Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/0bznVvnjYRHlCWOERIqqm1ijrew.roa
File: 0bznVvnjYRHlCWOERIqqm1ijrew.roa (raw, json)
Hash identifier: /55nzD+e8xyNPfjTuEcCoxJMVjJwQ3OMRsyNdRj1TXk=
Subject key identifier: D1:BC:E7:56:F9:E3:61:11:E5:09:63:84:44:8A:AA:9B:58:A3:AD:EC
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 06DF9B8C
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/0bznVvnjYRHlCWOERIqqm1ijrew.roa
Signing time: Sat 01 Jan 2022 09:56:49 +0000
ROA not before: Sat 01 Jan 2022 09:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.200.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115317644 (0x6df9b8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Jan 1 09:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1bce756f9e36111e5096384448aaa9b58a3adec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:b4:8a:94:fb:b4:be:c5:5a:0e:86:d7:0f:
71:c2:27:3c:9f:1c:8f:1a:02:5f:c1:9a:11:5c:19:
ef:bd:5e:4e:fd:3c:ee:03:32:3e:5b:86:c0:b4:92:
1d:f5:30:a3:f7:87:23:76:b1:d0:c9:38:db:23:ef:
df:52:36:c5:37:01:2e:5f:c3:0a:b4:52:80:39:35:
cc:5b:35:d1:58:75:c1:f8:f6:41:11:1f:ac:2f:82:
e8:88:d8:42:ab:08:d6:9f:8c:04:59:c9:3a:cc:e6:
d1:c8:31:6f:f3:e8:8d:7f:e1:ea:77:5a:53:50:ca:
94:b6:82:0f:9c:af:75:45:1a:91:c5:1c:fa:30:a9:
56:55:b7:00:75:8e:fa:04:a9:b6:04:40:a1:a5:a7:
ff:6e:06:94:7e:8e:31:31:d4:9d:83:3a:22:8b:fa:
d7:44:2b:01:c1:ff:72:43:e4:27:a1:d7:2e:60:55:
34:39:7c:01:97:f2:18:2b:10:4b:5a:dc:b7:61:68:
d2:92:4f:6e:9f:55:92:f1:47:f0:ca:9d:6e:d5:a6:
76:5b:47:61:fa:40:52:02:e3:74:e3:91:9b:cf:6b:
15:ad:69:76:f0:d8:4d:70:37:9c:68:c6:90:55:ca:
37:d8:a8:af:9f:04:06:6d:7c:33:ba:cb:1f:18:17:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:E7:56:F9:E3:61:11:E5:09:63:84:44:8A:AA:9B:58:A3:AD:EC
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/0bznVvnjYRHlCWOERIqqm1ijrew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.12.0/22
Signature Algorithm: sha256WithRSAEncryption
55:cf:b4:30:df:f6:3e:ff:eb:ac:e4:b2:48:2a:02:f8:48:a7:
0c:c9:5b:9a:5e:77:01:0c:bd:13:b7:a3:ea:65:82:b4:e1:c0:
62:88:d6:99:cd:28:e3:66:3c:b8:0b:e1:41:ed:4f:cc:50:66:
13:78:4a:03:1c:26:8d:56:e5:2d:a5:f5:fc:d8:2f:62:be:1c:
85:86:11:15:6c:c0:09:e7:e8:3a:fb:65:64:2c:5c:7e:f2:1c:
e4:cb:12:bd:f3:3a:3d:15:36:70:da:0f:fe:8e:90:73:5a:17:
c7:57:c7:d9:2c:59:e6:87:e1:f2:26:1b:89:d0:e1:fc:64:86:
39:da:e6:31:74:77:82:37:9d:2d:07:4b:43:95:42:3f:22:d9:
b1:42:da:94:92:4c:b6:6c:d3:b3:53:45:0a:5e:df:a1:e2:7b:
1f:e5:5f:a4:53:10:a3:33:1e:f9:b7:d5:df:a4:cb:a4:90:ec:
31:b9:bb:10:8c:0e:bd:fc:d3:9c:0c:f0:18:5a:2d:fc:8b:80:
c4:d6:2e:f4:7b:36:77:59:2b:7d:93:67:e9:b5:da:54:da:6b:
ef:25:b6:c2:57:1c:ff:3f:3a:98:30:2e:0d:72:4a:31:bc:7e:
5f:ea:df:19:e8:56:22:5f:41:31:0a:d3:1f:e1:6e:b4:de:43:
bb:d4:8a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:44:26 2025 by rpki-client