Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/ez4ZgvqL1EyMLeGegl513AlvaCc.roa
File: ez4ZgvqL1EyMLeGegl513AlvaCc.roa (raw, json)
Hash identifier: mVY+oB53dEv0Ub8KwqmAqajDiedRQ2k15KV9ME37D3k=
Subject key identifier: 7B:3E:19:82:FA:8B:D4:4C:8C:2D:E1:9E:82:5E:75:DC:09:6F:68:27
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 0183655452854545EE4159C6E7DF92585587
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/ez4ZgvqL1EyMLeGegl513AlvaCc.roa
Signing time: Thu 22 Sep 2022 13:12:48 +0000
ROA not before: Thu 22 Sep 2022 13:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202179
IP address blocks: 185.50.180.0/22 maxlen: 22
185.50.181.0/24 maxlen: 24
185.50.182.0/24 maxlen: 24
185.50.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:54:52:85:45:45:ee:41:59:c6:e7:df:92:58:55:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Sep 22 13:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b3e1982fa8bd44c8c2de19e825e75dc096f6827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:75:cf:29:6b:53:15:c8:9a:da:03:d8:40:
e3:6c:f0:a6:18:c3:5b:77:2e:90:89:4c:dd:4d:95:
84:27:85:4c:90:8d:87:e7:85:c2:c7:70:e0:6e:41:
5a:da:f6:d5:74:a3:82:58:5f:0c:15:2a:d4:ae:81:
ef:fd:08:d5:9e:32:b3:1c:e8:92:8d:bc:5c:cf:d9:
50:1d:01:4e:7c:fd:0f:44:05:43:52:9f:aa:ea:6e:
19:4f:fa:21:36:d9:fa:32:db:0a:23:30:44:49:bd:
88:55:da:d3:c7:64:47:bc:a9:73:28:b5:d2:39:53:
b2:43:49:f2:64:b7:73:5e:86:1a:fe:06:11:be:4a:
34:fd:7c:43:14:bc:c8:e3:f0:ff:44:d6:c6:d9:80:
8f:87:d9:3f:ba:c1:d5:61:b6:27:ac:44:6e:fa:fb:
56:47:2d:05:91:f8:88:12:9c:d8:12:91:71:a1:23:
81:63:1d:98:eb:87:de:c1:9b:00:93:a9:bf:53:31:
0e:90:49:90:d4:b8:e8:bc:13:48:ff:3a:d7:2e:3b:
31:ee:8b:2e:d2:40:10:5c:92:72:35:68:63:ad:77:
aa:71:86:c0:bd:9b:20:00:58:41:a4:d2:68:65:04:
b5:95:57:5c:ba:3c:fd:90:24:9d:ad:7a:f2:71:20:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3E:19:82:FA:8B:D4:4C:8C:2D:E1:9E:82:5E:75:DC:09:6F:68:27
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/ez4ZgvqL1EyMLeGegl513AlvaCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.180.0/22
Signature Algorithm: sha256WithRSAEncryption
16:25:23:9c:1f:2d:45:72:b1:77:7b:42:21:a9:86:3e:bc:be:
a8:3d:48:a1:65:4e:40:fe:cf:3d:48:5c:e8:f1:db:a2:85:80:
a8:a6:48:f2:4a:59:54:ef:da:2c:e8:b9:4b:9f:33:0d:5e:39:
7d:63:b3:7f:73:a4:ad:24:45:4c:c7:fb:0d:af:74:57:af:7b:
c0:68:46:e5:ab:36:5c:91:78:7f:db:42:99:3d:89:ac:a2:50:
d3:d2:6d:db:e6:f1:21:fd:bf:5f:db:ec:10:13:ad:b4:28:ec:
19:24:17:6e:75:e7:54:fc:ce:52:ef:c7:d1:3d:38:89:34:b2:
28:0b:46:63:e6:14:3c:c4:85:a3:8c:f7:3c:ab:05:95:e6:7e:
0a:bb:13:46:62:ca:73:d8:0c:a0:19:8d:69:de:b1:15:3e:1b:
d5:29:30:dc:f4:bc:b9:16:ff:c3:cc:15:af:c5:04:42:b2:13:
65:36:01:89:c7:0e:26:91:49:cc:96:49:96:f7:49:68:74:ca:
a2:b8:a3:dc:99:85:77:4f:59:d6:ab:71:1b:2e:87:2e:42:12:
57:eb:94:2c:7b:89:d4:db:ce:2f:9f:e2:71:5e:ec:79:3f:8e:
0f:54:cf:24:aa:88:1c:1b:f2:33:b7:a1:41:ea:a1:b3:5a:10:
4c:0d:06:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:30 2025 by rpki-client