Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/DayD8Wb2LTngDCtswOUmP0BHQ8Q.roa
File: DayD8Wb2LTngDCtswOUmP0BHQ8Q.roa (raw, json)
Hash identifier: udMWOqpJONAuLaI6oiMUuZk9c5w9h2XSVBpAAtYkLMc=
Subject key identifier: 0D:AC:83:F1:66:F6:2D:39:E0:0C:2B:6C:C0:E5:26:3F:40:47:43:C4
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 08C04E24
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/DayD8Wb2LTngDCtswOUmP0BHQ8Q.roa
Signing time: Sat 01 Jan 2022 09:00:24 +0000
ROA not before: Sat 01 Jan 2022 09:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197922
IP address blocks: 185.50.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146820644 (0x8c04e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 1 09:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dac83f166f62d39e00c2b6cc0e5263f404743c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:5d:47:85:33:79:79:a1:8f:78:a5:bb:e4:
d5:c3:4a:88:c0:44:8d:f7:54:eb:52:8e:76:93:68:
89:1a:39:43:18:e4:ca:59:31:3c:03:30:41:1c:68:
6b:a6:cf:a0:99:38:ea:d3:df:1b:5d:fa:d9:fe:aa:
c1:f0:7f:f9:3a:49:f8:98:0a:ab:3f:0f:53:19:78:
51:78:b3:f1:53:11:00:dd:f1:27:6a:ae:c4:f0:47:
aa:3b:15:df:52:7e:f2:78:a5:29:f1:46:10:80:54:
df:51:f6:37:fc:36:2c:f6:b9:64:af:56:3f:44:63:
4a:88:1e:13:c1:ac:d2:30:7d:64:8a:19:ea:79:4b:
9b:b9:f3:cf:c9:8d:7b:02:f6:5a:dc:69:54:81:c3:
91:a7:5a:da:b4:7b:7f:79:f2:69:c1:2a:b2:30:b9:
1c:71:cf:88:6c:b9:ae:64:56:d7:16:3c:54:20:db:
0f:db:6e:20:c4:b5:1f:b8:0b:a9:d8:5b:b5:23:f0:
b0:32:80:18:bd:bd:f8:2e:b5:59:15:b1:89:64:10:
f7:5a:74:f7:95:7b:da:2a:0a:8b:ba:fd:10:d0:30:
ba:df:a2:3d:d5:4b:d1:34:c4:3e:05:60:3f:7e:be:
dd:b6:2e:07:23:1f:c7:8a:4a:f6:e4:cc:d1:7e:a4:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:83:F1:66:F6:2D:39:E0:0C:2B:6C:C0:E5:26:3F:40:47:43:C4
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/DayD8Wb2LTngDCtswOUmP0BHQ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.72.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b2:ca:7f:ad:bb:de:6d:da:b2:74:fa:95:b7:ba:5a:80:52:
b8:2f:f1:6d:22:75:5f:8a:9c:90:91:71:ed:b8:87:0a:4a:e3:
91:e2:09:04:eb:be:b4:5a:50:23:e5:62:f8:14:a0:f6:6b:0a:
7f:df:6b:24:99:de:aa:fe:7c:3d:91:d5:e0:ff:cb:1a:d8:9b:
8f:6e:2d:36:7b:ce:a9:0a:33:73:6e:81:31:8f:a6:f7:ac:16:
da:a1:5b:7e:8d:c9:9a:8c:8d:de:38:8d:1b:19:38:6c:cd:e1:
d9:8f:7b:ca:60:79:08:7c:64:a5:32:5d:b0:04:ab:95:d5:d1:
a7:20:fd:9d:e4:84:42:7a:d8:6c:6b:8b:99:3d:ad:ff:51:fe:
3f:c2:96:b2:f8:99:b2:b6:65:15:eb:bd:b8:35:5b:55:39:dd:
7c:1a:55:84:f5:e6:5a:94:7f:40:02:21:29:26:11:af:22:64:
6b:ab:46:63:ca:66:2c:c9:bd:2e:63:61:26:15:ed:66:53:86:
51:78:b3:19:58:cd:bd:6c:9d:53:03:29:0a:e5:b5:5e:9a:cb:
10:d6:a5:93:99:e4:8b:74:b2:10:5d:a7:c2:a0:43:2a:c5:c1:
d6:3e:a1:fd:a2:17:6b:a1:7b:c9:4a:34:e0:d2:bd:9c:7c:81:
8a:e1:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:44 2025 by rpki-client