Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Bhau41aXtpfS2Gh1WZh8038V6NQ.roa
File: Bhau41aXtpfS2Gh1WZh8038V6NQ.roa (raw, json)
Hash identifier: sCZhguse4A+GOq1wImNJs4a6zsdiNRc1UqH1prXX4OU=
Subject key identifier: 06:16:AE:E3:56:97:B6:97:D2:D8:68:75:59:98:7C:D3:7F:15:E8:D4
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01881E184E11B8BBCC4EFD1462A7C42EB296
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Bhau41aXtpfS2Gh1WZh8038V6NQ.roa
Signing time: Mon 15 May 2023 06:28:09 +0000
ROA not before: Mon 15 May 2023 06:28:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 185.39.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:18:4e:11:b8:bb:cc:4e:fd:14:62:a7:c4:2e:b2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 15 06:28:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0616aee35697b697d2d8687559987cd37f15e8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:32:9a:0f:e4:df:15:53:6c:36:2e:87:58:
5b:72:48:91:0c:0b:2d:d4:2d:9b:49:83:97:50:ba:
db:dc:2d:23:35:dc:a5:84:27:88:ce:76:c9:6a:80:
ac:3c:26:35:0b:80:f2:70:e3:7d:a8:66:97:16:7b:
06:e5:ec:04:87:a0:df:51:ce:96:fc:c9:b3:eb:db:
49:f1:bc:8f:a3:a3:bd:9c:b5:34:7d:cf:9b:95:5a:
29:44:5b:6d:14:0d:41:25:29:44:f7:9b:fd:b5:0f:
37:2d:8c:d4:32:51:ab:04:b1:64:c6:68:95:de:48:
d7:de:7d:51:4c:37:6b:96:3e:6d:49:48:10:3d:82:
05:30:c6:27:92:18:3d:d8:42:9c:0b:9a:89:6b:8d:
0e:b3:92:db:af:8b:08:bd:e0:b9:d2:14:fe:ef:54:
70:d6:93:dd:5b:d7:57:a9:4b:f6:4f:58:e8:dd:77:
36:1d:50:04:85:be:0a:8a:49:e3:fb:57:92:f2:1d:
d0:db:66:ba:4a:3d:d1:b7:fe:b4:f2:a1:da:83:14:
19:ff:66:a1:88:74:f8:10:a8:c6:f9:ad:80:e6:b0:
0c:23:21:c6:b3:bb:89:ac:18:ea:af:d7:52:45:57:
70:8b:1e:fc:6f:e4:6f:e7:65:62:7f:cd:08:2b:84:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:16:AE:E3:56:97:B6:97:D2:D8:68:75:59:98:7C:D3:7F:15:E8:D4
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Bhau41aXtpfS2Gh1WZh8038V6NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.205.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0a:8b:20:3e:71:bc:18:13:c5:02:ee:20:95:cc:25:a9:6c:
d7:44:14:69:4d:f6:fb:a7:a3:94:bb:af:cf:63:f3:f4:fa:b9:
b9:a2:64:48:2a:ad:92:73:2d:13:48:56:e3:d9:99:98:c6:74:
73:cb:ef:da:e1:cb:0f:e0:5a:ce:fd:71:e9:02:c9:04:53:6d:
0d:b4:52:f5:20:b5:a5:78:f3:da:c2:e3:0e:43:34:d0:c5:2a:
67:11:ca:54:f3:17:bb:b8:d0:2d:a4:2d:7a:e6:2c:4d:d3:c5:
f3:95:6c:1a:a9:a8:72:ea:eb:b9:dc:64:26:37:da:ab:2f:53:
79:b6:40:eb:77:eb:95:b6:7a:e1:aa:0a:89:34:c4:a1:5b:82:
3e:32:8e:7e:89:aa:53:c1:89:e0:0c:75:d5:25:5f:0a:c8:75:
07:42:1c:ae:05:71:d7:77:42:e2:f6:64:d0:5d:0b:42:ef:6d:
45:b5:3d:bc:75:85:32:2c:ba:10:9e:24:e3:3e:94:e3:d8:dd:
db:8f:48:1e:c4:c9:67:e5:d4:b6:11:21:b8:b2:52:90:f5:4a:
96:b2:42:fe:6a:c5:d7:9c:b5:0b:2a:da:ed:c7:49:59:ad:46:
b0:69:d6:7a:13:f1:be:b6:c9:e0:98:d0:9e:8e:83:8f:bb:ff:
46:9a:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:54 2025 by rpki-client