Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/mogjqUbiJL0Msjx5GFXet8BXK7c.roa
File: mogjqUbiJL0Msjx5GFXet8BXK7c.roa (raw, json)
Hash identifier: wkzY4MJuHJHy2stCB5bnYESdtfudGpluKxXJQb0ylTA=
Subject key identifier: 9A:88:23:A9:46:E2:24:BD:0C:B2:3C:79:18:55:DE:B7:C0:57:2B:B7
Certificate issuer: /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial: 018573E8924B66DE6961F92254A5B3570413
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/mogjqUbiJL0Msjx5GFXet8BXK7c.roa
Signing time: Mon 02 Jan 2023 19:14:59 +0000
ROA not before: Mon 02 Jan 2023 19:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211510
IP address blocks: 185.251.12.0/24 maxlen: 24
2a10:a740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:e8:92:4b:66:de:69:61:f9:22:54:a5:b3:57:04:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Validity
Not Before: Jan 2 19:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a8823a946e224bd0cb23c791855deb7c0572bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:2b:11:5e:83:48:16:1d:68:0a:94:ac:34:
57:7e:6d:58:60:3e:50:34:97:30:c7:3a:56:a8:79:
ea:52:44:73:68:5a:44:de:e0:f5:1c:b8:57:80:5b:
98:e1:54:9a:21:7d:d5:95:ae:5d:04:5d:6a:16:65:
af:a7:67:95:ca:7f:da:41:68:c2:77:42:13:0c:d8:
11:d2:c0:a4:74:96:81:14:5b:40:67:68:70:53:5b:
e4:a5:40:6d:c6:7f:18:0e:84:8d:2a:af:55:a9:5e:
0c:e5:61:c5:ea:7f:8f:37:49:73:f0:10:0a:e5:be:
6b:0d:f4:4a:c9:ff:01:85:3c:12:4f:11:0c:f4:0c:
04:84:38:4d:96:e6:01:98:0b:26:e3:9d:ee:5b:a5:
1c:73:3f:8f:a0:d3:67:da:b1:19:c3:83:32:ea:5f:
93:3a:07:c8:cc:35:f7:bd:1c:a6:e3:c9:4b:a2:be:
3e:fe:3d:98:6f:4b:6f:ef:86:b0:91:bb:f9:50:6e:
3e:79:ca:31:f1:80:dd:61:c4:dd:ad:24:50:2d:36:
58:cf:63:a5:b3:07:0a:8e:a9:01:f4:4e:a2:d7:2e:
f6:ab:f4:22:80:6f:15:ea:c9:c2:98:0f:5c:b3:ba:
77:d6:f1:15:a9:50:2b:c4:94:e9:cb:9f:47:44:8f:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:23:A9:46:E2:24:BD:0C:B2:3C:79:18:55:DE:B7:C0:57:2B:B7
X509v3 Authority Key Identifier:
keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/mogjqUbiJL0Msjx5GFXet8BXK7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.12.0/24
IPv6:
2a10:a740::/29
Signature Algorithm: sha256WithRSAEncryption
9c:68:8c:c8:5e:7a:76:92:bd:9c:c0:79:f6:8f:d9:11:f5:84:
e1:3c:86:26:e5:6e:84:00:81:4a:7b:f0:23:f3:3c:44:4a:f9:
7b:f1:91:5d:a4:29:7b:ca:0a:62:9b:be:b4:07:46:8f:43:98:
77:13:25:53:b9:f8:91:9b:51:1a:a8:88:37:66:ba:3e:f5:07:
b1:6c:38:f1:75:84:42:84:1e:5c:c9:0d:a5:df:ac:8d:4b:47:
ec:fe:4a:0d:98:cd:f7:7e:77:85:7f:0e:81:14:21:ae:b3:1e:
ca:a4:6e:69:c6:d0:aa:3f:2e:e5:6a:26:93:29:60:3e:0c:39:
48:bf:3d:2d:72:72:58:8f:d6:17:5c:bd:5e:c6:72:ce:89:58:
e9:c1:f5:a3:7d:23:23:f7:88:01:e3:40:8c:2a:59:96:fc:b3:
05:10:b5:be:1c:b8:d9:4d:1a:0e:a8:14:e3:5a:a1:dc:11:8d:
9d:df:11:54:13:d6:7e:20:d6:4e:67:3d:4d:fd:23:d1:c2:ed:
ac:67:e0:ab:02:0b:18:23:e3:e9:6a:07:1f:29:91:22:87:0c:
9c:da:d0:58:00:31:20:26:79:86:50:9f:36:c2:a4:a6:19:42:
2f:76:63:b4:d5:d7:af:be:c0:e6:9a:91:51:59:c2:3c:78:c6:
53:19:b1:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVz6JJLZt5pYfkiVKWzVwQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTY0ZTRlOGZmZTMxZjY5MmY3MTMxOGMyYjcyODIwMjhk
MGYzYTQwHhcNMjMwMTAyMTkxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTg4MjNhOTQ2ZTIyNGJkMGNiMjNjNzkxODU1ZGViN2MwNTcyYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7grEV6DSBYdaAqUrDRXfm1YYD5Q
NJcwxzpWqHnqUkRzaFpE3uD1HLhXgFuY4VSaIX3Vla5dBF1qFmWvp2eVyn/aQWjC
d0ITDNgR0sCkdJaBFFtAZ2hwU1vkpUBtxn8YDoSNKq9VqV4M5WHF6n+PN0lz8BAK
5b5rDfRKyf8BhTwSTxEM9AwEhDhNluYBmAsm453uW6Uccz+PoNNn2rEZw4My6l+T
OgfIzDX3vRym48lLor4+/j2Yb0tv74awkbv5UG4+ecox8YDdYcTdrSRQLTZYz2Ol
swcKjqkB9E6i1y72q/QigG8V6snCmA9cs7p31vEVqVArxJTpy59HRI8uuwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJqII6lG4iS9DLI8eRhV3rfAVyu3MB8GA1UdIwQY
MBaAFOiWTk6P/jH2kvcTGMK3KCAo0POkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUt
NWE2NjU2NTVlYjU3LzEvbW9nanFVYmlKTDBNc2p4NUdGWGV0OEJYSzdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xMzFhNzctYzhjOC00YmI3LTlhZWUtNWE2NjU2NTVlYjU3
LzEvNkpaT1RvXy1NZmFTOXhNWXdyY29JQ2pRODZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufsMMA0E
AgACMAcDBQMqEKdAMA0GCSqGSIb3DQEBCwUAA4IBAQCcaIzIXnp2kr2cwHn2j9kR
9YThPIYm5W6EAIFKe/Aj8zxESvl78ZFdpCl7ygpim760B0aPQ5h3EyVTufiRm1Ea
qIg3Zro+9QexbDjxdYRChB5cyQ2l36yNS0fs/koNmM33fneFfw6BFCGusx7KpG5p
xtCqPy7laiaTKWA+DDlIvz0tcnJYj9YXXL1exnLOiVjpwfWjfSMj94gB40CMKlmW
/LMFELW+HLjZTRoOqBTjWqHcEY2d3xFUE9Z+INZOZz1N/SPRwu2sZ+CrAgsYI+Pp
agcfKZEihwyc2tBYADEgJnmGUJ82wqSmGUIvdmO01devvsDmmpFRWcI8eMZTGbEv
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:37 2025 by rpki-client