Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7JXn2Av0dHfjZdx4pnUOk1VAPPc.roa
File: 7JXn2Av0dHfjZdx4pnUOk1VAPPc.roa (raw, json)
Hash identifier: 841priTPBAnqauE5ITOI9kb7QhVjRAHc/TECcimxgvI=
Subject key identifier: EC:95:E7:D8:0B:F4:74:77:E3:65:DC:78:A6:75:0E:93:55:40:3C:F7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018C79A77423A5A4ABB51F8CEA5156BE32FD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7JXn2Av0dHfjZdx4pnUOk1VAPPc.roa
Signing time: Sun 17 Dec 2023 21:21:06 +0000
ROA not before: Sun 17 Dec 2023 21:21:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 176.125.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:a7:74:23:a5:a4:ab:b5:1f:8c:ea:51:56:be:32:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 17 21:21:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec95e7d80bf47477e365dc78a6750e9355403cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:68:3b:89:5f:ef:3c:68:ca:6e:de:7f:e3:
ac:29:f3:ae:9e:2b:d0:84:79:6b:1b:3e:d2:11:8d:
15:fa:8b:e1:7f:d6:c7:6f:75:a7:a1:97:cc:f0:04:
5d:8c:9c:70:75:70:3b:6e:8b:0a:73:8e:f0:a5:b6:
ca:0f:25:58:78:10:63:7a:a2:92:1c:af:bf:65:70:
ce:e1:71:d8:44:2e:5e:b1:8d:50:d5:83:4d:62:81:
3f:45:7e:a1:f9:50:ef:c4:0c:bb:61:c8:0d:4a:45:
9b:27:8e:ab:b2:87:5f:87:56:72:7d:14:9e:7f:c7:
bc:07:5d:49:a3:55:49:03:20:ba:05:d8:0e:37:9c:
1a:22:0b:c9:d7:1f:b7:b2:5c:9b:69:7c:ac:a8:52:
58:f2:b1:a3:a6:3f:7b:17:4f:1c:8e:1b:b2:78:ae:
a3:1b:0d:aa:74:af:be:1a:b6:c1:fe:58:18:25:f1:
3b:29:c5:07:73:07:05:99:1e:d6:3a:4e:5c:ca:91:
54:2a:a7:e2:7c:04:34:7a:35:5a:4f:e5:d7:cd:89:
70:36:1d:83:a1:56:3b:05:a7:84:e6:16:2a:12:0d:
96:60:48:39:13:30:38:b5:c4:c7:8f:04:a7:33:6b:
25:3b:cb:ab:9e:dc:dd:70:02:b2:8a:d5:f5:14:64:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:95:E7:D8:0B:F4:74:77:E3:65:DC:78:A6:75:0E:93:55:40:3C:F7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7JXn2Av0dHfjZdx4pnUOk1VAPPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3d:e6:95:51:c1:47:56:fd:27:48:f9:50:97:2a:dc:81:d3:
e4:af:38:8c:27:ba:2c:15:66:9a:52:84:30:cd:93:fb:0e:9b:
d6:62:f2:a3:66:5b:b4:d7:bc:fe:2e:35:dc:71:67:a1:40:6a:
02:12:1f:c9:39:d6:e8:cf:a5:76:47:38:8a:fe:3e:db:2c:74:
3f:11:36:a1:7b:6d:76:e2:93:24:a7:0e:34:46:0f:9f:e1:10:
0b:7d:2f:0c:2d:8f:ca:8a:09:b7:54:08:4f:b7:90:a4:2d:97:
c7:10:a3:50:3d:67:b3:4a:e1:18:fe:bd:1d:77:41:78:c7:24:
c9:5b:b1:1e:e4:bc:e8:e1:f6:95:0c:35:d0:87:bb:1e:66:ff:
49:ed:62:56:52:70:3a:f0:25:54:18:e6:89:8a:61:a7:ed:94:
91:c3:55:b3:aa:50:56:06:76:cd:34:3a:ac:63:dd:30:24:37:
44:27:c1:ca:01:39:7f:b5:a1:e2:d4:c0:32:98:7f:1e:f1:3a:
1c:10:02:7a:24:52:26:30:0d:0f:bb:3d:2b:6c:62:2b:34:fc:
7f:94:b7:f7:93:9a:06:d3:e7:e5:7a:43:19:73:4d:77:30:e5:
a9:6a:40:c4:d8:d7:20:ad:4f:99:78:6b:1c:2f:3c:3f:93:32:
36:cb:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:22:06 2025 by rpki-client