Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/vuMcJgdB1eq2H3QdY5HHoHY9kFg.roa
File: vuMcJgdB1eq2H3QdY5HHoHY9kFg.roa (raw, json)
Hash identifier: PC7XpRuDXlNYCj5E/IpfobmYcc1M2oo4nm7Tfc1c/Os=
Subject key identifier: BE:E3:1C:26:07:41:D5:EA:B6:1F:74:1D:63:91:C7:A0:76:3D:90:58
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 01857315C4358899F9F48223BCCB6A46EE7C
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/vuMcJgdB1eq2H3QdY5HHoHY9kFg.roa
Signing time: Mon 02 Jan 2023 15:24:44 +0000
ROA not before: Mon 02 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5483
IP address blocks: 185.51.188.0/24 maxlen: 24
2a01:b5e0::/104 maxlen: 104
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:c4:35:88:99:f9:f4:82:23:bc:cb:6a:46:ee:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Jan 2 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bee31c260741d5eab61f741d6391c7a0763d9058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:2a:0c:ac:22:ff:eb:32:df:18:ec:3c:6c:
9d:d1:8e:94:a8:ac:b6:78:39:fd:24:ea:95:1c:b1:
11:4d:b5:11:1e:ca:67:81:01:8a:5f:2c:d6:80:c6:
92:9c:9a:b0:63:e1:a1:6f:a4:e4:52:44:ac:6d:b1:
5c:d7:13:46:2c:c2:16:6a:31:8d:2d:22:b4:08:3b:
25:e3:d4:29:16:37:a4:f2:ea:a0:29:87:40:b3:6b:
97:49:3f:e3:8b:25:5e:98:19:79:c5:b2:11:24:4b:
13:b3:e7:c1:9d:32:2a:2f:51:24:e6:7e:1d:ec:7d:
32:a3:2a:5d:54:f5:36:ab:6c:34:7c:a6:90:0e:f8:
cf:cf:72:ac:30:a3:24:da:e1:77:a2:ad:d8:67:08:
23:2f:f1:02:3d:b2:e3:c1:6c:92:d4:f1:eb:60:01:
5a:56:a1:6c:40:bd:17:76:7e:ef:7d:b5:18:e9:74:
ed:2a:f0:17:b0:3f:ed:4c:a2:67:fa:e1:65:56:11:
6b:ee:47:3e:e3:f5:4d:51:48:10:e2:41:ad:c8:d7:
e8:4e:7c:31:54:ec:9e:11:4e:ca:b3:06:ba:c2:22:
62:12:2a:ce:31:2f:79:d6:5c:0e:98:80:7f:3d:f8:
40:5a:6f:8f:53:fb:c5:aa:d1:6b:74:81:32:08:dd:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E3:1C:26:07:41:D5:EA:B6:1F:74:1D:63:91:C7:A0:76:3D:90:58
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/vuMcJgdB1eq2H3QdY5HHoHY9kFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.188.0/24
IPv6:
2a01:b5e0::/104
Signature Algorithm: sha256WithRSAEncryption
95:af:27:b5:a4:16:24:85:df:94:6d:78:1d:d7:43:26:47:60:
3e:68:ae:75:31:7c:b8:4a:51:00:4e:14:f3:54:33:d3:a6:a8:
67:3d:9b:14:1f:d2:18:cb:9d:d4:23:af:96:c0:42:3a:c3:8f:
c5:14:a4:a6:b2:da:c7:f9:03:8a:f4:91:7d:e2:b8:bd:ed:cf:
23:30:36:85:92:3b:b9:b5:54:42:ac:40:7f:f0:12:44:25:ac:
c6:19:04:c2:03:5a:2f:f8:2f:83:17:34:f9:f9:8e:8d:bf:56:
ab:7f:ea:51:a4:7e:b1:8d:b4:93:23:7b:6f:f4:ee:8d:25:90:
68:62:90:b3:a0:03:a3:2f:52:19:f1:a5:85:57:44:7d:a3:23:
ba:b0:98:74:fc:86:35:21:ca:37:43:af:ab:70:41:1a:90:f9:
2d:11:2a:d9:9f:95:40:54:8b:44:c1:5f:e9:cd:d0:37:70:59:
63:88:b8:d6:3e:55:f9:91:0d:0d:f0:a5:40:ad:77:34:06:ed:
40:68:73:68:db:85:5b:88:a4:56:fe:13:75:64:6f:79:0c:b9:
1e:fd:08:21:92:b9:a6:5f:d4:55:97:de:c9:a6:b7:31:ad:b8:
09:c8:cd:2b:ea:7a:c4:8a:3d:34:18:fd:c3:e8:b9:bc:38:97:
ed:7a:13:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:48 2025 by rpki-client