Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/UK7rlmNgOLqTSakqOzD1QfZ6IrU.roa
File: UK7rlmNgOLqTSakqOzD1QfZ6IrU.roa (raw, json)
Hash identifier: WDZBNER8BKSdmrErz2UjUcmHL2Mvh1WIOrUFVbTluo0=
Subject key identifier: 50:AE:EB:96:63:60:38:BA:93:49:A9:2A:3B:30:F5:41:F6:7A:22:B5
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 01856D81D35DB721F42B72B785FF93F7044C
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/UK7rlmNgOLqTSakqOzD1QfZ6IrU.roa
Signing time: Sun 01 Jan 2023 13:25:02 +0000
ROA not before: Sun 01 Jan 2023 13:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38916
IP address blocks: 185.237.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:d3:5d:b7:21:f4:2b:72:b7:85:ff:93:f7:04:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Jan 1 13:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50aeeb96636038ba9349a92a3b30f541f67a22b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:3f:59:3a:c8:49:49:03:84:fc:2e:19:07:
a9:6b:ec:f8:1a:f7:b0:2c:f0:fb:77:f5:de:95:c3:
68:a2:aa:77:8f:50:58:d1:6e:18:cd:b6:98:7f:98:
23:15:c3:ca:5e:8e:8f:db:54:0f:2b:34:ac:43:80:
36:98:01:5a:df:4f:3e:f3:16:da:02:70:74:80:f2:
0d:f1:db:b9:98:c3:8e:13:ea:58:d2:eb:fb:c9:76:
2e:f9:e9:b3:a1:39:f9:dd:de:a3:4c:13:2f:66:9f:
7f:3d:37:a0:72:bc:c9:b6:83:f9:8e:2a:66:3a:26:
a1:7c:1c:75:54:f0:b7:45:d0:59:67:4a:6a:13:5f:
7c:9d:8f:c5:3c:b5:ad:8b:93:80:4b:76:08:26:d2:
71:bd:e9:0b:d0:19:41:c6:b6:64:5a:5a:3c:32:f9:
3d:0d:45:46:df:2d:ee:f9:c8:e1:f4:c2:c4:e8:66:
e6:70:17:59:c8:99:32:38:30:de:01:4f:bc:f5:36:
2b:ee:9c:99:4f:61:ba:80:b7:b9:14:0d:af:33:46:
ab:fc:29:a9:8d:50:86:88:94:a6:d1:5a:e4:8f:cb:
7a:aa:b6:0a:1c:75:b3:db:9a:64:6b:45:e7:fb:6c:
50:61:eb:84:4c:e0:69:2c:2e:d6:0e:6e:98:d5:83:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AE:EB:96:63:60:38:BA:93:49:A9:2A:3B:30:F5:41:F6:7A:22:B5
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/UK7rlmNgOLqTSakqOzD1QfZ6IrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.18.0/23
Signature Algorithm: sha256WithRSAEncryption
47:53:63:67:06:52:1b:8a:4e:30:fe:d6:20:6e:3f:bf:66:09:
a6:09:b2:dd:57:66:55:89:88:f3:0e:32:84:89:b8:a7:eb:f0:
3e:79:f0:cc:02:7a:df:cd:df:a3:75:e8:bd:3c:14:4f:4b:f8:
73:6d:41:2d:43:d8:3b:dc:98:31:d8:81:cc:32:29:86:a0:92:
dc:7a:91:9e:06:bf:ee:8c:9f:c0:e3:11:88:43:a9:c4:70:a1:
f7:b2:6f:3d:c9:b2:b0:84:cc:2c:64:aa:99:b7:58:8b:6e:e8:
d0:6e:9c:fa:01:9d:7c:29:a5:85:ad:ac:f2:5c:43:4d:c7:dc:
92:93:b6:7f:9d:f3:2f:14:4a:ca:35:aa:d6:4a:7c:8b:bf:4c:
83:c6:c0:6f:fe:d7:15:4a:07:d7:35:05:7c:a5:f6:48:da:95:
cc:a3:63:13:9f:35:20:13:64:4f:30:8f:61:c4:79:6f:4e:ba:
91:65:e8:d5:eb:4b:5c:ac:35:c6:b9:6e:ed:c6:be:92:bf:3c:
cd:47:9e:c7:6e:4b:63:bf:b8:cf:1c:ec:9b:14:9d:c5:67:28:
a8:1d:8f:32:91:26:c2:02:35:c0:91:a2:d7:63:29:7f:5f:66:
cc:33:42:1b:ab:67:a9:82:a5:34:10:2f:47:c1:a8:f1:1f:ed:
6e:6f:ba:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:42:44 2025 by rpki-client