Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/qQtW2jfjd5se-zhnMUz5pRIbaCc.roa
File: qQtW2jfjd5se-zhnMUz5pRIbaCc.roa (raw, json)
Hash identifier: 1zRxP76K/AZODjQplfRz5rtz5P3BuEOIakYPGjlFyzQ=
Subject key identifier: A9:0B:56:DA:37:E3:77:9B:1E:FB:38:67:31:4C:F9:A5:12:1B:68:27
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018571FA09303638E9F029B47151880D3D88
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/qQtW2jfjd5se-zhnMUz5pRIbaCc.roa
Signing time: Mon 02 Jan 2023 10:14:49 +0000
ROA not before: Mon 02 Jan 2023 10:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201775
IP address blocks: 178.170.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:09:30:36:38:e9:f0:29:b4:71:51:88:0d:3d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 10:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a90b56da37e3779b1efb3867314cf9a5121b6827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:7b:d5:63:cb:e8:81:66:b2:d3:94:bd:cd:
4e:0c:3e:e6:8f:56:d6:92:4f:de:6d:4d:84:22:60:
80:b4:f9:d1:06:54:ca:fa:2d:fb:33:11:68:5f:82:
52:cd:e2:40:51:0e:34:d0:75:54:8d:ec:3f:c7:11:
5d:87:60:35:42:57:8e:f5:17:b1:20:2e:56:a5:2e:
bb:bd:3a:b2:44:46:e5:b5:e4:3d:6a:54:0b:e1:af:
cd:32:76:b3:28:35:eb:d7:e8:5f:d0:78:b3:9e:88:
a9:f1:ac:08:46:6a:c7:a5:4c:fe:97:17:34:81:21:
a0:04:2b:df:4a:9d:3e:5b:5e:ee:8b:6d:23:22:22:
fe:9c:fd:f4:1a:8d:e9:f6:5c:9a:c9:18:1e:e6:fa:
58:38:b8:c1:59:12:9a:f5:d2:a5:41:45:be:b5:a8:
f3:0e:59:a8:69:a6:95:46:26:c8:12:b9:66:f5:9b:
95:ca:0f:05:38:39:b9:32:65:1e:1c:24:77:4c:95:
bf:02:e0:32:0d:69:03:cd:c6:6b:4b:66:aa:13:97:
11:28:8d:eb:28:56:4f:08:48:f7:a6:0e:6f:f7:48:
29:ac:bd:7c:86:66:43:7a:a3:17:8a:e6:18:0f:0e:
7d:9c:91:3d:bc:0e:b0:9b:f8:e1:82:31:86:89:68:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0B:56:DA:37:E3:77:9B:1E:FB:38:67:31:4C:F9:A5:12:1B:68:27
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/qQtW2jfjd5se-zhnMUz5pRIbaCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.229.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a5:d1:13:85:40:fb:d0:76:a5:37:21:1c:7e:03:f3:2a:9a:
01:65:49:fb:9f:9d:86:14:fd:29:65:01:04:f6:21:8e:c6:ca:
1f:85:c6:74:63:0c:66:ab:42:3b:9a:b4:af:82:3c:54:92:8a:
41:48:3a:bc:d3:2f:81:c0:22:c3:d2:46:a3:53:34:3f:6b:43:
a3:af:dc:64:83:8b:04:ea:29:ad:2e:06:ae:1c:4a:e7:9d:f9:
69:60:0f:38:43:72:f1:92:70:25:02:ca:8a:6c:0e:bb:14:7c:
4d:6f:ef:07:0d:2f:f3:3e:d3:f6:32:5c:6a:e3:17:98:44:3b:
d0:7f:70:0b:bf:b0:4a:71:f0:53:04:86:2f:96:00:64:23:af:
43:87:3e:59:6a:56:d4:28:02:1f:ca:46:c8:8c:46:bb:a2:d4:
73:7c:00:be:1c:25:10:39:9e:75:53:4e:a1:8c:f1:26:72:81:
be:54:52:c6:9f:95:71:d9:09:53:03:9b:9b:b0:98:94:66:04:
f1:5b:33:b3:a5:8f:4e:34:32:3b:cd:34:2f:5c:4d:83:27:42:
de:81:4f:4f:4d:0a:9d:a1:fa:20:c8:fe:7f:c2:58:7e:a8:79:
16:c8:d3:f5:4c:af:18:e7:76:02:d0:45:a7:40:3f:9b:43:78:
41:ba:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:43 2025 by rpki-client