Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/BHUrBlNKRTM5TnRHLcePZgjX3d8.roa
File: BHUrBlNKRTM5TnRHLcePZgjX3d8.roa (raw, json)
Hash identifier: j1VZqkyIn5kO0Ldn2Hs054f4MrtVDJQZjPa2r6tu+vQ=
Subject key identifier: 04:75:2B:06:53:4A:45:33:39:4E:74:47:2D:C7:8F:66:08:D7:DD:DF
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 07F68F7D
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/BHUrBlNKRTM5TnRHLcePZgjX3d8.roa
Signing time: Sat 01 Jan 2022 14:57:20 +0000
ROA not before: Sat 01 Jan 2022 14:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64472
IP address blocks: 185.162.182.0/24 maxlen: 24
185.162.180.0/23 maxlen: 23
2a0a:9000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133599101 (0x7f68f7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Jan 1 14:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04752b06534a4533394e74472dc78f6608d7dddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:8a:07:0f:41:96:63:53:84:58:3d:0b:9e:
e2:f7:18:69:67:71:14:6d:8e:7c:c7:41:a3:43:02:
4a:54:47:97:a0:fa:eb:f9:f6:84:74:df:d4:10:a1:
ce:71:78:84:3a:13:bc:91:71:33:54:eb:c9:63:c9:
17:a3:fc:d8:b3:78:b6:98:71:d3:ff:87:ba:0f:24:
52:5e:59:9c:c9:37:0a:7a:94:4e:25:c8:cb:3d:b1:
3c:c6:94:84:04:03:59:93:af:7c:90:26:df:d7:87:
3a:68:da:b5:3b:03:3b:af:ea:1a:63:ff:27:65:91:
f1:b5:69:25:ae:44:5a:8f:7f:e8:22:60:50:67:03:
7d:75:74:48:5f:82:d4:34:1d:a1:3c:e5:0a:b4:61:
08:f6:60:31:fe:98:bd:56:f3:f6:18:c3:1d:85:2d:
78:61:b1:36:6d:b9:3f:2e:81:70:3e:58:fc:f0:7d:
52:71:d4:7a:55:b2:38:97:d3:3a:6e:b5:2e:5b:9e:
5a:dd:2a:38:11:47:67:3c:a6:65:98:3f:49:99:ff:
dd:fc:71:b7:42:f6:f3:f2:71:92:cd:28:28:fb:ee:
2c:7f:13:88:1b:73:aa:b1:a9:4e:e9:d0:c8:c8:46:
56:4e:02:35:17:3b:9d:ec:cb:f9:40:15:ed:39:57:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:75:2B:06:53:4A:45:33:39:4E:74:47:2D:C7:8F:66:08:D7:DD:DF
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/BHUrBlNKRTM5TnRHLcePZgjX3d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.180.0-185.162.182.255
IPv6:
2a0a:9000::/29
Signature Algorithm: sha256WithRSAEncryption
26:18:04:c6:5d:ec:44:c6:e7:e3:4f:3b:03:1c:62:cd:26:6b:
ff:61:a4:d9:fe:88:8a:1c:bd:ff:d2:c7:47:46:26:0b:14:a2:
72:4f:46:50:54:53:05:c0:17:9c:92:f5:18:78:d0:be:46:d8:
a2:8b:f5:5f:f1:3e:0b:b8:21:75:5c:ad:e5:14:fc:a1:ba:11:
1d:5d:c8:97:87:98:a9:0a:63:e1:49:8a:2d:ef:66:c6:9f:89:
13:d3:1f:96:54:65:ab:ad:7d:d0:23:f9:73:ff:39:1a:80:60:
06:80:d1:09:05:74:08:8c:86:d0:e2:23:d1:0e:00:57:aa:2f:
ae:de:0f:c5:28:5a:0f:9e:b2:26:d6:48:14:2e:a2:10:2e:bf:
54:cc:c8:23:55:2d:67:4b:cb:86:b9:85:f8:9b:aa:fb:17:30:
78:11:7c:d5:07:b7:8d:f9:ab:5f:04:a3:0f:e9:c5:f4:49:04:
37:46:83:95:50:f4:70:b5:2e:cd:06:a1:01:8f:c7:f4:27:fb:
a6:fa:5d:7a:ae:4e:09:84:75:9d:c2:d7:fb:71:da:c4:73:e4:
91:ab:6e:1a:5e:a6:a4:2f:ca:4e:cb:20:5b:3d:82:be:81:00:
a2:bd:f4:37:89:f0:b8:58:ed:f0:89:7f:b2:34:42:2d:5b:e3:
dd:63:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:39 2025 by rpki-client