Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/7Je9XZx8Sd1275rn9571J93Jxkw.roa
File: 7Je9XZx8Sd1275rn9571J93Jxkw.roa (raw, json)
Hash identifier: oJtSTeaBZ4PMmK0SvC2hwnPp/c82S3KvZzCCymSfJu4=
Subject key identifier: EC:97:BD:5D:9C:7C:49:DD:76:EF:9A:E7:F7:9E:F5:27:DD:C9:C6:4C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018C2957AFDDAF5B4B5DC0ECE69B6574FF22
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/7Je9XZx8Sd1275rn9571J93Jxkw.roa
Signing time: Sat 02 Dec 2023 07:04:21 +0000
ROA not before: Sat 02 Dec 2023 07:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 185.65.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:29:57:af:dd:af:5b:4b:5d:c0:ec:e6:9b:65:74:ff:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Dec 2 07:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec97bd5d9c7c49dd76ef9ae7f79ef527ddc9c64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:89:09:8d:f0:1d:f0:f2:90:10:60:32:2d:
4a:82:19:ec:49:dd:c0:13:e5:ac:49:cb:e5:4a:a3:
e9:4f:77:ca:be:dc:a6:b6:53:50:4f:af:67:84:7d:
09:f8:cd:95:b1:c0:95:46:99:1a:c9:4d:a0:8d:e2:
10:2a:b3:d2:4a:0d:50:d7:40:3e:7a:b6:fa:d3:bc:
03:de:94:a9:68:76:54:6a:a5:53:60:f0:24:26:fa:
0a:8d:4a:e0:e1:0b:05:11:6b:4a:2c:76:a4:d4:00:
c2:54:e1:08:27:9f:fd:39:e3:96:f6:1e:67:0e:29:
95:97:87:32:4d:b9:75:fb:d7:7c:ef:6a:6e:63:d8:
a0:6d:74:b5:1d:fe:07:bd:97:b8:87:f5:27:48:4b:
02:0c:f3:3e:17:11:cc:ea:74:44:f0:1e:9c:32:2c:
01:1c:22:13:27:81:e3:c8:07:41:16:fd:5f:e3:73:
67:02:5c:ba:23:20:c3:c9:b1:23:96:d6:f5:28:e9:
53:1c:f9:5f:3b:cc:ce:3c:b0:88:aa:a1:70:4f:f4:
52:31:a4:ad:98:23:36:a7:07:bb:8a:92:9d:47:6b:
cc:00:e3:38:bb:ac:63:49:14:87:06:56:c9:40:66:
15:ce:36:ff:c4:fc:ff:68:74:4e:5a:48:9d:3f:ad:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:97:BD:5D:9C:7C:49:DD:76:EF:9A:E7:F7:9E:F5:27:DD:C9:C6:4C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/7Je9XZx8Sd1275rn9571J93Jxkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.63.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f9:bb:94:3f:80:03:e5:53:19:69:99:c8:d2:ee:9b:d2:e7:
9a:4a:29:67:cf:c3:4f:39:66:8a:7e:35:bf:34:61:1c:24:19:
ff:12:bf:94:00:94:00:15:44:ee:8c:fb:05:69:b6:ab:57:ac:
76:99:00:27:c0:7c:70:56:96:1e:74:98:e4:03:89:87:11:d1:
95:7e:3b:eb:2c:63:5d:4a:ef:e8:0a:e5:6a:91:4f:da:f2:32:
fe:41:d4:2a:6f:c4:72:7d:24:9c:b1:29:b1:22:ea:25:89:e5:
19:fa:28:3a:0c:05:53:28:9f:73:5a:dd:42:6b:09:29:9c:3b:
62:4b:10:3f:e9:09:16:c8:26:4f:18:92:ab:44:18:59:28:f6:
6b:25:89:ea:ac:58:19:b4:a7:45:e2:1d:8b:ce:91:82:52:82:
b4:5a:3a:4a:51:57:96:02:74:38:c7:26:dd:87:20:33:84:8d:
da:f3:75:40:55:cd:7b:8a:aa:4a:e0:69:c0:bd:c7:7c:ac:0a:
d3:dd:36:b5:92:b8:0e:fd:e5:12:b9:4f:77:b8:ff:fc:b3:81:
1f:91:e2:97:75:9e:48:f5:21:9f:ab:61:52:36:28:81:f6:05:
1e:8f:8c:fb:77:0a:30:a5:f9:40:25:75:69:85:46:7c:0f:27:
75:f2:d6:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwpV6/dr1tLXcDs5ptldP8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMxMjAyMDcwNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzk3YmQ1ZDljN2M0OWRkNzZlZjlhZTdmNzllZjUyN2RkYzljNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+GJCY3wHfDykBBgMi1KghnsSd3A
E+WsScvlSqPpT3fKvtymtlNQT69nhH0J+M2VscCVRpkayU2gjeIQKrPSSg1Q10A+
erb607wD3pSpaHZUaqVTYPAkJvoKjUrg4QsFEWtKLHak1ADCVOEIJ5/9OeOW9h5n
DimVl4cyTbl1+9d872puY9igbXS1Hf4HvZe4h/UnSEsCDPM+FxHM6nRE8B6cMiwB
HCITJ4HjyAdBFv1f43NnAly6IyDDybEjltb1KOlTHPlfO8zOPLCIqqFwT/RSMaSt
mCM2pwe7ipKdR2vMAOM4u6xjSRSHBlbJQGYVzjb/xPz/aHROWkidP63tAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyXvV2cfEnddu+a5/ee9SfdycZMMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvN0plOVhaeDhTZDEyNzVybjk1NzFKOTNKeGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUE/MA0G
CSqGSIb3DQEBCwUAA4IBAQCT+buUP4AD5VMZaZnI0u6b0ueaSilnz8NPOWaKfjW/
NGEcJBn/Er+UAJQAFUTujPsFabarV6x2mQAnwHxwVpYedJjkA4mHEdGVfjvrLGNd
Su/oCuVqkU/a8jL+QdQqb8RyfSScsSmxIuolieUZ+ig6DAVTKJ9zWt1CawkpnDti
SxA/6QkWyCZPGJKrRBhZKPZrJYnqrFgZtKdF4h2LzpGCUoK0WjpKUVeWAnQ4xybd
hyAzhI3a83VAVc17iqpK4GnAvcd8rArT3Ta1krgO/eUSuU93uP/8s4EfkeKXdZ5I
9SGfq2FSNiiB9gUej4z7dwowpflAJXVphUZ8Dyd18tav
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:01 2025 by rpki-client