Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/dy11ZVCDonlXm568hRMnlQmNSo0.roa
File: dy11ZVCDonlXm568hRMnlQmNSo0.roa (raw, json)
Hash identifier: q0ZC/mQ71Bo4eqinXeWyHZFF5oRJHLjIrkP//WlAI6c=
Subject key identifier: 77:2D:75:65:50:83:A2:79:57:9B:9E:BC:85:13:27:95:09:8D:4A:8D
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0185635EE59B953F96320350394F5F47DAA9
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/dy11ZVCDonlXm568hRMnlQmNSo0.roa
Signing time: Fri 30 Dec 2022 14:10:41 +0000
ROA not before: Fri 30 Dec 2022 14:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 185.18.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:63:5e:e5:9b:95:3f:96:32:03:50:39:4f:5f:47:da:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Dec 30 14:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=772d75655083a279579b9ebc85132795098d4a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:8b:1d:bf:8b:31:6e:56:1e:e7:ea:a6:d8:
19:c7:d2:66:1c:72:52:9c:8b:d0:a0:45:b5:30:26:
29:71:93:31:34:12:3f:9e:6c:51:1d:9f:80:3a:ae:
ad:1a:48:c3:be:a0:75:14:9b:20:f1:91:c9:52:60:
88:42:26:db:4b:73:2d:de:86:f7:47:89:99:e0:39:
d4:95:f7:52:18:48:d1:5b:c8:7e:53:da:bc:2d:87:
c0:06:b0:1d:c8:72:5e:e1:8e:90:ec:5c:44:7a:bc:
be:8a:34:05:73:19:3c:5c:3b:ac:43:38:df:d5:18:
88:7e:f9:83:4b:3b:b3:c8:7c:9e:ab:ca:3c:19:b5:
d2:6e:31:80:06:b8:6a:6e:68:8f:d1:ca:40:34:36:
a1:da:5a:31:e1:27:bb:0b:14:34:21:8d:ef:b4:29:
7c:39:4d:56:bd:d3:e3:35:40:e0:0c:dc:f1:43:0d:
73:45:00:a4:5e:ff:df:26:d3:a6:42:ed:24:ad:ce:
d0:5f:48:da:da:c9:74:98:85:47:61:8a:4b:d6:98:
c8:a4:b4:84:ee:9e:06:3c:f5:e7:2a:99:42:54:03:
3d:ab:6e:db:ed:33:65:d2:bd:70:16:c1:cb:2f:80:
02:54:b6:be:18:eb:9a:69:ea:4c:8c:a3:7a:4c:24:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2D:75:65:50:83:A2:79:57:9B:9E:BC:85:13:27:95:09:8D:4A:8D
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/dy11ZVCDonlXm568hRMnlQmNSo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.250.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ce:65:d0:ca:2e:cb:48:de:6f:20:90:56:11:09:72:a6:03:
e3:88:25:f1:90:23:61:97:e2:d0:30:5c:e4:c2:41:e7:bd:0f:
ce:bf:f6:02:92:2d:ac:8d:38:e2:9b:11:37:fc:13:69:dc:9f:
7a:2b:f2:93:11:9e:4d:bc:2d:89:28:73:a5:b1:5a:08:00:3d:
ff:01:62:3b:5a:64:4f:d1:2c:d0:8c:0d:16:53:c3:0e:74:b1:
53:6b:0f:32:25:47:8d:b7:b0:f8:e2:bd:e3:94:53:9b:0e:1d:
df:ee:0e:dc:0c:09:d3:75:0c:d0:b3:98:7a:a2:99:1a:5d:88:
b5:ab:b1:7b:09:de:e4:e4:e6:f1:05:96:83:d0:59:49:ee:93:
d6:9c:da:e6:d4:55:fa:e4:2a:f7:3a:21:0c:ea:4c:d7:25:c1:
40:38:98:17:7b:cd:7a:d7:b0:a8:1a:86:90:97:e3:a2:99:f9:
b0:97:a6:e9:6e:00:44:5a:04:11:18:89:f8:de:63:da:ea:71:
8e:ed:a1:15:9b:74:5c:09:96:6d:ba:10:9e:ed:bf:fd:b3:b1:
e1:3a:c5:9c:62:42:9c:e3:86:e5:bf:a9:f0:89:ab:2d:ee:7e:
0a:52:a3:26:de:27:27:36:44:c3:20:25:04:7f:3b:54:f7:01:
67:77:52:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:51 2025 by rpki-client