Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/DAL3z9uHRKHNeIVc7wdUiIBGuds.roa
File: DAL3z9uHRKHNeIVc7wdUiIBGuds.roa (raw, json)
Hash identifier: TlsiXLpbaQ7caoj5WASdBkD9uEBM7HPfiS4lQqeLums=
Subject key identifier: 0C:02:F7:CF:DB:87:44:A1:CD:78:85:5C:EF:07:54:88:80:46:B9:DB
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 195DF827
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/DAL3z9uHRKHNeIVc7wdUiIBGuds.roa
Signing time: Mon 11 Apr 2022 15:04:27 +0000
ROA not before: Mon 11 Apr 2022 15:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9119
IP address blocks: 185.50.56.0/23 maxlen: 23
185.50.58.0/24 maxlen: 24
185.50.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425588775 (0x195df827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Apr 11 15:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c02f7cfdb8744a1cd78855cef0754888046b9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:f0:7e:60:83:e6:34:e2:fe:f2:a5:27:a2:
87:f6:b2:a4:47:b3:2a:55:f3:c7:75:08:2b:0e:02:
b4:c6:13:33:50:fe:42:3a:93:9e:9d:23:ac:f5:cb:
b4:5c:f8:45:d1:19:8c:45:3b:01:bd:38:06:86:87:
b4:fd:32:d2:01:a8:02:c6:8a:f7:d4:dd:1b:d3:72:
85:42:79:24:39:da:d6:49:a3:83:48:c4:44:32:b7:
86:e0:f8:2a:e5:ee:a4:71:51:1f:48:d7:9a:e5:89:
a2:c1:06:f2:d8:85:a4:aa:a7:cf:e9:81:e5:4c:06:
9d:46:2d:be:7c:99:ee:32:51:43:9f:9f:88:13:84:
a3:9a:13:12:cf:22:9b:f6:9d:48:15:7c:1c:02:24:
b3:e8:c5:4b:25:c1:26:f9:eb:3c:7e:c9:62:c0:61:
ad:82:c7:fa:25:c4:78:9f:b1:3f:a8:55:57:a5:a8:
be:be:79:2a:e2:c7:25:37:2a:cc:ac:ff:7c:a6:7d:
79:61:7c:7d:e4:e6:1f:86:16:e1:4c:c7:52:74:d7:
ac:b0:3e:bb:33:a9:ab:32:75:98:89:0f:b7:84:39:
1b:77:d4:83:d5:56:04:81:bd:c9:7f:ba:3a:e6:65:
f0:3d:f5:66:c0:2c:66:5c:47:d4:b6:ab:b0:03:bb:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:02:F7:CF:DB:87:44:A1:CD:78:85:5C:EF:07:54:88:80:46:B9:DB
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/DAL3z9uHRKHNeIVc7wdUiIBGuds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.56.0/22
Signature Algorithm: sha256WithRSAEncryption
22:2e:57:87:52:1f:3b:61:f2:5f:bf:60:4c:6c:cd:5b:f8:b2:
2c:4b:d0:ea:d3:69:06:c0:cc:64:1a:a6:a7:76:73:26:1a:eb:
42:99:27:b4:21:ae:1b:5b:c0:b5:36:00:9f:cb:aa:c0:01:bb:
76:77:6a:07:3b:b4:4c:93:eb:8e:eb:58:aa:e0:50:69:7f:2f:
f8:83:0c:fb:a9:6f:4b:f0:09:0e:a4:f6:5a:03:e4:1e:0b:44:
fb:3a:bc:ee:34:fa:83:c0:5f:eb:2c:26:fc:a9:9c:d1:ee:75:
e4:3e:b6:24:dd:f7:e9:4f:64:34:92:5c:44:a6:dd:94:18:d2:
80:1d:fc:0d:90:c3:a2:45:0d:b9:cb:f9:e3:34:03:d8:bd:ea:
50:27:d4:f7:1c:0a:bf:ae:4e:a0:14:9d:4b:da:9a:3c:19:1a:
17:df:0c:9e:fc:e1:3d:01:5a:e2:ea:c1:f2:e1:a2:75:85:d1:
f7:bd:80:f4:94:72:1b:28:fa:d1:fe:c6:50:f7:91:2e:c1:e5:
82:04:b9:ed:a8:61:6f:ac:8c:fa:07:21:b9:38:a8:06:ee:dd:
a1:d9:fc:79:f8:9a:e0:40:4c:7e:6d:9b:1f:36:38:8c:bf:f6:
9a:62:de:72:d5:88:8c:2f:9a:a0:55:95:c9:e5:ab:e3:2e:d8:
02:6e:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:43 2025 by rpki-client