Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sUuDZDyjLO5b84N0KA1-BZg9ikk.roa
File: sUuDZDyjLO5b84N0KA1-BZg9ikk.roa (raw, json)
Hash identifier: +ieTmdtAW7GnA0dfjcX0CeZ/2tX/zpLcYxzviLuhA6w=
Subject key identifier: B1:4B:83:64:3C:A3:2C:EE:5B:F3:83:74:28:0D:7E:05:98:3D:8A:49
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 09166849
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sUuDZDyjLO5b84N0KA1-BZg9ikk.roa
Signing time: Sat 01 Jan 2022 01:59:01 +0000
ROA not before: Sat 01 Jan 2022 01:59:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50563
IP address blocks: 185.102.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152463433 (0x9166849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Jan 1 01:59:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b14b83643ca32cee5bf38374280d7e05983d8a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:dc:5c:f5:29:88:a9:13:e0:54:b3:ff:0f:
b0:05:3c:da:54:cf:27:c1:33:7c:58:4a:07:a8:15:
5e:34:02:6d:0d:a2:10:45:79:90:ec:67:8c:b8:d5:
e9:8d:4f:0b:95:13:9b:04:d9:f9:d2:2c:21:a5:d3:
7b:36:73:5f:9e:f6:c6:8a:7f:a5:ed:e8:11:ba:32:
57:ac:b5:28:00:85:78:cf:d5:19:62:7d:68:6d:84:
33:8f:36:d7:10:0d:6f:40:34:a0:7c:13:af:1d:04:
e2:2f:ec:84:93:d4:c1:c4:fa:3f:eb:c0:b7:01:a4:
6c:93:04:6b:ed:31:cd:48:9f:ad:6c:4b:88:bf:17:
55:9b:51:9e:02:ff:32:82:e0:79:54:f1:ad:68:21:
6f:70:da:a2:bc:42:4d:ec:52:05:60:5a:09:61:c2:
ad:cd:ab:af:40:a7:6c:90:6f:74:dd:b7:b7:b6:50:
5f:e2:d0:71:64:d7:ef:95:13:09:b9:a2:ea:1f:eb:
6c:0d:6d:bc:45:87:d2:e0:7e:62:80:48:26:8e:37:
f4:79:2a:07:35:b1:25:62:5d:89:52:ab:4b:6b:72:
ee:8f:b4:a2:db:2c:0c:2c:da:f1:1d:c0:19:81:3c:
33:a4:b2:de:7b:82:cb:89:b6:30:4f:50:52:d7:fc:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4B:83:64:3C:A3:2C:EE:5B:F3:83:74:28:0D:7E:05:98:3D:8A:49
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sUuDZDyjLO5b84N0KA1-BZg9ikk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f6:45:f6:37:74:76:ff:f9:75:18:54:32:07:39:8c:0d:64:
45:17:c3:80:7e:cc:ed:79:bd:5b:90:84:00:d3:d5:5b:42:48:
e6:50:ce:17:17:52:60:18:8f:57:b6:5c:cb:42:ae:8e:66:d0:
77:8b:24:ab:b6:42:a8:db:86:9d:8e:91:86:ae:18:f9:09:fc:
a6:01:8d:46:72:51:56:e5:41:69:79:0e:6d:cc:e5:57:dd:b1:
23:77:52:56:03:61:b8:2d:d1:70:da:c6:27:d4:5a:71:57:a8:
b0:66:44:01:3e:20:45:53:59:86:e8:bd:d9:85:08:12:7e:fe:
20:27:2f:84:8c:8b:18:96:90:7a:a5:fa:a2:bb:71:0a:5e:8d:
23:25:0f:fd:75:61:d6:ea:a7:3c:35:e8:87:e4:f3:dd:fd:ca:
56:74:12:b3:61:45:17:02:2a:78:e2:fb:cb:f1:d9:4d:ef:fb:
3d:f1:59:72:18:f4:30:be:aa:94:a3:cf:a6:03:f3:56:7d:29:
08:52:92:31:a9:8c:7a:ee:86:79:a1:6b:e6:a8:a0:f3:98:1a:
c2:b3:82:53:12:18:0c:b7:09:7f:11:2c:a2:9d:4a:d4:a7:c4:
6c:93:25:12:0d:8e:76:b3:a4:c8:d5:73:95:f9:15:99:3d:ed:
73:e1:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:44 2025 by rpki-client