Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/vMYyqdzCoMshqlNZcEp0ID59pRM.roa
File: vMYyqdzCoMshqlNZcEp0ID59pRM.roa (raw, json)
Hash identifier: nUb3IAe6fqVjC/Bkucyx+6pfEW0gZdAzlns6jqR4tuw=
Subject key identifier: BC:C6:32:A9:DC:C2:A0:CB:21:AA:53:59:70:4A:74:20:3E:7D:A5:13
Certificate issuer: /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial: 01856E26912440743DC692D0D9065C317D15
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/vMYyqdzCoMshqlNZcEp0ID59pRM.roa
Signing time: Sun 01 Jan 2023 16:24:59 +0000
ROA not before: Sun 01 Jan 2023 16:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206640
IP address blocks: 185.180.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:91:24:40:74:3d:c6:92:d0:d9:06:5c:31:7d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795582c73302eb0a974477603049850833bd210
Validity
Not Before: Jan 1 16:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcc632a9dcc2a0cb21aa5359704a74203e7da513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:35:2e:a9:b9:9f:0c:b1:c7:dd:96:0b:a6:
b8:83:9a:b3:3b:b1:db:b9:d7:46:70:30:8f:f7:60:
48:57:8a:57:f7:3b:ea:8f:7e:a6:ec:d5:74:76:f6:
dc:d0:0c:dd:36:06:f5:31:be:7c:31:bb:56:48:c6:
36:c2:95:83:bd:92:84:f5:1b:e2:2e:f6:95:09:34:
ee:4f:b6:78:a5:89:b3:2c:70:a9:dc:ee:d7:ff:67:
a8:00:eb:36:df:50:0b:12:8b:fb:ec:cb:e7:ef:bd:
cd:30:23:d3:11:58:da:ae:91:ab:f4:28:1e:31:9b:
7e:59:23:99:f3:2a:78:7c:e4:66:79:95:50:94:7b:
68:bc:9a:b4:f7:a0:0e:90:d9:af:28:df:5d:f8:50:
57:c9:c5:f0:d1:ee:0a:a2:ec:ad:92:6b:10:15:eb:
7f:d7:08:69:f6:6e:01:5b:2f:84:9b:48:f6:15:c5:
b6:21:df:9d:1b:49:36:31:d1:7c:67:b0:98:69:4f:
5a:8c:22:7b:89:cb:8a:c2:6d:f9:77:b8:55:3a:14:
39:e1:8b:17:6a:c1:5f:7d:63:6f:14:06:ec:e9:55:
a1:00:87:fb:88:2f:e3:6f:16:19:0c:0a:5b:0d:1e:
42:75:a4:b9:df:62:94:2d:71:a3:a5:cc:1f:9e:88:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C6:32:A9:DC:C2:A0:CB:21:AA:53:59:70:4A:74:20:3E:7D:A5:13
X509v3 Authority Key Identifier:
keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/vMYyqdzCoMshqlNZcEp0ID59pRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.112.0/22
Signature Algorithm: sha256WithRSAEncryption
52:dc:ea:68:47:b9:b1:9d:94:13:65:b1:fe:8c:72:d1:4d:0d:
62:65:15:ee:ac:42:12:2f:57:f7:35:2f:84:24:fc:ee:77:f6:
e7:94:cd:2c:9e:49:f3:84:f5:23:a8:e0:e2:d7:65:02:44:78:
79:0f:31:c4:ee:a5:05:8c:0d:b7:73:54:41:c4:96:21:6d:91:
f7:2c:22:78:51:d4:36:5c:f7:d1:1b:7c:06:78:f1:dd:8e:33:
25:2f:a1:ea:d1:4d:b3:46:b5:24:d8:28:da:f2:7d:ab:16:14:
da:53:81:70:0b:2e:15:b8:5b:56:58:6d:d8:2c:bd:39:dd:66:
a8:f5:ca:53:cb:91:ea:f4:0d:3c:59:b9:7e:f7:d9:c9:19:c0:
cb:b8:78:1d:f4:e9:27:36:08:49:d2:f7:89:78:04:3e:6f:ac:
15:93:5e:9a:e4:97:74:7e:8f:b2:4e:21:36:62:d3:8f:72:a4:
e7:44:e0:6d:5f:b7:77:1b:0f:63:ac:63:fc:eb:74:01:07:e9:
2c:6f:79:30:d0:9e:91:f8:c8:6a:8c:9c:ed:aa:ba:71:91:ee:
36:1e:00:55:c0:73:48:ba:4a:6a:25:30:17:ab:51:f2:48:3a:
aa:1c:8e:52:b5:20:01:bc:4a:ce:d2:cc:a2:7d:19:48:e2:1b:
51:79:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:14 2025 by rpki-client