Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/g-BJVAxriESCqZhoJNnmURqAshE.roa
File: g-BJVAxriESCqZhoJNnmURqAshE.roa (raw, json)
Hash identifier: PkXGg2fCZYKo7CpH9os9qGSF7p+TB5zbiLkAajB6Jjs=
Subject key identifier: 83:E0:49:54:0C:6B:88:44:82:A9:98:68:24:D9:E6:51:1A:80:B2:11
Certificate issuer: /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial: 0B67096B
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/g-BJVAxriESCqZhoJNnmURqAshE.roa
Signing time: Sat 01 Jan 2022 04:53:41 +0000
ROA not before: Sat 01 Jan 2022 04:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203586
IP address blocks: 185.219.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191301995 (0xb67096b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Validity
Not Before: Jan 1 04:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83e049540c6b884482a9986824d9e6511a80b211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:09:30:5e:a6:c5:77:54:88:ad:6a:65:8e:
b4:69:fa:8d:2a:b2:12:36:6f:78:30:90:61:2d:34:
b4:e6:35:a6:7c:ba:f9:dd:cd:1c:c2:a8:b4:3a:fe:
71:34:2c:be:01:c1:86:e8:00:83:6d:f2:8c:92:b7:
cd:e3:3b:21:7e:2d:41:60:72:8b:49:fd:e4:6a:09:
a5:dc:c0:48:88:f7:f4:7f:d0:96:84:4a:05:9b:50:
3a:db:17:b2:12:97:00:ca:24:f2:3f:64:3e:37:4f:
0c:e0:f4:ba:c0:51:3a:6c:01:cf:93:81:7a:0a:15:
63:bf:38:58:cb:da:34:df:f1:21:a3:e8:12:51:75:
4d:65:b6:95:85:bd:98:18:cc:96:c7:c1:19:9c:d2:
80:a0:18:89:d7:b9:10:7b:57:6f:56:7c:8a:08:15:
eb:03:04:53:45:da:43:d4:c5:9c:70:30:00:79:9c:
c9:8e:a7:e4:48:00:6f:82:42:77:47:c4:92:19:8b:
f5:59:ef:1b:6b:98:fb:a2:83:3b:ba:89:83:01:76:
c5:66:f1:ee:c7:46:ad:99:e1:55:fa:33:8f:1d:74:
e7:5a:6a:e4:7d:63:29:c1:99:dd:f7:54:fc:08:8c:
c9:5b:20:c3:4d:bf:64:7b:16:1b:21:f6:d6:e3:d1:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E0:49:54:0C:6B:88:44:82:A9:98:68:24:D9:E6:51:1A:80:B2:11
X509v3 Authority Key Identifier:
keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/g-BJVAxriESCqZhoJNnmURqAshE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:84:b7:f4:14:0f:91:b4:8b:96:20:91:7b:44:de:48:6c:4c:
a4:03:44:d3:3e:e8:df:ac:5e:96:88:6c:dc:9d:22:80:2e:0e:
4e:9f:93:c5:62:a7:40:ff:2b:f4:c9:4c:2c:62:f8:3d:9b:33:
43:fc:70:7a:fa:c0:cf:32:22:0c:b1:b9:97:e2:37:35:28:b5:
af:f7:8c:da:57:00:47:e2:78:35:1d:ab:f7:39:cc:14:8e:d4:
9d:08:3d:05:42:31:65:de:38:74:4f:0c:38:0f:c0:6e:32:1a:
89:67:d8:c5:cd:eb:cf:f3:05:05:2c:bf:e8:ad:d2:54:b6:41:
47:dc:80:10:4b:c3:2d:58:a8:96:6c:38:1b:72:a6:c8:e5:91:
93:03:f5:8a:bb:73:f5:77:26:67:53:3a:67:b5:92:dc:10:20:
2f:b9:98:1a:10:6b:97:9d:60:3d:eb:86:54:ee:bc:7a:38:10:
9d:46:c0:32:cf:d1:0e:55:7e:ec:6f:69:31:ca:65:a7:8f:fc:
f1:c7:67:c3:e0:1d:ef:f4:f7:1c:fc:ac:84:e9:c3:f4:0e:5d:
c4:7e:38:5d:ac:af:ef:69:c9:9f:bb:b9:99:40:7c:04:ce:52:
ae:65:3e:14:7c:75:2f:5e:47:cd:34:2a:8c:3c:79:f2:ce:4d:
20:62:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:04:25 2025 by rpki-client