Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/Vzhf8WVtuh_qg9oIeVJiOMhNHNU.roa
File: Vzhf8WVtuh_qg9oIeVJiOMhNHNU.roa (raw, json)
Hash identifier: /sG7w3sapje+bkQJevvv5UKoBk05U4PLCl+1XfxaLm4=
Subject key identifier: 57:38:5F:F1:65:6D:BA:1F:EA:83:DA:08:79:52:62:38:C8:4D:1C:D5
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 018571832984A97F636F5B3C477183FB5046
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/Vzhf8WVtuh_qg9oIeVJiOMhNHNU.roa
Signing time: Mon 02 Jan 2023 08:04:59 +0000
ROA not before: Mon 02 Jan 2023 08:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50952
IP address blocks: 151.236.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:29:84:a9:7f:63:6f:5b:3c:47:71:83:fb:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jan 2 08:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57385ff1656dba1fea83da0879526238c84d1cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:9f:50:37:06:34:74:e0:fe:02:2a:56:05:
fe:b8:66:cb:a5:5a:95:4a:0a:61:cb:47:60:ee:e4:
d0:ef:0d:85:b7:87:20:57:4b:d9:97:7c:6d:3b:6a:
80:be:3f:ce:0c:e9:7f:af:ce:61:30:52:88:5a:6f:
4c:1c:02:43:69:90:d3:9c:32:7a:5b:e7:4c:7d:29:
45:21:e3:6c:c8:b6:a0:31:62:c6:2f:fb:37:70:83:
19:12:54:01:2f:77:62:0b:0b:0b:68:bf:1f:50:14:
30:ab:28:53:51:b1:9f:6a:82:d1:b8:0b:4c:a6:ef:
31:78:c9:f7:f6:b0:eb:b6:f4:0b:f8:07:c6:ac:f4:
74:58:7a:6e:56:85:d3:3f:4c:a8:62:0d:7f:2a:a7:
f8:83:7d:1a:72:b6:cd:a9:ac:2d:8e:74:b0:8c:ca:
c5:e0:c3:36:97:a8:60:50:0f:77:a2:27:fb:e0:62:
e8:1d:19:b2:b3:00:7b:86:8d:d5:51:a5:ca:45:d6:
6d:82:ca:2e:4a:05:76:3c:fa:97:89:5b:7f:6d:f5:
91:06:8e:7e:13:04:ab:91:18:c3:41:1d:8a:a5:bb:
be:1c:eb:9c:ea:e3:8e:c9:f3:80:1c:1a:93:23:6d:
3f:44:95:73:91:26:4b:62:ef:f1:42:29:b4:21:b6:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:5F:F1:65:6D:BA:1F:EA:83:DA:08:79:52:62:38:C8:4D:1C:D5
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/Vzhf8WVtuh_qg9oIeVJiOMhNHNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.236.88.0/24
Signature Algorithm: sha256WithRSAEncryption
28:04:89:1d:50:e4:e9:ca:f1:fc:57:dd:d4:b9:8d:24:64:7c:
4a:57:e8:02:48:d1:74:3d:e9:a7:b8:03:51:11:29:98:86:e2:
d7:73:ca:42:5f:e4:49:7c:4a:5e:f6:07:e8:8a:c9:36:66:0f:
ac:dc:36:ab:73:13:41:b9:29:fd:82:1d:df:dc:c9:04:88:36:
5e:84:14:16:42:67:04:fe:6e:35:3f:b3:a1:08:a9:20:c8:ad:
0f:2d:68:7d:08:0d:58:41:76:23:20:e5:f4:ab:2a:26:e5:58:
f6:df:5b:14:71:5a:d8:d9:45:58:ef:0f:c7:d8:d6:66:78:7a:
88:cb:e8:ab:e4:8f:9d:f2:e1:d6:70:69:f0:fe:f7:81:c2:f2:
fa:70:b7:59:51:d8:d6:03:0d:db:3c:0b:9c:34:34:b2:50:99:
d4:63:51:27:f6:bf:df:b5:b6:97:5a:d0:16:75:3e:95:70:0c:
98:0f:a8:66:af:fd:1f:18:84:0d:a2:13:8f:e7:cc:87:79:c5:
49:a7:25:6b:80:42:72:16:0a:f0:5f:6a:9a:df:03:8d:e6:01:
d3:3d:21:74:30:47:67:56:b9:f0:dc:0f:bc:c5:a0:cd:2a:aa:
fe:2f:f9:9b:59:7d:7d:88:fb:e0:8b:6e:c6:de:89:07:da:06:
8b:9d:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:34 2025 by rpki-client