Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/72fenvo68lwsFuN5uBvLgdQNaJM.roa
File: 72fenvo68lwsFuN5uBvLgdQNaJM.roa (raw, json)
Hash identifier: 8o0p5EQPAi++cI3rm/W4WPgt43+OiQTz11utE0MyCAU=
Subject key identifier: EF:67:DE:9E:FA:3A:F2:5C:2C:16:E3:79:B8:1B:CB:81:D4:0D:68:93
Certificate issuer: /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial: 0188CB127256F546C70F7471412F178B7ED4
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/72fenvo68lwsFuN5uBvLgdQNaJM.roa
Signing time: Sat 17 Jun 2023 20:36:03 +0000
ROA not before: Sat 17 Jun 2023 20:36:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199525
IP address blocks: 185.65.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cb:12:72:56:f5:46:c7:0f:74:71:41:2f:17:8b:7e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Validity
Not Before: Jun 17 20:36:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef67de9efa3af25c2c16e379b81bcb81d40d6893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:d0:95:97:8e:d3:81:69:bf:f2:e9:4c:43:
23:ae:49:f6:d5:98:35:79:0b:c3:f1:c2:45:95:b0:
15:91:7a:7a:be:dc:ea:6f:83:ce:aa:ed:71:9a:f4:
6e:0a:ff:c1:17:52:81:40:73:5e:6a:42:a6:9f:0d:
33:89:a8:f7:6b:dc:09:d7:ed:10:57:29:97:dc:e1:
48:26:ff:e2:8c:0f:4b:9d:7f:24:51:64:1c:eb:1a:
cb:11:97:78:81:7d:a8:3f:82:53:e3:31:ca:f3:8d:
a7:4b:e4:ff:05:3a:e6:a2:91:c3:85:2e:5f:00:c8:
22:bd:20:79:0e:79:a2:4e:ae:1b:1a:ee:2a:76:54:
1d:78:ce:38:b7:22:f6:13:7e:c8:d0:d8:b0:84:c0:
25:40:d6:fc:67:e5:c5:a8:fb:96:4d:98:fc:fe:98:
eb:2f:5c:8d:d7:ae:3e:01:78:0d:a7:c3:d8:6f:60:
2d:0f:ca:77:50:71:df:41:af:f5:b0:19:18:4c:75:
bd:6d:21:24:3c:5c:ca:f8:32:8c:9b:74:6d:ea:8f:
86:b2:92:3c:d0:1f:a6:63:98:64:de:c1:9b:07:c0:
9a:d6:62:72:fb:01:2e:32:b5:28:8c:1b:57:ec:62:
a4:7e:d8:85:07:c3:5b:44:a2:70:6f:e9:fc:5e:48:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:67:DE:9E:FA:3A:F2:5C:2C:16:E3:79:B8:1B:CB:81:D4:0D:68:93
X509v3 Authority Key Identifier:
keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/72fenvo68lwsFuN5uBvLgdQNaJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2a:88:50:df:a8:fc:a6:66:e3:2b:17:97:53:83:f6:9f:8c:
19:1d:82:d5:7d:63:8a:ce:06:9e:2a:9b:bc:2b:30:45:23:8f:
9c:44:41:2b:7a:89:a1:d3:55:37:8a:11:ac:f7:31:b6:18:cb:
f9:f6:f2:22:e2:57:41:de:95:ef:ac:27:c6:1d:59:13:e0:8c:
95:ad:1a:75:f6:ad:ed:ee:cc:91:b8:80:5b:ba:64:56:e3:fa:
f2:fa:58:da:9d:3c:05:ef:a1:bf:fc:54:8d:d3:b8:8c:95:8f:
8e:5c:a8:c6:79:92:7c:1a:b8:ef:ef:ac:76:c0:78:20:f5:b8:
33:b2:f9:46:eb:32:29:da:3f:2e:f9:2a:c5:6b:6a:5a:e1:0a:
39:d5:e3:04:1f:cc:9f:d5:3c:c2:3f:9c:71:5a:19:90:5d:3c:
7d:56:45:5a:20:72:f2:56:43:83:05:a8:9b:d3:db:4d:a7:f6:
38:5f:12:ba:72:c7:85:ea:51:0e:0e:75:34:20:20:99:66:68:
b3:7c:3f:b0:a5:99:df:80:26:66:6d:51:89:a2:75:2d:c4:7c:
a3:e3:29:ad:d6:b6:21:0e:99:2d:67:0d:ef:30:76:f1:85:72:
82:50:49:53:68:44:f2:b1:87:46:fc:ff:62:a3:db:23:88:0d:
c5:46:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:44 2025 by rpki-client