Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/xkM-RVz3hPpiKc1HwQg_qoevbos.roa
File: xkM-RVz3hPpiKc1HwQg_qoevbos.roa (raw, json)
Hash identifier: 1xg7zCYL9PeCwGv0DDLZxpgU8icmBjGFuK4SpGImnrM=
Subject key identifier: C6:43:3E:45:5C:F7:84:FA:62:29:CD:47:C1:08:3F:AA:87:AF:6E:8B
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 018571032B833129CF9C94073C15515A5068
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/xkM-RVz3hPpiKc1HwQg_qoevbos.roa
Signing time: Mon 02 Jan 2023 05:45:11 +0000
ROA not before: Mon 02 Jan 2023 05:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61148
IP address blocks: 185.48.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:2b:83:31:29:cf:9c:94:07:3c:15:51:5a:50:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 2 05:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6433e455cf784fa6229cd47c1083faa87af6e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:b8:16:07:47:06:49:b3:62:7f:a6:7e:a5:
7f:76:04:6b:b7:fe:df:14:e4:ba:5a:3f:20:e7:8b:
da:2a:81:81:a7:0d:d3:d8:df:01:16:1d:8b:5b:b0:
f9:a5:c1:98:bb:e4:f1:8c:80:16:f9:cb:fc:bd:63:
a9:8a:80:7e:07:92:f6:93:61:20:22:70:37:65:7b:
67:87:7e:c1:18:94:39:49:02:a1:cf:46:76:c4:c6:
7b:2b:06:32:9d:74:93:cc:46:dd:55:a0:4f:f7:36:
06:a5:44:a5:44:fa:3b:a1:47:0c:d3:8c:5e:bd:a0:
ff:3f:83:bb:41:d5:a1:ea:10:09:5c:d0:7c:fa:5d:
47:28:b2:9b:b3:e4:ce:e4:00:24:76:da:c1:e0:a4:
d6:45:4d:2d:53:fa:92:d0:0c:19:9a:7d:be:f6:31:
37:14:84:40:ac:f5:93:fb:3f:aa:87:e4:47:89:ee:
ce:f9:18:16:ce:53:4a:c0:40:4b:ee:5e:14:9a:c1:
f3:e5:e9:c7:d7:b1:0b:f9:09:3e:fe:47:d1:c3:18:
df:60:1b:e9:d0:89:9c:4c:1e:44:68:99:6b:8a:29:
54:11:67:8a:8e:cb:b3:9d:dc:f9:3a:4a:60:51:f7:
80:d6:9c:4a:5e:e2:e4:21:6a:f0:6c:25:36:58:9f:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:3E:45:5C:F7:84:FA:62:29:CD:47:C1:08:3F:AA:87:AF:6E:8B
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/xkM-RVz3hPpiKc1HwQg_qoevbos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.24.0/24
Signature Algorithm: sha256WithRSAEncryption
77:46:56:54:ae:98:ee:32:cd:c3:e4:e4:02:c5:4b:12:78:6e:
e6:1a:8c:34:6e:40:56:88:ab:f3:91:1e:61:af:75:0c:69:34:
4e:9a:69:1c:04:d6:99:b6:32:0f:e6:95:fb:8f:55:92:93:f3:
ca:fd:d3:ed:57:02:ad:bd:c4:d1:5b:cd:b6:2b:00:17:e9:d3:
2e:16:15:95:6e:e4:d1:53:3f:2d:dc:72:df:cb:bb:a6:63:bb:
1c:8f:be:7a:61:21:07:cc:23:2e:7f:1b:af:f3:c6:a4:72:f2:
38:0b:4a:cc:d2:ce:01:60:6a:69:7b:e2:a8:aa:4f:1f:78:e4:
b8:e6:65:0c:99:60:12:36:54:f0:39:03:e5:0c:66:e4:88:cf:
d5:1a:be:63:c4:c7:f4:b8:f7:fa:62:a1:0a:d6:24:15:bb:f6:
34:a1:bc:4e:a2:a5:97:1a:b8:ec:f6:ab:8b:d0:ab:03:59:d2:
7f:bc:b9:18:ef:6e:80:4a:99:f8:df:a2:1b:e7:60:84:43:aa:
63:40:13:43:30:1d:55:a9:4f:d9:81:b4:11:24:f1:7a:ff:4c:
d7:8a:21:77:28:c6:6d:eb:80:eb:1f:d5:6f:8c:88:e9:f6:f1:
f8:9c:2b:9d:23:ea:58:67:90:1c:88:0f:c3:f5:ac:15:13:6c:
c1:19:f8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:59 2025 by rpki-client