Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/71ppphSozOpDwgxW0xT5c_nQLOM.roa
File: 71ppphSozOpDwgxW0xT5c_nQLOM.roa (raw, json)
Hash identifier: IO4SldoPkjqwkqzZRpILhkddxM8WyUXS0m/WNbbMnXQ=
Subject key identifier: EF:5A:69:A6:14:A8:CC:EA:43:C2:0C:56:D3:14:F9:73:F9:D0:2C:E3
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0599AA23
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/71ppphSozOpDwgxW0xT5c_nQLOM.roa
Signing time: Sat 01 Jan 2022 05:01:33 +0000
ROA not before: Sat 01 Jan 2022 05:01:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212000
IP address blocks: 185.244.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93956643 (0x599aa23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef5a69a614a8ccea43c20c56d314f973f9d02ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:c5:06:33:01:af:47:de:89:60:9a:7f:ce:
12:5c:0c:16:fe:b6:06:50:ba:1b:ca:73:1f:16:bd:
bf:af:b1:73:97:f5:2a:fe:38:84:53:db:a0:2b:bd:
86:67:db:55:48:b7:fa:1c:6b:20:62:fa:98:a8:58:
d8:76:cf:47:59:77:ae:ac:14:2e:02:26:3a:2f:17:
e1:c2:3a:0e:b9:3f:55:45:09:cc:8a:d8:87:cf:95:
ac:59:1b:e1:f6:bc:da:a6:72:b0:56:8f:f9:98:ed:
28:20:ba:3a:18:30:30:c2:b2:93:b7:33:63:1d:e2:
a6:9d:78:2d:48:32:6b:79:58:77:04:ca:aa:f6:e1:
a2:20:8e:fa:86:14:0d:37:a9:a8:c5:01:ee:59:4e:
5c:3c:6d:0e:c9:7a:63:09:2c:40:14:36:05:6c:3a:
bf:6d:af:af:f0:fd:b6:2a:41:56:91:f9:d2:d3:8b:
45:83:4a:2d:7c:a9:1a:92:41:15:d2:07:71:0b:ce:
d2:35:10:a1:57:16:9e:1a:45:87:88:b6:f9:87:9b:
4f:ae:05:b3:ba:80:0a:2f:9c:63:75:5a:57:b5:90:
ba:2c:f3:be:83:da:08:f1:8c:66:67:7b:e6:2f:1c:
eb:ee:fe:db:e7:81:73:85:2e:e7:b9:5d:00:a0:4a:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:69:A6:14:A8:CC:EA:43:C2:0C:56:D3:14:F9:73:F9:D0:2C:E3
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/71ppphSozOpDwgxW0xT5c_nQLOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7a:b4:22:e8:56:50:88:04:6c:93:62:71:5e:54:f9:7d:82:
b6:93:d7:dd:fa:50:35:00:e8:08:7d:07:cb:04:f7:1a:fd:42:
87:fe:f4:1d:67:6e:fa:87:b1:8c:e9:82:18:be:49:fe:6b:33:
04:b8:92:b1:d1:11:4c:ad:5b:37:42:38:a8:e0:bf:14:3e:9d:
2a:be:e0:74:df:a8:d2:a3:7d:f5:11:01:5c:d2:31:2e:42:84:
c1:8f:6b:4b:1b:ea:93:4b:ae:64:ca:b0:bc:0e:0d:3f:be:4d:
c7:e4:75:6c:38:e7:83:a6:4e:cd:69:99:ee:ef:d1:5e:e4:80:
e4:b9:a5:75:2f:43:45:0a:a7:9f:3b:21:48:1d:09:7d:02:2f:
bd:23:c7:a4:2d:69:71:31:69:e2:7a:34:b5:f8:92:2a:d0:b4:
97:42:ad:17:74:bc:6a:59:97:2b:5f:ce:9c:88:c8:db:bc:1d:
61:72:4a:39:b1:8d:c9:9c:6b:9d:d1:16:1d:45:ff:f0:22:25:
93:7d:24:58:50:39:eb:df:53:eb:0a:c3:8c:a2:d6:38:de:11:
95:2d:51:8d:1c:63:2c:fe:c2:a0:08:e3:aa:b8:52:a6:cd:42:
76:4f:8c:ae:5e:6d:3b:b9:5f:27:b6:c8:9b:d9:01:ab:c3:3e:
e9:df:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org