Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/xbGujPnVUAl6r-n3cIVPY7Hyk74.roa
File: xbGujPnVUAl6r-n3cIVPY7Hyk74.roa (raw, json)
Hash identifier: hOLA2PGLyXgjjLt4KgsiQNEv78X/Gt+o6SQRnGkuFzI=
Subject key identifier: C5:B1:AE:8C:F9:D5:50:09:7A:AF:E9:F7:70:85:4F:63:B1:F2:93:BE
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 0A64F98E
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/xbGujPnVUAl6r-n3cIVPY7Hyk74.roa
Signing time: Mon 07 Feb 2022 14:52:03 +0000
ROA not before: Mon 07 Feb 2022 14:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209299
IP address blocks: 185.192.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174389646 (0xa64f98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Feb 7 14:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5b1ae8cf9d550097aafe9f770854f63b1f293be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:b1:ff:d2:89:18:cc:b5:8c:e7:22:22:f3:
d7:a3:10:1e:7c:d8:48:69:77:75:8a:dc:bd:6b:17:
ee:35:04:83:2c:1a:7a:19:de:7c:dc:e1:8b:49:6a:
f0:93:72:ac:1e:5d:4a:86:2e:12:c4:25:28:fe:08:
ad:64:30:51:0a:50:90:18:05:92:c4:78:d2:4c:cf:
13:f6:2f:bf:d5:76:c9:e3:6a:88:97:cb:b7:33:a6:
11:02:f9:56:d9:9f:bd:d5:8f:a8:9a:a2:ae:e8:87:
49:70:28:42:fd:1c:ee:b0:29:6b:91:83:6c:cc:00:
b8:7a:bf:e0:8b:1c:63:75:05:c4:0a:3b:a7:8f:87:
ee:0c:7f:84:15:70:d2:3e:e9:1a:90:57:c5:bf:06:
c5:b6:2e:7e:67:60:45:a7:fd:54:f9:92:87:e5:28:
37:eb:47:23:00:0b:04:a5:c8:5b:b0:df:e7:81:4b:
2a:1d:c8:bb:ab:6c:3d:88:03:de:23:50:c3:af:eb:
a1:22:6d:dc:5f:b9:a0:c7:0e:2d:4a:04:78:ff:36:
4f:e0:05:be:ec:6a:3a:71:3b:5f:da:fd:59:3d:76:
5a:cd:49:fd:a0:7b:99:38:0d:b1:81:2d:6d:c5:d6:
7e:b1:8f:96:bb:1c:2a:bd:d5:01:2c:b3:2d:ef:35:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:AE:8C:F9:D5:50:09:7A:AF:E9:F7:70:85:4F:63:B1:F2:93:BE
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/xbGujPnVUAl6r-n3cIVPY7Hyk74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b1:d4:90:58:6a:d9:f4:ef:d1:b7:e4:48:90:bb:47:34:59:
97:82:2e:18:2d:0e:9f:cb:63:97:b5:4e:bd:b1:4c:c1:88:40:
d1:31:80:07:39:59:aa:e7:95:df:aa:14:aa:ea:54:79:dc:37:
26:0d:b1:07:83:57:1a:8a:05:3f:c1:7c:94:d9:0b:9b:28:4a:
dd:8b:61:d1:9a:00:8b:11:b0:14:a9:a9:0e:8f:12:c9:f7:4d:
70:a9:4b:8b:29:4f:df:71:66:7f:c7:b4:ff:d3:69:ff:fa:54:
5b:f3:ca:9e:e5:da:30:71:24:c8:61:70:71:02:8b:34:1f:50:
f7:53:a7:82:d4:66:26:9e:01:bb:2d:45:f1:ab:ed:4a:9d:3b:
dd:c5:59:41:a0:43:6a:5c:63:0d:78:f0:f5:f3:04:bc:57:6b:
e8:72:38:29:52:c2:d1:d7:a4:d3:e6:41:68:a7:0b:a9:c7:cb:
6c:c5:ef:a8:e3:fa:f5:0d:09:d3:1f:bf:06:2b:db:0b:af:52:
2c:e2:82:20:a9:e2:9f:2b:de:cc:de:79:4d:1c:f0:69:36:50:
7b:7b:f8:21:f8:e9:e2:0e:18:fa:f8:18:86:46:2e:0b:e4:43:
a5:c2:af:82:ea:53:44:89:c7:ba:12:b7:e3:f2:6a:4a:3c:68:
48:a4:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:39:44 2025 by rpki-client