Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/vB7lNX-sJ5U0N1CGoUGcENJj4FU.roa
File: vB7lNX-sJ5U0N1CGoUGcENJj4FU.roa (raw, json)
Hash identifier: KONf4nN68r5EGtNtPzWgTldaGirJ6ZMOIeykCloBb/w=
Subject key identifier: BC:1E:E5:35:7F:AC:27:95:34:37:50:86:A1:41:9C:10:D2:63:E0:55
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01856BAEB7E7F2E4AFF3FF243C0E9BCB1E95
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/vB7lNX-sJ5U0N1CGoUGcENJj4FU.roa
Signing time: Sun 01 Jan 2023 04:54:50 +0000
ROA not before: Sun 01 Jan 2023 04:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204154
IP address blocks: 185.50.75.0/24 maxlen: 24
185.50.73.0/24 maxlen: 24
185.50.74.0/24 maxlen: 24
185.50.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:b7:e7:f2:e4:af:f3:ff:24:3c:0e:9b:cb:1e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 1 04:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc1ee5357fac279534375086a1419c10d263e055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:4e:94:5a:45:55:c6:06:47:35:d7:71:f0:
84:74:15:62:9b:e8:4e:fa:e0:08:6e:ca:3a:c1:1a:
61:2f:00:e3:b8:0f:7b:b5:fc:85:2d:54:ca:d0:59:
02:20:7d:56:29:34:65:4e:59:0e:93:fe:56:f8:ae:
70:3d:e1:d3:03:19:df:8b:2b:9d:04:20:3e:83:5f:
ca:79:1d:98:19:b4:6c:c8:a5:6b:74:88:96:fa:14:
70:f5:d0:88:a3:72:e6:c0:1b:d0:39:ba:96:6a:a4:
e5:b8:78:1b:bd:86:99:f9:0e:87:35:23:38:3f:da:
cf:0c:2e:8a:84:c9:48:30:53:a4:3b:76:05:70:ec:
ac:f0:48:d8:7b:85:5e:df:2e:dc:5e:40:9a:10:d1:
ef:9c:18:11:d5:3e:07:47:da:a7:51:ac:92:14:29:
e0:0c:fb:2d:18:de:2c:7b:98:e6:41:d3:45:e7:3b:
43:ad:42:9f:48:5d:69:cf:6d:91:d2:c7:4e:d3:c6:
d6:56:f8:9d:69:25:e2:57:65:c8:15:a3:e5:b0:7a:
ac:86:9f:5d:2c:4e:b6:78:d8:f8:e0:5b:f6:ff:51:
9c:6c:fb:b0:8b:38:ad:89:4b:85:e3:a6:6c:25:ca:
42:55:67:00:f4:14:16:68:35:5a:de:e5:9f:96:72:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1E:E5:35:7F:AC:27:95:34:37:50:86:A1:41:9C:10:D2:63:E0:55
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/vB7lNX-sJ5U0N1CGoUGcENJj4FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:99:7a:63:8a:54:69:c1:a8:58:ad:5e:f4:21:c5:4f:9f:ee:
5d:b6:26:c4:58:d7:11:c7:ae:be:2f:ea:0a:da:88:53:91:a5:
05:c4:f0:a1:0b:36:84:53:e9:f9:94:dd:49:f3:fa:d4:6c:f5:
64:e3:da:e1:0b:28:b7:a5:76:ae:2f:b8:7a:c8:63:9b:8d:b6:
a1:51:39:c6:10:af:3e:26:c3:f0:74:5a:3a:d2:6b:8b:88:89:
8d:dc:b8:fb:9a:40:69:20:8b:92:71:53:af:1e:38:f1:db:e0:
d3:2c:61:2e:8d:3a:f7:db:eb:01:3d:1d:16:f6:63:ef:87:e1:
10:eb:57:f7:e4:49:56:69:8a:74:fe:de:a1:d1:f8:d5:b6:e2:
1c:0a:d9:58:8f:bb:92:a7:d1:5d:bc:72:46:49:44:03:9c:c8:
7a:71:c7:24:0a:4b:69:43:2b:63:5a:47:b0:0b:c6:00:ce:e3:
6d:71:c9:26:54:6a:ed:f0:ad:c7:df:d9:c5:c8:08:47:b2:a5:
b2:8c:01:ef:ea:eb:6c:a9:ad:e5:8c:d9:48:22:eb:32:8c:a2:
b3:b4:32:38:06:9a:f4:16:44:69:b3:e6:b9:7d:fd:67:e0:4c:
94:51:ed:43:a4:b9:c9:96:2c:f8:10:b7:be:5b:43:66:ed:53:
83:e0:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:42 2025 by rpki-client