Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/72JAPzObq9xqUIDUZwQLJ9sEQS4.roa
File: 72JAPzObq9xqUIDUZwQLJ9sEQS4.roa (raw, json)
Hash identifier: BsVZh5oRUsUd1Wxt1PNWfFuxjTDWialioCFN+X9YVkY=
Subject key identifier: EF:62:40:3F:33:9B:AB:DC:6A:50:80:D4:67:04:0B:27:DB:04:41:2E
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 01856FD532553009E55598CFEC8C907B50F2
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/72JAPzObq9xqUIDUZwQLJ9sEQS4.roa
Signing time: Mon 02 Jan 2023 00:15:21 +0000
ROA not before: Mon 02 Jan 2023 00:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211649
IP address blocks: 185.251.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:32:55:30:09:e5:55:98:cf:ec:8c:90:7b:50:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: Jan 2 00:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef62403f339babdc6a5080d467040b27db04412e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:ae:d3:c4:a8:6b:ff:8d:99:2b:59:3c:86:
af:0a:57:bf:e1:e5:61:1d:f3:46:29:d6:26:11:07:
6e:ec:3b:6b:57:58:bd:81:9a:06:32:8d:64:fd:d8:
5a:88:34:c2:80:3f:08:6a:43:ee:e6:de:3b:76:ef:
e4:fa:16:97:ca:03:f9:f6:e7:a2:94:b4:e0:7b:90:
c5:af:4b:6b:c2:ee:50:3a:6b:ec:67:66:8b:03:51:
7d:76:29:ad:de:49:0a:a5:15:a8:af:8d:02:ff:ec:
2c:f7:74:b2:6e:94:e1:d5:a2:2b:97:e8:4e:71:1b:
79:37:97:40:28:68:49:a5:9f:bc:a7:9d:3d:25:9b:
58:4c:6c:28:3e:fe:68:04:c8:c0:03:e9:5b:e3:74:
13:21:30:6d:0f:5c:4c:25:f9:ca:18:e4:d6:b6:7e:
e2:e8:dd:91:6d:e9:51:ef:99:12:6b:99:81:01:b9:
77:4b:b6:c8:dd:24:aa:a1:36:5d:d3:51:33:6f:f0:
6f:fb:cf:7f:54:48:95:96:ed:4b:8e:fb:bd:b7:92:
6e:f2:72:5d:a3:2c:36:87:12:42:ba:de:0b:f4:82:
ec:99:02:bb:4b:0b:a9:1e:2e:37:e7:83:a1:8f:b3:
f4:89:c3:72:b2:0d:d4:4a:d9:63:36:98:ab:3a:3f:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:62:40:3F:33:9B:AB:DC:6A:50:80:D4:67:04:0B:27:DB:04:41:2E
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/72JAPzObq9xqUIDUZwQLJ9sEQS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.71.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0a:65:4c:3c:46:fa:65:8a:ce:0c:8d:c1:7b:90:fd:86:ce:
56:27:9b:92:8b:27:65:7f:cc:ef:8e:ae:de:53:4f:87:5d:39:
bb:fc:81:c2:94:1b:2a:38:01:0a:4e:ab:45:7a:95:8b:67:85:
7b:10:fa:69:5a:56:8c:95:6a:2d:ca:b5:43:5e:4f:ae:cf:34:
18:b6:d7:b8:19:f4:8e:8e:3a:3e:56:30:2d:e9:ca:e8:ba:83:
fb:be:94:83:ec:58:b6:a5:a1:ab:2d:a5:27:f5:d0:af:7d:1b:
c6:b1:27:ed:af:60:d5:00:f5:6b:a1:84:26:b4:17:94:c8:ec:
1a:5d:16:b0:30:d7:4b:c1:ff:e3:ad:a3:31:a6:98:fd:5a:29:
3e:2b:04:21:d7:ae:ec:f3:32:af:dd:53:5f:9c:b1:ab:1f:9a:
84:2b:c9:2c:bb:1e:22:27:e7:a9:37:de:28:4c:6f:f8:ef:7b:
7f:16:9c:a9:9b:34:76:2b:43:02:fb:89:47:06:a4:16:c2:36:
9c:0c:59:00:6f:1f:96:40:06:6b:95:2b:bb:9b:c1:36:23:18:
ef:46:b5:c0:13:84:e0:3c:aa:a1:a0:13:35:f0:5a:fd:8f:df:
d6:90:4b:12:4c:b2:53:1e:e1:65:17:c9:61:d2:0b:22:67:a8:
42:b8:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:42 2025 by rpki-client