Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/ulrn5Kt_Cq60QkXCHpZB-3sI-14.roa
File: ulrn5Kt_Cq60QkXCHpZB-3sI-14.roa (raw, json)
Hash identifier: smTRmAqhIfkTwn7ULHuZ634mTY7SKMn9rucWdHEyHd0=
Subject key identifier: BA:5A:E7:E4:AB:7F:0A:AE:B4:42:45:C2:1E:96:41:FB:7B:08:FB:5E
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 0A64914E
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/ulrn5Kt_Cq60QkXCHpZB-3sI-14.roa
Signing time: Sat 01 Jan 2022 16:04:49 +0000
ROA not before: Sat 01 Jan 2022 16:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2852
IP address blocks: 194.50.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174362958 (0xa64914e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Jan 1 16:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba5ae7e4ab7f0aaeb44245c21e9641fb7b08fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:06:81:6c:c6:e5:29:c9:99:d5:d0:fa:02:
06:47:9a:43:2d:a5:69:7c:f9:63:63:c8:51:04:6c:
26:7e:fa:62:8c:ae:05:53:49:a2:79:44:46:a5:88:
ce:7c:2c:80:32:7d:ff:23:a8:74:3b:1a:b6:5c:db:
02:86:6f:74:43:86:08:f8:67:37:81:2d:5d:5f:a9:
db:d8:55:b0:c0:2a:99:63:aa:31:dc:15:47:db:df:
d9:ba:82:e2:2e:ca:d8:d1:eb:79:cd:8e:b0:a8:d5:
58:a7:42:bb:4c:7b:c3:9a:de:9b:19:f0:d2:f5:46:
75:a3:f1:b6:0b:30:4a:85:12:96:f9:6a:0f:01:90:
80:17:21:1e:c2:1b:23:f4:3e:bf:fa:f2:86:c6:cd:
73:7d:29:2c:4b:32:d6:75:e6:bf:4f:31:c5:b9:95:
9d:75:70:4c:3c:5a:48:99:c6:bb:99:67:35:55:e0:
4f:5e:a6:71:e3:06:95:6d:f2:91:00:b5:6d:57:a2:
e0:44:b8:18:6e:b9:f0:e6:47:a1:d8:61:e1:13:40:
e5:5f:69:9a:8e:5d:5a:02:94:1e:b1:a3:79:5c:5b:
84:a2:40:27:a3:c1:f5:e1:8c:0b:be:c7:64:18:4c:
9c:e7:e7:75:56:e1:f2:c9:eb:d3:b9:8d:8a:6d:5f:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:E7:E4:AB:7F:0A:AE:B4:42:45:C2:1E:96:41:FB:7B:08:FB:5E
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/ulrn5Kt_Cq60QkXCHpZB-3sI-14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.26.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:bd:22:ea:70:db:a6:d7:f6:a8:35:8c:17:ec:a1:d7:65:8c:
eb:e3:59:00:b0:8e:3d:10:05:d7:5f:fc:ec:fd:1f:6d:a2:20:
4d:03:f2:35:9e:ed:86:0f:c0:b8:53:cf:bc:ea:3a:4e:e2:de:
0f:ef:ec:36:b0:54:b3:53:65:ec:37:de:4a:58:d7:38:df:aa:
2f:1b:a7:6c:c4:0a:49:7d:31:02:d2:f5:ae:b4:c5:65:b8:11:
00:f7:73:70:8a:18:40:b3:f6:73:3a:0b:c9:c9:be:92:2f:82:
73:59:6d:17:2f:06:25:51:4d:5a:2a:cc:25:ce:8b:99:e9:c5:
99:b6:e1:ff:03:04:e6:ca:31:ee:6b:2f:eb:f9:28:39:44:af:
c7:dc:bb:fb:77:ec:e4:b5:2f:bd:5b:1a:72:8a:bf:1f:0f:8a:
c4:52:b3:32:83:b6:bd:b6:58:33:88:2d:45:d8:4b:6d:a6:a5:
a7:c2:b4:c0:05:97:46:47:ab:af:3a:ce:80:f8:b0:b4:ad:43:
16:f2:4c:ba:b7:29:a3:7d:dd:ca:5c:9a:36:f4:5a:e5:ec:be:
bc:e4:48:1f:4b:f2:c7:dd:e6:62:29:2b:cc:a3:f6:f9:43:07:
86:08:7b:b6:db:68:4d:8f:ac:a6:99:16:6f:87:c4:60:f8:71:
11:e6:9f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:10 2025 by rpki-client