Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/gj7AyvHNpuev-WmDvBCyYlDYpy8.roa
File: gj7AyvHNpuev-WmDvBCyYlDYpy8.roa (raw, json)
Hash identifier: nLcR+cbdhqklRNj2fiXETn2mQIiKqjLHuMOU2iOTMHg=
Subject key identifier: 82:3E:C0:CA:F1:CD:A6:E7:AF:F9:69:83:BC:10:B2:62:50:D8:A7:2F
Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial: 019EB6
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/gj7AyvHNpuev-WmDvBCyYlDYpy8.roa
Signing time: Wed 06 Apr 2022 13:06:55 +0000
ROA not before: Wed 06 Apr 2022 13:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64406
IP address blocks: 185.72.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106166 (0x19eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Validity
Not Before: Apr 6 13:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=823ec0caf1cda6e7aff96983bc10b26250d8a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:e2:d6:7f:17:a9:38:2c:9a:e9:5c:c5:1b:
94:7e:98:37:ef:49:2a:77:a6:1a:d9:14:c8:c6:fb:
68:ed:50:dc:19:be:62:db:f2:f3:68:5b:83:62:76:
f9:28:66:80:47:d0:f7:fc:bd:91:51:47:d7:cd:51:
4a:b9:65:71:ce:3d:21:64:eb:03:99:80:14:76:ee:
3f:6c:3d:6a:f1:49:8f:4e:95:69:cb:19:09:97:6c:
ce:78:d1:d7:8f:ee:29:bd:61:a8:76:ff:10:bb:a8:
ce:9a:3d:24:4f:23:63:0a:f6:31:0a:6d:c8:c1:0c:
4d:71:81:a8:08:5a:19:65:6b:3f:69:9f:54:82:45:
aa:1b:3e:48:56:ff:36:0f:82:ac:ad:fd:3b:06:a5:
04:a2:43:cb:32:ef:0f:2d:25:10:e2:39:f3:89:47:
fc:a0:62:ba:de:5b:83:f3:6c:87:41:41:80:3b:ba:
38:e4:1f:9c:38:5c:b0:62:db:83:73:da:07:85:91:
5c:62:19:16:41:83:94:86:bf:7d:a0:fa:93:f3:2b:
e8:bb:ea:5f:ed:8e:85:38:a1:75:68:6e:44:83:8f:
e8:8b:4d:1e:94:b0:90:aa:c0:a0:d8:50:42:8a:56:
68:f3:1c:5e:8d:ab:c1:06:63:06:a9:94:bd:b6:a2:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3E:C0:CA:F1:CD:A6:E7:AF:F9:69:83:BC:10:B2:62:50:D8:A7:2F
X509v3 Authority Key Identifier:
keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/gj7AyvHNpuev-WmDvBCyYlDYpy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.50.0/24
Signature Algorithm: sha256WithRSAEncryption
33:79:15:64:b8:ca:57:bb:c1:6d:ae:0a:dc:43:d5:c9:f0:ee:
6a:69:a1:47:18:17:df:b5:3d:20:38:9c:99:88:0e:52:da:e9:
de:44:0c:ec:9a:41:55:b0:78:c3:b6:14:a1:6a:36:f2:a1:16:
37:c4:76:4f:85:5c:e9:19:06:95:c1:e0:68:f5:1a:cd:14:75:
74:8b:16:80:5c:f4:ac:4c:1b:35:ba:d9:f8:25:13:04:ae:c9:
88:fc:cc:a4:0d:c5:e4:90:65:7c:8d:b0:5b:d0:a6:95:7a:00:
32:9d:8b:32:d1:c6:22:dc:df:1d:8e:e2:8f:eb:eb:1a:44:65:
f4:34:c4:bc:a8:57:97:d7:cd:88:b7:b1:c9:db:58:92:1e:00:
b8:57:7a:fd:37:85:7d:14:97:c3:4f:7f:1f:0f:2a:9d:02:2f:
41:eb:c5:c2:95:4c:f5:5f:aa:7e:64:eb:3c:a8:95:e6:7a:13:
30:4c:37:68:7c:2b:64:93:b7:eb:9f:bb:d7:4f:1c:97:0c:13:
12:11:5f:28:a3:9b:aa:2a:f4:07:f2:f7:b5:79:c2:05:26:fc:
89:4a:34:45:e3:60:a7:77:29:ed:70:8c:5e:92:f4:8e:15:4a:
9c:f6:6f:fd:0d:4a:58:c5:fe:d0:1a:2a:a1:c8:e3:89:57:fd:
bd:cb:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:02 2025 by rpki-client