Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/kt78iPRL5P4kSPCSH4Ox1Ojhtf0.roa
File: kt78iPRL5P4kSPCSH4Ox1Ojhtf0.roa (raw, json)
Hash identifier: P62kFAZWmdY5ANFzRE0boRcfdspgEgRsp1hopFMyToA=
Subject key identifier: 92:DE:FC:88:F4:4B:E4:FE:24:48:F0:92:1F:83:B1:D4:E8:E1:B5:FD
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 01837FD46157B51919B2044BEBE115A428EF
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/kt78iPRL5P4kSPCSH4Ox1Ojhtf0.roa
Signing time: Tue 27 Sep 2022 16:42:48 +0000
ROA not before: Tue 27 Sep 2022 16:42:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205422
IP address blocks: 151.248.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:d4:61:57:b5:19:19:b2:04:4b:eb:e1:15:a4:28:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Sep 27 16:42:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92defc88f44be4fe2448f0921f83b1d4e8e1b5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:6a:2a:7f:9b:e0:67:4d:61:db:53:b6:a2:
d4:0c:e4:9f:77:13:b5:16:71:7a:1c:42:22:f7:d5:
a2:d9:54:f9:6c:a4:d2:73:14:21:26:54:74:52:3c:
30:33:d6:8b:5f:fa:7a:c1:c0:45:fd:9f:ea:52:12:
91:e6:81:e8:2a:c3:55:3e:3a:a0:98:bc:cc:7f:97:
98:6b:6e:a1:73:97:76:55:5e:99:d6:c0:45:8f:7e:
0e:f0:f5:4f:e2:2c:ee:67:6b:2e:f0:a4:cc:2d:9c:
19:16:31:0a:40:39:43:48:45:30:e1:4e:89:fd:78:
fa:47:47:fb:c6:fb:51:6d:61:17:4c:7b:49:f4:48:
fc:40:e4:47:19:39:9a:7c:07:f5:67:13:24:3c:a6:
5f:3f:4e:17:9c:8c:80:c2:74:d8:cd:1e:d2:e2:a8:
b9:da:95:87:96:48:10:84:cb:49:fe:d2:b5:62:cc:
c5:8d:9e:97:18:b2:fd:15:6e:31:c9:2b:75:99:4c:
bd:68:7c:bb:cf:65:cb:d3:eb:7e:d6:bc:59:6c:a6:
28:7c:cd:42:be:93:a8:d3:b2:8d:e1:b6:0d:52:76:
dc:05:76:03:d1:51:7c:97:c0:ea:f6:b8:20:f4:86:
4c:da:7e:4b:ad:e6:28:95:b5:c4:9c:6f:e2:93:c8:
c5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DE:FC:88:F4:4B:E4:FE:24:48:F0:92:1F:83:B1:D4:E8:E1:B5:FD
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/kt78iPRL5P4kSPCSH4Ox1Ojhtf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a8:b4:24:be:31:37:fb:4d:98:b6:24:8e:78:b2:ff:ae:33:
23:38:ac:2e:e5:ef:1b:28:f8:b3:f8:b1:36:6b:8e:ae:1b:a3:
a9:52:f4:70:e6:ae:e8:c3:af:91:a5:6d:91:89:4a:e4:46:86:
a9:31:8f:d7:a5:5c:4e:49:ac:3b:df:3c:06:ad:0e:0e:6d:23:
29:24:32:58:95:a2:e9:35:3f:b5:00:32:ce:69:6d:1c:51:f7:
2f:d4:5f:2e:ae:2a:38:b3:f7:db:6f:02:14:08:fe:0c:d5:b7:
6c:a5:a2:4a:a6:63:9b:55:29:1c:a1:5d:10:15:d6:ce:48:4b:
08:7e:07:60:3a:8a:b4:38:f4:43:b6:39:20:c8:a1:b2:c4:d8:
4f:54:66:8e:eb:4e:e4:f5:65:db:d3:bb:09:cb:9a:7d:22:88:
ee:4f:59:53:72:e0:27:fe:94:24:b1:dd:03:81:0f:7d:25:58:
f8:72:08:05:bb:e4:0c:bb:b5:62:ee:43:84:7a:26:0c:b6:60:
a2:81:50:7e:ad:ec:38:82:70:92:41:e4:ca:31:f3:3c:cb:ba:
e4:2d:33:15:88:99:e7:22:66:c4:7f:38:c8:a5:83:f2:8a:20:
ec:24:8b:7f:af:20:1f:44:3e:a5:4b:87:b0:4b:69:13:f1:5f:
d9:a7:6c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:19 2025 by rpki-client