Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/a90IxDoUo59z1P0-09uKLkMZZz4.roa
File: a90IxDoUo59z1P0-09uKLkMZZz4.roa (raw, json)
Hash identifier: 7ozgww/4tcr3a5lJnCdrHyH3iuKaKfMWhXQC2ADbtbA=
Subject key identifier: 6B:DD:08:C4:3A:14:A3:9F:73:D4:FD:3E:D3:DB:8A:2E:43:19:67:3E
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 055CF830
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/a90IxDoUo59z1P0-09uKLkMZZz4.roa
Signing time: Sat 01 Jan 2022 07:55:32 +0000
ROA not before: Sat 01 Jan 2022 07:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197071
IP address blocks: 185.107.192.0/24 maxlen: 24
185.107.194.0/24 maxlen: 24
193.56.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89978928 (0x55cf830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Jan 1 07:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bdd08c43a14a39f73d4fd3ed3db8a2e4319673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:5f:d1:9b:78:24:bb:c8:11:d0:df:09:86:
84:86:c4:e1:2c:7e:98:2b:ad:f9:31:b4:a6:ca:03:
93:97:1a:9e:8d:e3:42:59:9c:ec:0c:1e:e4:0b:d0:
40:e1:29:55:21:bc:70:ad:94:ed:eb:a8:b5:bb:9a:
0a:52:cb:c7:ef:c4:0a:8f:a6:f1:e3:8d:e6:39:fe:
3d:48:00:2d:53:2e:d9:e7:aa:51:b5:cd:ef:aa:b6:
a5:4e:33:79:6c:12:37:ee:59:d0:e6:bb:bc:7e:de:
25:4f:f9:ca:3b:03:e4:57:39:d8:41:ac:c6:7c:b7:
0d:70:96:a6:7b:fa:6c:71:5a:b9:d3:d6:78:ca:1a:
29:31:f7:00:e8:44:07:2d:e6:90:15:f8:d4:38:cd:
de:70:0a:cf:03:9c:55:43:24:61:ae:b9:fd:91:e2:
88:12:08:00:98:54:df:5a:25:ef:6a:1a:ab:ae:3e:
c3:98:1e:b2:b0:33:66:0b:40:da:8b:b5:a5:41:24:
2d:19:20:e9:52:b5:bc:a7:73:8f:92:a2:85:d5:a2:
8f:37:f5:bf:ae:38:b0:55:21:88:96:27:78:92:7e:
c2:31:6c:ce:22:c8:de:e1:08:73:dd:0c:80:98:bb:
f1:1a:a4:57:fe:af:93:a0:8f:99:0b:7e:95:56:1d:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DD:08:C4:3A:14:A3:9F:73:D4:FD:3E:D3:DB:8A:2E:43:19:67:3E
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/a90IxDoUo59z1P0-09uKLkMZZz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.192.0/24
185.107.194.0/24
193.56.126.0/24
Signature Algorithm: sha256WithRSAEncryption
84:94:ea:16:09:47:80:72:7f:70:df:11:1a:d8:cd:7b:72:bc:
72:10:64:1d:e3:87:93:ad:88:0a:08:f5:f9:2b:04:c0:95:75:
f2:5f:e5:8c:36:1f:6b:10:05:90:0b:2d:99:b7:6c:3a:7a:26:
9f:a8:df:cd:37:3f:7c:54:40:46:51:5b:0b:c8:f6:52:9f:d0:
75:21:5d:10:c6:e8:41:37:60:7d:79:40:4d:b0:14:c5:c2:47:
8e:52:9f:a5:62:ed:f9:17:96:18:1c:be:3f:ef:a4:84:44:6a:
74:3f:35:16:87:71:fd:52:3e:08:fb:9f:d1:c5:a5:ac:92:c0:
48:4f:8d:f7:26:44:4b:4d:d6:42:0b:92:2c:c5:62:f0:3c:ee:
b3:e7:dd:b6:40:ad:1f:11:93:3f:ff:8c:f8:ff:64:cd:c0:db:
07:27:85:a4:5d:b1:49:15:0d:04:4a:2c:5f:16:c6:fd:9f:7c:
52:fd:e2:17:42:34:fe:e9:ea:f9:7c:45:7d:00:f3:26:12:06:
5f:d3:f0:58:45:60:3b:93:33:fa:b9:98:17:e3:b9:1b:82:6a:
68:1a:8e:d0:a1:2c:a6:d7:4f:8d:a0:30:ec:51:b6:2a:69:28:
c4:4b:c9:59:e8:8d:f7:0f:14:5a:be:80:65:1f:5a:ae:fd:6f:
21:25:58:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:56 2025 by rpki-client