Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/bFrl4qFMrw2maVA612CnYBc2JP4.roa
File: bFrl4qFMrw2maVA612CnYBc2JP4.roa (raw, json)
Hash identifier: MYcSwFYBZXMvYRWS9Ug4KrPy9QgSgr+kMUTiE0el1zQ=
Subject key identifier: 6C:5A:E5:E2:A1:4C:AF:0D:A6:69:50:3A:D7:60:A7:60:17:36:24:FE
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 018AA7BE21617BD12C7CA8F6204B008C28B5
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/bFrl4qFMrw2maVA612CnYBc2JP4.roa
Signing time: Mon 18 Sep 2023 10:02:50 +0000
ROA not before: Mon 18 Sep 2023 10:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 185.130.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:be:21:61:7b:d1:2c:7c:a8:f6:20:4b:00:8c:28:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Sep 18 10:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c5ae5e2a14caf0da669503ad760a760173624fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:40:97:7d:92:d6:3a:5a:e3:c7:20:e5:7b:
d9:f3:4b:d1:61:7f:fe:e1:60:c9:ee:5d:f2:28:77:
72:2e:10:fb:14:57:6b:c5:aa:cd:96:0c:18:34:df:
2a:fe:43:22:e5:f3:a5:2e:91:85:62:71:61:7e:ba:
8c:d3:9c:15:10:85:37:77:1d:cc:e9:01:40:be:7c:
a8:05:7b:59:0d:8d:e3:2e:fc:2a:ca:c3:4b:8f:91:
54:90:70:c5:c4:a3:38:ef:47:a1:58:24:1b:7b:24:
83:d5:d9:11:ac:20:03:ef:2b:c6:50:02:c8:c3:8a:
61:2e:a4:57:25:4f:f0:e5:cc:da:83:1e:ed:3d:5a:
06:d7:06:7a:3f:49:b9:60:7a:b9:c6:39:ef:a2:8a:
f7:73:a3:75:ae:b8:79:b0:6d:f5:94:31:3d:d7:bb:
6e:59:16:28:ad:01:b7:4a:fa:3d:ef:14:bf:d7:1c:
38:ea:42:7e:dc:12:ee:15:65:5a:e7:95:7e:00:dc:
3c:b0:a1:5b:0a:42:2c:1f:45:a6:89:33:7d:82:4f:
63:dc:21:8f:a2:e0:4e:6a:80:d9:61:39:22:a5:32:
28:b0:0b:29:89:e6:a2:9e:cc:a4:a7:18:69:95:0e:
0d:d8:46:f1:8d:21:b5:25:64:de:9a:0d:a3:7a:b6:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5A:E5:E2:A1:4C:AF:0D:A6:69:50:3A:D7:60:A7:60:17:36:24:FE
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/bFrl4qFMrw2maVA612CnYBc2JP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c4:49:a5:df:10:e4:b7:15:68:a8:a9:73:8b:6d:e3:af:9e:
cc:de:bf:c5:84:ca:87:cc:c1:b2:70:d1:ad:4d:e9:e8:07:ba:
75:c9:30:ba:a7:7b:14:d6:62:64:95:9b:64:04:58:fd:2a:db:
56:32:1b:1f:50:20:75:d1:57:35:0c:aa:49:13:cf:7d:66:09:
ec:5d:aa:68:d7:22:2e:7c:e7:3b:91:aa:93:01:1c:52:91:56:
1b:86:eb:a1:50:52:41:29:13:fa:13:da:18:cb:89:61:69:bf:
0e:12:f3:1d:a3:78:ba:4e:73:b4:0b:e5:b0:67:d1:65:77:61:
3e:40:27:cb:f1:e5:54:f3:89:e0:4f:10:a8:aa:81:68:b9:81:
f9:4e:e9:a7:78:c8:3f:b4:a2:82:cc:03:f2:9a:e2:77:20:34:
88:3d:06:ef:44:e5:97:ee:be:1b:d3:42:9b:f1:df:fa:f1:ba:
72:9f:c8:bb:51:0c:1f:1a:66:f6:37:c1:d6:fd:0c:0c:4f:fd:
6a:b7:99:5c:e2:bb:b3:1b:fc:1b:5e:ed:a0:b6:6b:05:92:df:
aa:6a:2e:1f:5d:ea:e3:37:13:ac:31:d4:3e:41:90:71:11:0f:
2a:62:05:d2:b9:49:46:ff:18:f9:c2:67:92:56:be:35:94:66:
48:6f:03:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:12 2025 by rpki-client