Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/klJCTGfaeNHh2INSIoabErGlRKQ.roa
File: klJCTGfaeNHh2INSIoabErGlRKQ.roa (raw, json)
Hash identifier: TeUNoB5ztoqUQtYr+j8k93hh6vDogrJ8fF1bPjJwMho=
Subject key identifier: 92:52:42:4C:67:DA:78:D1:E1:D8:83:52:22:86:9B:12:B1:A5:44:A4
Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial: 10AD60AD
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/klJCTGfaeNHh2INSIoabErGlRKQ.roa
Signing time: Sat 01 Jan 2022 01:50:47 +0000
ROA not before: Sat 01 Jan 2022 01:50:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.50.207.0/24 maxlen: 24
193.43.75.0/24 maxlen: 24
193.43.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279797933 (0x10ad60ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Validity
Not Before: Jan 1 01:50:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9252424c67da78d1e1d8835222869b12b1a544a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:ad:49:a2:d6:0d:83:34:2f:2c:ac:ee:03:
c3:4c:62:b4:ec:7f:06:d3:5e:38:43:e8:d7:96:20:
fc:a4:cf:30:99:72:c8:d0:ae:a3:ab:18:e2:62:2f:
5b:7f:e6:d9:3b:8a:00:0b:b1:09:6d:e3:63:5d:6d:
44:9e:1a:79:7a:a6:cc:c1:98:bc:9c:7b:9a:05:88:
3d:93:c3:14:cb:b6:2f:88:13:f7:58:9b:00:df:f8:
a2:ad:22:ef:48:71:6b:ff:fd:be:ec:1a:aa:05:4b:
b1:ac:fa:7c:1c:98:0a:f9:f3:af:29:64:48:c6:97:
9e:22:2a:d8:5e:2f:b3:bd:43:0a:3b:12:56:ff:15:
1e:d6:83:2b:55:0c:96:5d:f1:53:09:b8:24:b9:99:
67:7a:1e:5f:1d:21:7e:1a:3e:e6:91:55:5b:cb:db:
80:1e:f2:8f:43:7e:9a:6b:ed:95:3b:ce:73:9e:9d:
1f:52:d8:b1:58:0c:51:19:a3:3a:9b:ac:d6:64:a4:
75:d7:cc:e0:99:29:04:24:c7:85:37:c8:56:91:f5:
01:93:dd:ce:66:a4:37:06:cd:e7:f5:d1:d0:e9:f7:
84:9d:03:79:57:48:08:b8:e9:3c:d6:99:e6:52:44:
c0:df:fb:9e:13:c9:c2:b6:7e:8d:f3:64:96:74:ed:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:52:42:4C:67:DA:78:D1:E1:D8:83:52:22:86:9B:12:B1:A5:44:A4
X509v3 Authority Key Identifier:
keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/klJCTGfaeNHh2INSIoabErGlRKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.207.0/24
193.43.75.0/24
193.43.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:66:31:10:c8:b9:2d:94:55:c7:b9:7e:11:f8:54:a0:86:db:
6e:86:4f:72:88:0b:80:21:58:93:6d:fc:22:b3:34:37:af:75:
30:0e:cf:28:01:60:6f:6b:7c:56:68:35:f3:39:e3:5f:54:ae:
7b:47:9e:cf:e1:49:2f:e8:c8:25:a1:cd:9d:52:22:bb:be:89:
ff:29:f0:6b:fd:fb:76:8f:2a:56:71:5f:50:8c:cb:39:ab:8a:
e2:e2:87:04:49:35:66:4b:45:05:6e:91:ef:ca:a4:bc:e8:df:
ae:02:46:c1:7a:3d:d7:fd:96:a9:9f:f0:ee:cf:bf:89:51:8d:
14:c2:ab:48:bd:88:a8:cd:6e:48:dd:a4:e2:14:6d:be:ae:cf:
ae:6c:b1:c3:e5:2b:d1:bb:14:1a:46:21:61:e2:33:06:04:78:
ef:07:a5:80:41:ff:f3:cd:a4:ae:2d:70:e0:e4:a2:35:ab:f6:
b0:22:3e:b7:f4:72:ce:95:67:95:c9:f2:4a:67:ae:6f:98:ff:
6c:c4:0d:9a:8f:68:bd:28:da:d0:78:fc:9e:ee:a4:c4:da:07:
47:ee:07:d3:62:55:6a:7a:6a:7f:69:fe:2b:1f:92:9f:9c:82:
40:5c:bc:3b:3b:b3:8e:e9:28:80:fb:10:c7:2a:51:3b:7a:b6:
d2:06:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:13 2025 by rpki-client