Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/bvG12HNZ4dM0sxd6s4vn6dpdcjQ.roa
File: bvG12HNZ4dM0sxd6s4vn6dpdcjQ.roa (raw, json)
Hash identifier: NLZg0J7B/O3h9pYwQN4dS7bJprGeCFJpY42fgtqzEQs=
Subject key identifier: 6E:F1:B5:D8:73:59:E1:D3:34:B3:17:7A:B3:8B:E7:E9:DA:5D:72:34
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: B92F31
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/bvG12HNZ4dM0sxd6s4vn6dpdcjQ.roa
Signing time: Sat 01 Jan 2022 00:55:33 +0000
ROA not before: Sat 01 Jan 2022 00:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41068
IP address blocks: 185.222.48.0/24 maxlen: 24
185.222.51.0/24 maxlen: 24
185.222.49.0/24 maxlen: 24
185.222.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12136241 (0xb92f31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jan 1 00:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ef1b5d87359e1d334b3177ab38be7e9da5d7234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:c1:6f:46:6a:fc:7f:a8:7e:e3:eb:79:44:
0b:69:6e:38:71:22:70:be:b3:bf:03:67:2a:a4:7a:
46:f2:1e:e0:c5:e9:8c:c2:e6:f6:67:4d:de:55:9d:
d4:75:90:cc:14:e0:c5:59:ef:b6:a5:eb:01:81:72:
c7:3b:43:6d:94:75:f1:7a:7f:2f:4d:41:24:77:cd:
ad:63:ea:5d:d5:9d:a0:da:c5:38:28:18:32:37:0b:
10:c1:df:39:7f:ef:91:3f:6f:d4:42:21:39:4b:12:
0c:4d:93:ab:2c:fb:30:94:1a:24:45:7d:bb:c0:8d:
b8:ad:12:c9:f0:38:f2:f2:3f:54:fc:19:04:27:20:
14:84:f0:17:41:2c:c6:5a:72:94:d4:26:91:1a:ce:
01:8c:37:d1:11:3f:d3:8f:89:30:66:69:83:84:e9:
c4:af:76:b8:c3:e7:fe:42:4f:84:3d:11:ac:1a:7c:
12:c1:82:7b:db:d1:ed:af:79:87:be:17:d6:29:03:
61:79:bf:c4:f6:f5:31:38:35:94:af:88:5c:78:18:
53:88:c1:35:93:7d:50:96:f5:8e:04:21:2e:07:09:
3b:90:d3:67:c2:52:c7:db:ef:04:b8:36:0f:64:63:
c9:05:32:15:06:01:8e:2a:a2:43:f0:b3:5d:29:d8:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F1:B5:D8:73:59:E1:D3:34:B3:17:7A:B3:8B:E7:E9:DA:5D:72:34
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/bvG12HNZ4dM0sxd6s4vn6dpdcjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:c9:b6:13:6a:6c:d3:cb:84:46:85:dd:18:2d:a1:24:5d:83:
7e:ab:aa:24:e7:66:41:9d:00:3c:7f:8e:1b:a2:f3:2d:a3:f7:
40:45:8f:54:a5:38:96:55:d5:82:4f:6d:9a:74:af:95:b6:30:
b8:e3:5e:6b:58:03:01:d3:90:71:64:1c:8d:68:d3:ed:22:99:
cd:7e:7b:21:6d:92:37:dc:46:25:c4:92:78:ee:8c:c4:8a:16:
a3:79:13:37:2f:0d:2a:24:f6:b5:f1:96:6a:28:bc:3f:5d:48:
f6:c6:80:48:86:f8:2c:44:c5:30:3c:be:c4:ab:d8:5e:07:06:
ae:89:8e:ba:4d:98:77:52:d5:95:68:f9:51:cd:ff:13:89:9c:
c1:c0:ea:16:61:ab:0d:17:12:6d:10:c7:43:bc:79:06:29:b5:
87:8a:c8:05:aa:35:13:1f:6a:32:ff:3a:92:06:28:18:bc:5c:
f6:a8:ed:07:f5:45:79:2f:3f:28:21:74:b7:35:77:94:b1:2f:
62:07:35:62:2a:c1:54:3b:41:a9:01:54:f8:29:c8:86:53:74:
c9:f0:25:c3:bc:1c:fe:35:b3:04:c1:86:96:58:e7:2f:bb:53:
33:f0:27:ef:ae:90:06:45:6e:57:d4:d3:7b:cf:89:73:a5:88:
1d:75:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:21 2025 by rpki-client