Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/8nopMgeWgLiecRJIpO0mpOqRpXE.roa
File: 8nopMgeWgLiecRJIpO0mpOqRpXE.roa (raw, json)
Hash identifier: W0ehaAmfqInxNYyrU15A4/rzMUv8rgj3BpwzX1QaaEw=
Subject key identifier: F2:7A:29:32:07:96:80:B8:9E:71:12:48:A4:ED:26:A4:EA:91:A5:71
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 01893495F53ED9C1B0A8E3598954D7EE39BA
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/8nopMgeWgLiecRJIpO0mpOqRpXE.roa
Signing time: Sat 08 Jul 2023 08:19:50 +0000
ROA not before: Sat 08 Jul 2023 08:19:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 78.24.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:95:f5:3e:d9:c1:b0:a8:e3:59:89:54:d7:ee:39:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Jul 8 08:19:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f27a2932079680b89e711248a4ed26a4ea91a571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:74:c7:4a:02:ef:2e:a0:24:13:c7:a5:85:
43:7b:47:bb:8a:3c:14:88:57:f8:3f:11:48:ff:48:
2b:ba:1e:48:29:55:c4:31:04:62:a9:12:ae:3e:41:
9b:f7:c4:79:0a:a1:81:be:0f:70:94:eb:94:b9:4d:
2e:07:98:6c:d7:c7:b6:40:ac:8a:82:d5:bc:fa:7d:
58:82:31:d0:e0:0b:53:81:24:17:22:cb:c7:68:fa:
67:39:dc:d5:46:77:c4:98:81:7f:b0:c5:67:43:df:
10:cd:81:bd:93:89:0f:01:1b:b8:e4:61:35:4b:0a:
ef:24:a0:cf:d2:86:11:f8:13:2a:e3:d5:c5:af:c5:
11:12:0f:33:63:28:84:e1:7f:b8:09:c2:ca:31:be:
4e:77:f4:6f:e1:f1:e3:f7:7d:2d:1f:d6:d3:1d:53:
2d:de:80:57:cd:e4:d7:12:3a:7e:73:a4:0e:47:14:
b7:12:62:fa:c4:05:25:b8:40:14:2f:f4:33:5e:0a:
d3:0d:3e:00:b5:02:f0:60:82:a8:58:e0:50:13:87:
df:87:9c:31:b0:56:5c:ba:c6:6c:0b:b8:7d:6b:5d:
b4:95:6c:e0:67:54:cc:77:c5:91:cc:d5:3b:ec:99:
92:7b:70:6d:89:2d:66:9f:39:7c:e1:bd:38:3c:71:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7A:29:32:07:96:80:B8:9E:71:12:48:A4:ED:26:A4:EA:91:A5:71
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/8nopMgeWgLiecRJIpO0mpOqRpXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:cc:8e:5f:e7:c4:b5:92:10:b5:3e:22:f0:f0:2a:2f:4c:a2:
27:4e:66:7f:4d:9a:b9:23:14:51:9b:b9:89:cc:44:06:de:25:
4a:39:1f:6f:de:a3:ea:3b:52:f9:6f:73:5b:b8:69:44:2c:d4:
29:97:2c:9e:fc:fd:76:97:ee:1b:d5:b8:73:4a:ed:1e:00:9e:
8d:c0:31:9c:ef:47:14:c2:aa:6e:12:65:29:e5:b5:2e:ed:64:
25:2d:e5:7c:82:e6:34:c3:1a:c8:54:8a:a8:7b:fc:ab:7b:15:
85:8d:94:3e:77:00:1c:70:15:59:b3:ea:99:12:41:6b:55:26:
17:37:9d:e3:95:f1:1f:00:a9:3e:f9:de:0d:9a:9c:bf:05:85:
e1:4b:9b:58:33:e3:7a:56:cf:90:c1:82:6e:2c:82:b6:34:8d:
75:0c:e3:9c:99:a7:80:2e:e4:7d:3e:9f:d5:90:9a:7a:e6:b4:
30:c3:0b:64:dc:50:ad:aa:f0:4f:79:51:66:3c:a3:fd:8f:65:
9d:a2:85:19:19:a9:38:59:08:ae:08:1c:bd:54:c6:68:2c:36:
84:78:a6:95:4e:a1:43:61:56:9e:f4:40:59:a2:bd:30:fe:26:
8b:cc:86:85:f3:5f:bc:9b:71:7c:51:59:3c:73:68:04:31:6d:
73:7a:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:44:26 2025 by rpki-client