Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/JCJ0d3zg7x1dQWpSufhnd65SlGc.roa
File: JCJ0d3zg7x1dQWpSufhnd65SlGc.roa (raw, json)
Hash identifier: dvGVl4yNPU696ZFFMVqQ1h8BZ4bA70rBloTCgLyaMPI=
Subject key identifier: 24:22:74:77:7C:E0:EF:1D:5D:41:6A:52:B9:F8:67:77:AE:52:94:67
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 01856FD521D9F3444E4B47CCE92B74345D6B
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/JCJ0d3zg7x1dQWpSufhnd65SlGc.roa
Signing time: Mon 02 Jan 2023 00:15:16 +0000
ROA not before: Mon 02 Jan 2023 00:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212572
IP address blocks: 185.50.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:21:d9:f3:44:4e:4b:47:cc:e9:2b:74:34:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Jan 2 00:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=242274777ce0ef1d5d416a52b9f86777ae529467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:48:47:50:9c:d8:15:92:5d:4c:57:90:62:
f6:10:a1:46:4d:07:3f:44:0f:a6:be:ab:39:1f:08:
cb:28:3a:84:ec:fd:80:70:d4:a4:a2:3c:b2:cd:df:
3a:9e:9c:17:45:97:8b:3b:ef:19:b3:08:ef:74:bb:
de:11:17:a0:98:54:f3:b0:67:ad:67:e1:63:c5:1f:
46:25:67:b9:46:05:b3:7f:5d:e1:f4:c0:75:e6:31:
f7:09:94:07:a8:05:f2:db:24:70:7c:20:51:ea:0b:
c7:0e:7e:42:c5:6e:29:37:ef:19:c1:79:f9:b3:18:
b7:d8:3d:1a:44:49:f9:a3:a5:d6:54:6c:0e:01:dc:
2b:ba:25:5f:7e:c8:ac:39:82:b3:6b:ae:2b:64:e8:
ca:15:2b:69:f9:a3:e2:d3:96:d6:a2:d0:f3:75:e4:
ca:bb:d4:b7:5f:e2:51:4a:2d:40:ef:95:d0:ff:04:
1a:17:93:db:97:93:86:ec:82:3e:88:06:0a:d6:19:
c3:d3:c8:1e:3e:ca:4d:03:46:33:77:4d:67:1c:cd:
40:75:98:3a:2d:1d:1b:e1:fa:2f:cc:40:20:9c:af:
80:43:34:ff:69:aa:91:b3:44:c3:61:74:32:ea:51:
62:ff:f6:88:ce:e3:b6:8b:85:e5:16:a4:22:be:ea:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:22:74:77:7C:E0:EF:1D:5D:41:6A:52:B9:F8:67:77:AE:52:94:67
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/JCJ0d3zg7x1dQWpSufhnd65SlGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:44:4e:9d:cd:3f:a0:b7:89:c6:57:e4:06:af:1e:06:5b:f5:
b5:59:ce:24:67:e8:01:6e:3e:cb:12:b6:9c:6a:30:98:b9:62:
a8:0f:7f:0e:7b:2c:07:e5:12:6a:dc:33:c7:6a:bf:27:87:77:
51:82:31:9f:51:53:2b:da:11:99:6b:e9:b7:5a:52:e8:91:89:
d9:61:51:7a:22:45:0e:76:2f:76:df:69:b8:7a:eb:11:29:b6:
88:3e:ed:b2:c1:39:f1:34:74:2f:ca:94:1e:78:7f:65:d9:0b:
3c:88:97:4a:f6:d4:f0:9a:9b:59:b6:29:bc:5a:c4:e3:00:06:
19:62:ae:68:b0:dd:c4:64:cb:4e:8d:d6:ec:70:25:1e:2c:72:
9e:cb:03:14:10:a1:11:18:29:1e:b0:77:56:b9:8f:80:74:71:
d8:b3:33:8a:e5:76:46:83:76:17:93:61:5d:d7:9e:98:58:7f:
7a:d6:06:d7:bf:3c:f8:04:af:9d:de:d6:fd:7d:87:55:9a:51:
00:b7:2e:9a:55:44:cf:38:5a:33:43:b2:d6:d0:63:b2:53:65:
ba:26:c8:10:a0:8c:5d:96:e7:99:f3:80:95:f8:29:37:78:28:
c2:54:ac:5e:b5:ce:75:28:52:e0:e3:4d:17:dd:27:ed:bf:97:
5e:0f:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:37 2025 by rpki-client