Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/72RfHXXb-XYbzGERnfbHb0VAgSA.roa
File: 72RfHXXb-XYbzGERnfbHb0VAgSA.roa (raw, json)
Hash identifier: z2FUsgMFfmK2lGV9kig25BcHUa27hiWhv6QRy9drvHk=
Subject key identifier: EF:64:5F:1D:75:DB:F9:76:1B:CC:61:11:9D:F6:C7:6F:45:40:81:20
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095A72C6E25FCF3F273119B15331B54
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/72RfHXXb-XYbzGERnfbHb0VAgSA.roa
Signing time: Mon 02 Jan 2023 03:45:33 +0000
ROA not before: Mon 02 Jan 2023 03:45:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208515
IP address blocks: 146.120.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:a7:2c:6e:25:fc:f3:f2:73:11:9b:15:33:1b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef645f1d75dbf9761bcc61119df6c76f45408120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:17:4e:03:92:ed:89:f2:02:69:56:42:6c:
35:c6:39:45:a1:2f:0a:a0:41:55:8f:04:f8:cf:2e:
95:31:b1:f4:4f:e9:e2:e5:d5:27:e7:45:6e:61:62:
bb:6e:8f:d0:c9:79:18:ec:ca:79:1d:67:db:59:e5:
54:3c:81:14:2c:11:4e:3b:9d:5f:27:88:d0:e5:11:
2f:2b:bb:f1:84:33:91:f6:6d:6a:9f:94:b1:1c:fb:
7e:eb:0f:5d:6d:73:6f:27:ef:9a:04:12:62:fa:25:
25:ab:d9:64:91:63:2d:b9:1f:94:8d:83:48:f7:c7:
f7:f7:4d:06:25:7f:ca:ef:68:97:a8:98:c9:0a:61:
a2:a9:96:f5:1c:86:e9:18:cf:d7:24:6c:03:df:0e:
d7:3c:a3:bc:da:b1:be:e0:6b:12:c8:b2:da:c9:f2:
a5:e5:52:cc:45:43:5c:06:a9:02:87:00:e0:97:ef:
63:78:35:67:75:77:81:10:0c:88:80:1c:13:89:99:
cd:a6:16:bb:b2:f0:88:c9:37:f4:b2:24:0c:d7:ba:
c9:ac:72:14:f4:e3:18:e4:23:f3:e4:93:5e:60:56:
92:60:d3:36:7b:20:5b:de:e1:1c:8f:ef:fb:43:5e:
f9:fe:4c:84:ce:d0:76:9a:9e:4e:f9:5c:c0:45:82:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:5F:1D:75:DB:F9:76:1B:CC:61:11:9D:F6:C7:6F:45:40:81:20
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/72RfHXXb-XYbzGERnfbHb0VAgSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:85:4f:30:56:f9:c7:a4:db:8f:65:39:ba:bc:f8:7a:79:82:
e4:b5:47:5f:33:73:c5:95:fb:98:a8:46:f4:02:8e:c9:aa:6f:
c2:21:39:34:cd:de:97:40:70:3f:48:09:dd:0a:d1:92:c7:42:
b0:0b:15:79:a8:95:34:9f:94:19:51:cf:6c:b2:ce:8a:6c:e3:
ef:2d:4e:31:df:53:81:02:e3:39:27:da:1a:85:cd:cd:41:09:
f0:a0:df:0e:8c:00:18:89:24:40:98:04:06:40:e7:54:d7:f7:
58:19:da:56:ca:aa:ac:8e:01:6f:dd:fc:74:5b:87:0f:bd:b0:
24:2e:f1:c8:a7:e4:14:8e:cf:d9:10:c0:54:72:4c:b2:e2:1f:
eb:10:21:e5:f1:1e:cc:13:cd:c9:be:ff:3b:35:10:7f:d4:e2:
51:51:35:b9:ee:e5:b1:37:4d:0f:36:1b:19:2e:28:70:49:38:
6b:b0:68:f5:8e:eb:df:80:59:73:43:2b:6c:5e:10:c2:66:d7:
8f:97:61:23:6e:9b:e7:f7:94:7a:e0:73:2e:97:9e:95:e3:22:
64:e5:67:1b:36:31:53:eb:01:03:95:0d:ca:90:c7:28:64:a0:
26:f3:09:f1:e4:a4:18:e4:6e:de:d8:6d:40:92:c8:99:ad:b8:
30:d8:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:19 2025 by rpki-client