Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/u1zwuyKESK7WV2KALm1gnExueqo.roa
File: u1zwuyKESK7WV2KALm1gnExueqo.roa (raw, json)
Hash identifier: qY+YjPTTgLGdVFgNragBvb3o2HOnZWv8pwPEZd7Y4kw=
Subject key identifier: BB:5C:F0:BB:22:84:48:AE:D6:57:62:80:2E:6D:60:9C:4C:6E:7A:AA
Certificate issuer: /CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Certificate serial: 1850E706
Authority key identifier: E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/u1zwuyKESK7WV2KALm1gnExueqo.roa
Signing time: Sat 01 Jan 2022 09:56:43 +0000
ROA not before: Sat 01 Jan 2022 09:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204082
IP address blocks: 185.109.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407955206 (0x1850e706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Validity
Not Before: Jan 1 09:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb5cf0bb228448aed65762802e6d609c4c6e7aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:8e:a8:c4:66:8c:b1:bb:ea:89:77:c2:37:
13:d9:a6:b6:8b:a1:1d:3f:c0:6b:f4:b2:77:54:79:
29:93:01:a0:96:b0:76:84:2a:23:c2:64:bd:b3:c1:
af:0e:ff:4b:18:ac:f1:3a:e2:5e:82:cb:12:43:49:
94:37:c5:22:a2:35:cf:cc:cc:63:b4:c0:aa:8c:54:
5b:bd:bf:e7:7f:7d:93:93:ad:04:11:aa:c4:c6:f3:
f4:a3:b0:cf:00:70:9e:e6:7c:a4:96:a7:6c:87:06:
b7:d2:3a:6f:fd:af:1e:86:75:d5:0e:4e:99:7b:98:
b4:c7:be:d4:79:4a:39:22:45:49:46:83:4a:5f:a0:
82:10:b4:59:0d:c2:3b:d8:b0:be:b6:fb:5e:df:16:
96:d8:4b:ee:11:fb:0d:72:ac:64:29:e8:d3:85:c8:
12:85:b1:64:87:7f:7b:49:e3:d8:f9:b8:15:28:05:
6b:8e:8c:3d:77:90:da:9d:e8:c7:fb:41:cd:d7:83:
ee:1c:5a:6b:5f:9f:98:80:33:57:3b:e4:95:da:bb:
ff:be:29:72:24:52:8e:4a:77:2b:04:31:fa:a2:c4:
52:7e:02:de:82:e6:61:55:f9:8c:b3:aa:6a:bf:b4:
dc:4d:82:d3:c2:1c:19:e1:2c:65:9c:21:04:30:a9:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5C:F0:BB:22:84:48:AE:D6:57:62:80:2E:6D:60:9C:4C:6E:7A:AA
X509v3 Authority Key Identifier:
keyid:E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/u1zwuyKESK7WV2KALm1gnExueqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/5HUh57azir-4i_cem8WgKy7M07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0e:d1:0c:b1:65:20:3a:c2:d0:32:08:d2:e3:af:b5:3d:6c:
5c:82:1d:5c:d6:2b:18:1c:a1:a3:27:95:c0:95:25:9c:ef:7f:
32:d5:1e:9f:3d:19:0d:66:ad:63:74:72:bc:3f:1f:e6:8d:98:
e2:16:2d:b6:44:1b:53:41:5f:d3:ab:70:ed:17:e7:e3:14:a2:
42:6e:8e:6b:74:c2:b0:5d:75:30:f5:3c:cb:cb:38:9b:1f:e4:
2f:6c:a8:ea:ae:73:79:f7:51:34:1e:e7:33:2e:3e:1f:ec:dd:
22:45:cd:90:17:64:b6:61:4a:ce:c2:33:0e:37:05:cf:ed:df:
a4:17:a5:17:6f:1a:dd:bb:d5:96:22:b7:4a:7c:6d:7e:2b:2b:
52:9e:d2:7f:29:93:44:ca:bf:ae:07:ea:26:39:f9:08:ee:b5:
08:4d:1a:ad:21:9a:7b:32:ae:ec:69:d9:4d:d5:ab:d5:11:e5:
0a:9a:46:4a:c6:24:c3:fb:6e:ec:2a:28:ef:47:eb:a9:71:3a:
3d:b7:d0:9d:91:3a:cd:85:4c:6d:6a:a1:6e:10:a8:47:fb:b5:
a5:b1:24:35:81:be:7d:31:76:96:3c:48:56:6e:5f:d7:f9:b3:
71:fd:4f:2c:8b:18:1d:63:45:b5:13:39:2e:e9:9c:b9:9c:a8:
27:01:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:05 2025 by rpki-client