Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/Qt0LWr3AaBsYj13pEAqxfhYjrxc.roa
File: Qt0LWr3AaBsYj13pEAqxfhYjrxc.roa (raw, json)
Hash identifier: r9/0XYZw5ZlCD3SHdDUx3xe+HMOIoPhe1lirL9NNnvA=
Subject key identifier: 42:DD:0B:5A:BD:C0:68:1B:18:8F:5D:E9:10:0A:B1:7E:16:23:AF:17
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018571FA07394BF804B5AD2B6994B738BA85
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/Qt0LWr3AaBsYj13pEAqxfhYjrxc.roa
Signing time: Mon 02 Jan 2023 10:14:49 +0000
ROA not before: Mon 02 Jan 2023 10:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43349
IP address blocks: 178.16.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:07:39:4b:f8:04:b5:ad:2b:69:94:b7:38:ba:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 10:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42dd0b5abdc0681b188f5de9100ab17e1623af17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:4a:f1:1b:bf:b9:18:1c:15:45:99:4b:56:
4f:fc:c9:35:d7:03:17:7a:80:e1:dc:58:9a:3f:01:
4b:a0:08:b9:68:e1:90:a3:4a:b3:3c:62:96:02:09:
64:c4:8b:61:f7:c3:68:8d:6c:72:8d:26:1a:be:43:
6d:8c:98:a6:9f:0e:75:81:bf:ef:cd:b1:fc:b0:da:
4e:97:f4:a2:2d:92:8d:1d:60:f8:21:a6:06:69:fa:
f1:d4:4d:95:88:28:04:46:dd:58:29:b5:6e:89:3e:
09:79:b7:03:48:a0:d5:60:24:e5:61:c8:6c:d9:72:
6f:99:18:66:7a:8e:4f:14:29:e8:ae:64:ca:94:ba:
79:23:5c:9b:68:23:63:62:ce:f9:27:1f:84:39:82:
b7:5b:cc:aa:c6:81:69:7c:10:9d:e5:9d:b3:41:99:
91:3b:03:6c:19:56:da:12:36:c7:37:84:69:5a:7f:
d3:ac:c3:0a:60:9d:7d:c8:ca:a9:7d:ce:85:d1:e9:
9b:57:c2:08:81:e8:eb:f3:62:45:1a:3e:8d:c9:1e:
70:16:5c:04:0d:93:bf:02:d7:3b:81:3b:11:4b:e1:
49:29:3a:0c:b7:89:bc:e9:2a:f7:19:60:bb:17:bc:
bb:e3:fc:51:b1:c4:dd:65:f6:67:05:95:eb:3c:6f:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DD:0B:5A:BD:C0:68:1B:18:8F:5D:E9:10:0A:B1:7E:16:23:AF:17
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/Qt0LWr3AaBsYj13pEAqxfhYjrxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a9:8b:59:53:c2:91:8f:e9:ba:64:53:84:05:46:79:70:78:
5c:c1:44:3a:0d:29:73:ce:9b:3b:e2:bc:ec:6f:2d:66:96:dc:
82:2e:27:12:c2:7b:0a:64:da:da:c6:22:e1:64:98:3e:35:cb:
cc:7a:d7:99:6e:ae:da:e2:25:29:69:1d:d0:f7:f9:fa:b1:75:
4e:39:14:bc:0e:82:60:01:ed:f7:b2:d5:a0:4b:47:cd:cf:32:
04:49:b2:5c:e4:65:74:dc:2f:bd:22:f1:4a:5d:50:0a:fe:2a:
b4:7b:2b:2a:c7:e1:6f:9e:ac:18:a3:41:d2:e2:d4:ca:2f:84:
28:81:c1:5f:de:f4:77:0d:17:5b:90:8a:8c:00:cd:54:02:86:
27:2e:c6:0b:89:c8:4e:d9:59:5d:b4:84:5f:cb:9f:4f:95:32:
a4:b2:7a:4d:85:1a:ac:60:70:af:f7:20:6c:91:a7:8f:cb:07:
79:de:87:f7:91:0c:c2:c3:92:60:5d:7e:cb:d4:99:e0:61:20:
5c:13:9f:48:60:bd:89:7b:8d:d0:a4:59:6b:d8:d0:82:33:4e:
57:22:35:9c:dd:23:57:21:93:da:d4:57:17:c7:89:21:68:da:
51:33:09:02:39:66:83:3f:55:4a:7f:d5:fd:34:fe:24:fa:cd:
37:31:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:50 2025 by rpki-client