Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/13mbOzeqFvBdI67l0y_3H-fFFeU.roa
File: 13mbOzeqFvBdI67l0y_3H-fFFeU.roa (raw, json)
Hash identifier: HpG8wght8HDaDs/vZ+FcveNUpo/sdquS75jGkWyEzBo=
Subject key identifier: D7:79:9B:3B:37:AA:16:F0:5D:23:AE:E5:D3:2F:F7:1F:E7:C5:15:E5
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 01925962
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/13mbOzeqFvBdI67l0y_3H-fFFeU.roa
Signing time: Tue 29 Mar 2022 06:52:56 +0000
ROA not before: Tue 29 Mar 2022 06:52:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 185.69.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26368354 (0x1925962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Mar 29 06:52:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7799b3b37aa16f05d23aee5d32ff71fe7c515e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:76:34:b1:17:60:98:05:96:bc:14:12:c4:
75:8f:08:20:43:86:c0:d0:4d:cc:01:ea:71:87:0f:
17:4b:dd:7e:d2:95:e3:21:24:ed:72:0d:4d:a1:81:
06:75:86:77:0a:c8:e1:a7:db:c0:70:0c:c9:8a:d5:
42:bd:f6:61:1c:99:c7:1c:3f:5b:dc:21:52:31:dc:
b0:af:cd:9e:6a:6a:14:15:c6:30:a2:11:cb:e1:1f:
00:2c:be:4c:3f:33:73:22:5b:ce:4d:03:83:0e:3b:
30:19:7a:63:d0:47:7a:06:f1:63:5e:04:01:4b:9b:
2a:09:c1:26:79:ff:e8:be:ff:f8:2c:ef:e5:ae:b9:
13:01:37:0d:ea:db:1f:68:01:fc:2f:84:b9:8a:5e:
7c:72:5c:db:5e:bb:b8:a0:6a:ae:26:04:8f:5b:50:
7c:c1:e4:cd:05:c7:c2:4a:ef:e3:1f:ae:2f:1a:aa:
19:5a:8b:fe:7e:88:3e:d7:71:48:a4:ce:3d:5c:7c:
2c:d4:da:6a:d7:fb:45:11:16:23:03:d4:05:b5:a8:
7c:b1:97:5c:28:e2:2b:a6:ad:36:f6:71:b4:a3:40:
59:a9:36:a2:69:dd:7e:39:82:e4:ab:8b:b1:57:38:
61:24:c6:5d:c5:aa:0e:67:33:30:7f:a5:a7:e1:26:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:79:9B:3B:37:AA:16:F0:5D:23:AE:E5:D3:2F:F7:1F:E7:C5:15:E5
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/13mbOzeqFvBdI67l0y_3H-fFFeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:4b:39:ee:37:7a:59:cc:24:a6:bf:19:f0:33:c9:7c:42:99:
cc:48:51:99:f6:58:ca:d9:b7:37:1e:c9:ad:bc:eb:10:e3:19:
92:f2:61:59:60:6f:ea:81:78:35:44:b0:e3:33:de:00:8f:56:
14:41:f2:ea:f5:29:ae:81:91:0b:cb:08:17:ff:81:0b:4e:6b:
e0:ba:75:36:44:83:33:a1:3e:49:fb:82:c9:7e:42:cf:65:2b:
96:a0:3d:b5:9d:45:5e:2c:f1:41:61:a8:db:4e:a9:77:68:1b:
38:29:a1:da:28:ac:0a:b2:08:82:47:fb:f3:e3:12:51:78:e9:
76:e1:12:6a:ee:7d:45:9b:11:fb:61:b7:7d:a6:4c:dc:80:06:
43:14:53:c4:b5:a1:34:b5:d0:f2:38:72:0c:9a:bd:3e:86:95:
1f:93:25:95:28:17:da:e3:5d:7e:e9:53:e3:d4:66:e4:17:1a:
37:e4:50:6a:7a:38:bc:08:f8:cc:3d:b5:f7:e2:d7:05:e5:ab:
0e:5b:f0:96:5b:9f:06:f2:01:8b:e5:fb:fd:55:6f:77:91:e5:
10:d7:4e:77:57:0e:c3:eb:78:48:74:89:d2:bf:01:f5:0a:b1:
c5:0b:cb:3f:72:a4:b4:fc:17:99:6f:25:c2:8b:69:d8:a8:2d:
2b:b2:82:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:02 2025 by rpki-client