Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Ae_Skk7a4nZPmsL0B7XvVR9oE54.roa
File: Ae_Skk7a4nZPmsL0B7XvVR9oE54.roa (raw, json)
Hash identifier: IdYg60dR35v0r1jZ9zbgQccVlAz68MpA9WDhCt8MAFg=
Subject key identifier: 01:EF:D2:92:4E:DA:E2:76:4F:9A:C2:F4:07:B5:EF:55:1F:68:13:9E
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01857079C28A66D956A0F8873F7D86CA1854
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Ae_Skk7a4nZPmsL0B7XvVR9oE54.roa
Signing time: Mon 02 Jan 2023 03:15:05 +0000
ROA not before: Mon 02 Jan 2023 03:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211904
IP address blocks: 151.247.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:c2:8a:66:d9:56:a0:f8:87:3f:7d:86:ca:18:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 2 03:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01efd2924edae2764f9ac2f407b5ef551f68139e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:37:2e:bb:53:67:ec:03:53:6d:1d:fe:66:
4e:73:87:b8:af:c7:87:98:7c:95:ea:19:56:df:c3:
df:b9:05:5a:68:94:f7:66:68:53:60:a4:f8:39:ed:
cd:ba:a7:5b:d9:7b:a3:18:93:da:bd:91:45:66:f0:
6b:b3:c9:0b:9a:45:10:bd:7e:46:42:d7:98:3d:61:
4a:94:ca:1a:4a:94:0f:06:26:df:5c:96:91:68:1c:
39:08:34:52:bd:9f:6a:aa:eb:14:7e:75:5a:31:b0:
d6:72:c0:4c:2f:4a:2a:51:c4:da:a1:a9:1e:cf:ea:
3b:79:36:e9:9b:21:cf:73:fb:29:3d:ce:10:a6:2c:
b0:ee:95:03:49:fe:63:f1:e9:82:4e:30:f8:ab:47:
c6:e7:5f:68:13:70:42:88:d5:19:db:e5:6b:cd:ac:
00:bc:30:a8:0a:6e:94:1d:7b:d4:85:ea:4f:b4:40:
d4:02:0c:99:ab:aa:b8:0e:19:84:c1:27:9a:c7:6c:
90:31:8a:b3:1b:5a:0f:bd:f9:5b:be:1e:5e:d1:12:
de:d2:e6:f9:0c:d8:f9:85:ac:bb:87:8b:50:c3:2d:
c8:4b:05:61:3e:24:84:61:1c:70:cd:91:bf:cb:a1:
59:9d:ab:d9:0f:7c:74:68:c0:67:1e:dc:60:b2:75:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:D2:92:4E:DA:E2:76:4F:9A:C2:F4:07:B5:EF:55:1F:68:13:9E
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Ae_Skk7a4nZPmsL0B7XvVR9oE54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.242.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e3:ec:8a:a8:d1:93:c9:2c:42:33:90:e7:78:f8:a2:db:41:
4b:94:3f:d8:7f:ae:8d:1d:89:41:8d:15:92:b5:d4:c3:72:04:
03:68:48:2b:83:88:3f:69:36:a5:13:b7:4d:cc:b4:1d:56:ad:
7a:87:8e:22:0c:a4:3b:87:ec:8a:63:af:af:2b:a3:18:d8:de:
45:e8:6f:d5:d6:ac:f1:2b:6a:a9:2b:04:88:89:a2:01:d4:62:
88:77:0d:d7:a0:9c:47:75:01:5d:ed:47:50:a5:52:6d:19:ff:
4c:d4:be:49:9b:12:c3:db:09:36:83:50:ce:1c:2a:cb:b2:01:
d0:39:64:87:c7:12:1d:09:46:63:80:12:e4:09:b7:2b:0a:96:
30:83:f7:0c:a1:42:a3:aa:48:cc:5e:b5:f1:7e:a6:de:15:aa:
35:78:51:92:9f:95:ff:f9:6a:47:0f:8e:54:6e:b0:40:d3:8b:
0d:14:b2:9b:74:b7:11:c7:4d:45:21:08:b6:a6:a0:d0:38:f7:
d0:53:5b:95:74:02:94:1f:42:3a:a7:d3:66:7f:26:e4:f6:31:
4f:c8:fb:ba:e3:d0:16:5f:ee:b9:53:5d:c4:25:d7:36:73:3c:
64:16:68:22:12:02:05:29:76:16:cc:0e:79:80:38:c8:54:4e:
c5:0a:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:09:38 2025 by rpki-client