Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/1-bpcSMBZuhWe8ymeu61pCiV3Tqc.roa
File: 1-bpcSMBZuhWe8ymeu61pCiV3Tqc.roa (raw, json)
Hash identifier: ei1s5Pi4dzpL2OYbPdUbE6TqfD75Z9aTMX+wywIOcKs=
Subject key identifier: F9:BA:5C:48:C0:59:BA:15:9E:F3:29:9E:BB:AD:69:0A:25:77:4E:A7
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 0182123A59065CEEDDF9B3724811A5293D5F
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/1-bpcSMBZuhWe8ymeu61pCiV3Tqc.roa
Signing time: Mon 18 Jul 2022 16:53:09 +0000
ROA not before: Mon 18 Jul 2022 16:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210144
IP address blocks: 31.132.48.0/22 maxlen: 22
185.141.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:3a:59:06:5c:ee:dd:f9:b3:72:48:11:a5:29:3d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Jul 18 16:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9ba5c48c059ba159ef3299ebbad690a25774ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:6e:6e:c1:27:dd:52:8a:05:0e:b0:46:d1:
5f:ef:42:a3:3e:e5:a9:57:cd:ba:7d:59:af:22:23:
11:09:4f:1a:28:94:62:2d:86:ce:0b:22:f9:02:1d:
8d:a0:e8:51:36:99:96:d9:3f:a6:6f:2a:46:dd:2d:
ae:7d:3a:ed:ff:c1:cb:79:cf:11:7f:bf:e6:d5:5e:
4d:fc:f6:ff:47:65:33:10:58:40:6d:11:d5:7e:2e:
3e:c7:99:08:ac:d7:a2:10:e7:da:10:78:16:58:c7:
12:64:e8:28:91:99:aa:f6:dc:ce:50:33:8c:64:e6:
de:b1:a1:93:65:e1:67:6c:ee:69:97:4e:d6:ba:f1:
9e:41:ba:bc:67:a2:ee:e8:e0:17:59:4a:82:9e:7f:
1a:80:45:43:b1:51:fb:fd:5c:b4:b5:a6:d4:29:54:
90:d8:7f:95:1d:03:db:02:3a:82:47:d0:a8:07:b9:
ff:47:e0:d8:6e:6d:df:91:5c:24:ef:05:a6:89:1f:
7f:53:2c:0d:e3:d2:ca:ea:f7:62:6e:5c:0c:18:38:
c0:da:3a:79:80:d1:86:a9:cc:5e:a9:06:7c:ac:b7:
1a:3c:65:4e:01:1b:cc:1a:bb:58:f3:6f:2b:82:a8:
69:a9:b7:d6:56:73:29:b7:1c:5d:e2:57:16:81:22:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BA:5C:48:C0:59:BA:15:9E:F3:29:9E:BB:AD:69:0A:25:77:4E:A7
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/1-bpcSMBZuhWe8ymeu61pCiV3Tqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.48.0/22
185.141.172.0/22
Signature Algorithm: sha256WithRSAEncryption
13:89:60:0a:a5:6d:b2:9d:c8:ee:5a:47:cd:26:69:0e:c9:5b:
10:72:0a:b0:57:da:a1:e0:b0:99:2b:c0:38:ce:33:93:b1:72:
36:d3:10:78:7c:05:6b:10:b8:38:fa:ea:82:3e:ee:21:a9:53:
74:7a:92:75:0f:18:cd:77:11:31:ad:b6:1c:67:41:0b:0e:34:
a9:46:e9:9c:59:cc:16:3c:47:b7:e6:d8:5c:01:8b:ee:0e:31:
68:d5:6f:e1:59:b2:3f:4f:c7:3b:2b:23:8e:e5:9a:8d:f3:0c:
26:33:50:0c:09:de:a6:d9:34:5c:3d:f0:b0:d4:77:0b:cd:f6:
43:1b:dd:68:3a:ef:bd:72:5d:da:5f:27:e6:74:b3:75:aa:19:
9d:3d:f8:87:54:bd:dc:05:b8:2f:96:14:72:42:ef:12:96:ee:
0a:43:c6:86:79:15:c9:5d:f8:c2:f5:2d:b7:76:3c:ca:2a:5f:
a6:1f:af:c1:be:a7:b2:0e:1f:3a:be:04:20:b7:ac:be:15:76:
89:bb:1c:d4:a7:73:88:8c:8b:fe:cb:b6:b9:70:37:78:17:77:
d9:97:26:81:59:b6:fc:fa:0b:be:ba:2a:f2:81:9c:ea:e3:84:
32:58:0b:52:45:f2:fe:03:d3:f6:3f:ba:9c:00:b3:e9:88:2a:
10:38:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:37:33 2025 by rpki-client