Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/IT50EjdEG_T6pvTUIyKtTS0L9Hc.roa
File: IT50EjdEG_T6pvTUIyKtTS0L9Hc.roa (raw, json)
Hash identifier: RareroMQsoIU10wRdGoIQn84Ygn2qIwo0x8VnJqjhe4=
Subject key identifier: 21:3E:74:12:37:44:1B:F4:FA:A6:F4:D4:23:22:AD:4D:2D:0B:F4:77
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 018297D172425DA1E6CD30F872D1E33CD1F3
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/IT50EjdEG_T6pvTUIyKtTS0L9Hc.roa
Signing time: Sat 13 Aug 2022 15:27:41 +0000
ROA not before: Sat 13 Aug 2022 15:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212285
IP address blocks: 185.107.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:97:d1:72:42:5d:a1:e6:cd:30:f8:72:d1:e3:3c:d1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Aug 13 15:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=213e741237441bf4faa6f4d42322ad4d2d0bf477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:35:32:d6:b5:8e:2c:3b:cf:3f:1f:ae:6d:bd:
41:fa:16:54:6a:e3:40:59:b6:e0:fb:f2:40:37:36:
7e:29:52:e5:d4:3d:9b:3b:c9:c2:91:23:80:04:91:
d5:26:89:88:a2:28:1b:bc:19:78:3a:67:3c:4f:65:
ff:f9:7c:b5:b4:c3:43:74:4d:0d:0f:cc:05:76:cd:
8b:6d:c4:64:7e:5e:f8:d1:86:01:e4:e9:52:fe:00:
cd:ac:3b:c7:21:24:64:82:7c:f4:37:62:0b:d5:76:
93:47:7d:33:c8:4f:a2:91:6d:9b:00:30:8c:c8:05:
78:d5:21:46:c3:d5:3a:f1:28:20:35:fe:15:fc:73:
41:21:d9:08:70:41:1a:8f:ad:48:d2:e4:44:08:ef:
13:09:3c:15:5d:3b:93:e4:0a:51:40:a9:ec:9e:f6:
eb:26:02:45:27:f9:2c:b9:ee:c0:5d:e1:e0:ef:c0:
16:98:67:7c:e6:f5:ba:b4:18:ed:4e:b8:44:19:7f:
e6:c9:19:e8:0d:10:97:58:df:96:d5:44:23:a2:80:
8b:e5:85:6a:09:02:18:05:3f:a6:29:0b:8f:79:82:
ab:01:a1:aa:33:a3:dd:56:6c:8f:c4:04:33:2c:56:
ea:4f:e0:e6:e2:0e:14:e0:18:4a:35:96:0c:00:ff:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:74:12:37:44:1B:F4:FA:A6:F4:D4:23:22:AD:4D:2D:0B:F4:77
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/IT50EjdEG_T6pvTUIyKtTS0L9Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.134.0/24
Signature Algorithm: sha256WithRSAEncryption
55:39:4b:b1:2a:4d:30:ba:7c:e2:4f:70:48:9e:df:f1:fd:29:
37:0a:18:1f:ce:82:4d:26:1c:bc:5f:d3:61:de:7e:25:f9:00:
a3:23:a6:85:42:90:85:c5:ab:86:60:38:cb:75:96:7f:94:27:
a2:e7:fe:25:13:02:92:db:1d:e9:89:bb:4a:dc:77:01:d1:1f:
bb:2f:40:3c:8a:df:96:7b:43:69:f6:4c:be:79:9e:74:bf:7d:
83:ac:e9:5e:b6:2c:87:67:6c:45:fa:d6:c3:74:80:06:6f:cc:
ed:dd:2c:23:a2:09:7d:8e:21:3a:4a:e2:b2:03:44:fa:9c:45:
4a:52:a5:71:6f:0c:4a:df:b7:d1:9a:21:d3:b1:01:21:75:a7:
04:66:8e:2e:dc:0d:7a:be:0c:8a:9f:28:ff:b9:5e:42:33:1d:
cb:47:5b:28:58:03:ff:d2:2b:16:95:1b:68:3d:c4:4c:dc:10:
67:74:32:31:ae:11:53:b2:04:4f:86:88:fc:3a:15:50:b1:f5:
17:15:be:0e:c5:a3:99:35:6e:8e:7e:cf:83:28:34:6f:8e:a9:
9e:8f:af:cf:71:ad:b8:0a:93:9f:17:dc:74:92:1c:50:58:c6:
3f:a4:ba:20:34:6f:c5:ed:9c:3f:3b:9b:95:d4:f8:df:c1:fa:
8d:d2:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:08 2025 by rpki-client