAVknRuOLotNpq84eYbpbX0.roa
Signing time: Sat 01 Jan 2022 02:57:14 +0000
ROA not before: Sat 01 Jan 2022 02:57:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20946
IP address blocks: 178.170.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606090041 (0x24203339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 1 02:57:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e167161c05649d1b8e2e8b4da6af387986e96d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:76:a6:0f:34:1a:dc:e8:8e:83:3c:c1:3f:
b5:c9:ef:ed:f7:a1:72:69:5b:13:9c:c9:3a:31:5c:
fe:c3:4d:8e:bd:a4:7d:bb:d1:30:c8:f7:2e:ca:74:
8f:61:a1:94:b8:41:1e:75:01:c9:43:a4:45:66:73:
69:13:09:03:51:66:a9:60:dd:a3:1d:0b:5d:96:c3:
32:60:d3:18:28:dd:39:29:95:f8:63:9b:97:c0:ae:
0d:26:f2:79:6c:c6:26:95:49:14:d0:bf:38:5e:54:
eb:0d:91:06:c9:5f:65:c8:75:b0:6b:08:59:90:a1:
6a:bd:38:ca:1d:a7:be:34:4a:48:cd:db:00:43:2e:
ca:e1:50:b7:58:6f:5b:3b:d4:a5:68:18:6c:f6:c7:
c4:fa:d0:c3:4c:10:cc:74:8d:e4:8b:6e:5e:81:31:
61:b4:aa:4c:e7:0e:b4:63:1b:a2:65:a5:f3:78:77:
cf:ee:9c:a5:72:be:eb:49:33:5e:69:9b:4a:fa:a9:
20:fd:80:34:84:6e:79:2e:19:eb:13:37:83:12:e3:
6e:eb:1f:2e:c4:54:dc:9b:56:4b:cd:2c:f2:a4:c8:
f7:35:d6:27:30:a0:3e:bf:db:53:10:de:6a:f1:0c:
a1:5d:71:bd:9c:07:90:de:0a:02:71:b5:f7:46:c3:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:16:1C:05:64:9D:1B:8E:2E:8B:4D:A6:AF:38:79:86:E9:6D:7D
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/4WcWHAVknRuOLotNpq84eYbpbX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.229.0/24
Signature Algorithm: sha256WithRSAEncryption
99:90:3f:ed:55:27:06:59:e4:dc:9a:b5:93:22:a1:d6:a3:0b:
15:d6:a6:42:35:d9:bf:76:7a:6e:af:66:d7:85:11:68:ff:7c:
15:c1:bc:61:cd:5f:e8:f5:a1:3f:81:2d:2e:12:b0:1a:f4:f9:
34:d0:4d:c0:1e:0e:b2:56:01:6b:4a:78:56:ba:e1:ea:ff:71:
d5:fd:3e:37:58:69:cf:02:dc:e0:27:d3:fb:7c:61:eb:96:cc:
9c:34:86:e0:ea:89:f3:42:b3:81:5a:e5:b9:15:48:59:e5:39:
93:42:e1:00:ed:58:ed:f1:93:61:87:1e:b6:0a:c6:7b:d9:cb:
2e:51:43:8a:e8:00:79:14:66:19:67:45:29:08:b9:01:30:b3:
1d:94:67:d9:04:62:b0:ea:46:06:b7:d0:7c:49:a1:3e:65:df:
dc:be:ac:a7:a3:be:36:ed:86:57:43:ef:d2:e4:3b:7a:db:92:
21:e3:d2:01:74:ba:30:59:1d:c4:4f:de:7c:ba:89:24:6e:d4:
59:8b:a6:9e:6a:12:62:b5:a6:79:3b:ac:d4:37:99:5e:21:b9:
8d:aa:71:12:40:27:33:32:cf:da:a1:fd:75:dd:5f:80:ac:28:
96:eb:be:fa:ef:85:49:1f:d4:5c:bb:04:55:65:03:8c:a2:80:
24:29:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:29 2025 by rpki-client