Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/VULEhvHhby2J0ZPikTq3Tw2c_bc.roa
File: VULEhvHhby2J0ZPikTq3Tw2c_bc.roa (raw, json)
Hash identifier: lCjF5lW3bCnXi1LljM7WvnKF0E78107LTfux2NhIePA=
Subject key identifier: 55:42:C4:86:F1:E1:6F:2D:89:D1:93:E2:91:3A:B7:4F:0D:9C:FD:B7
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0187028CFF9492254A5F6DEAB5F0EFD6F3D4
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/VULEhvHhby2J0ZPikTq3Tw2c_bc.roa
Signing time: Tue 21 Mar 2023 05:03:27 +0000
ROA not before: Tue 21 Mar 2023 05:03:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:02:8c:ff:94:92:25:4a:5f:6d:ea:b5:f0:ef:d6:f3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Mar 21 05:03:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5542c486f1e16f2d89d193e2913ab74f0d9cfdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:98:1e:0e:08:0f:8f:27:8d:10:5e:fd:81:
5b:35:56:8c:2b:da:ae:52:49:af:92:0b:1e:9f:43:
30:31:a2:5e:c8:9b:bd:46:24:dd:a9:48:75:51:c7:
ee:c9:0c:46:f2:3f:50:f0:de:05:79:f5:b9:19:d4:
b0:3f:69:83:a5:c4:3b:ca:55:ee:ab:08:19:2c:99:
8c:20:db:d6:66:51:11:9c:89:e1:27:66:0b:97:1f:
d2:95:e0:a2:e5:80:22:42:d4:1b:53:46:05:0b:13:
5d:8f:1f:e2:63:4d:99:7e:2c:f6:d2:d6:75:a7:9b:
b9:ca:8a:ae:82:e2:7f:eb:5d:5e:41:7f:b4:63:d3:
29:1d:d2:fd:8c:28:2d:43:f5:1a:24:89:2d:f6:1f:
9b:72:da:3a:e0:49:7b:e0:80:35:19:7a:1e:0a:6c:
ab:0a:44:6f:12:47:2b:47:1a:ed:f6:d3:56:9b:80:
f5:2c:87:27:79:ae:24:14:5b:e3:e9:6f:0a:49:3b:
1d:17:8c:a3:cf:32:70:c1:71:67:4a:58:be:4f:94:
72:62:70:01:3a:12:d6:f1:04:6c:73:48:cb:53:e2:
e4:f8:59:0f:c9:8f:35:73:36:1a:ea:c1:67:7b:d8:
e2:8a:c5:50:a5:22:72:a5:b1:5a:04:0e:e3:90:d3:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:C4:86:F1:E1:6F:2D:89:D1:93:E2:91:3A:B7:4F:0D:9C:FD:B7
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/VULEhvHhby2J0ZPikTq3Tw2c_bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
98:08:99:b0:17:e9:12:ce:24:5d:63:fd:e1:f4:3a:08:e5:08:
e3:ca:11:40:5e:c2:a7:91:d7:d8:08:a3:5d:84:64:98:4d:d5:
b3:8b:11:1d:61:95:d1:8e:a8:98:03:ab:71:e4:40:33:52:c4:
ef:7c:57:55:ea:17:aa:1e:3d:66:a0:44:5f:41:64:6f:22:d9:
1b:79:fb:62:c9:12:7a:b0:99:5c:8a:14:33:52:5d:4e:f4:d9:
ab:c5:89:3f:5c:5e:e6:7c:82:ed:6e:1e:75:46:6d:76:6e:fa:
3b:67:72:e1:93:75:05:22:43:34:ec:6a:81:bb:fe:e3:61:1b:
88:d1:d7:d6:e8:7b:32:58:13:1b:9f:9d:88:40:aa:d3:45:11:
e5:9f:6f:ea:c1:63:92:11:f8:ae:d8:93:e4:5c:42:5a:f4:28:
6e:17:f7:e3:f8:92:86:9c:65:36:a3:0e:2a:04:13:91:d0:db:
66:7b:cc:db:66:f3:be:b1:72:df:76:b9:de:44:13:aa:db:45:
9d:93:2e:ca:32:11:07:28:e2:ad:b0:cb:a5:6d:b2:a5:7b:fd:
f2:fb:ae:93:cd:b5:7f:e8:75:1c:0c:37:79:2c:da:7d:39:3a:
8f:6d:00:51:f8:c5:20:c3:b7:32:77:84:d4:e4:82:8d:c5:9b:
71:d5:60:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:16 2025 by rpki-client