Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/ZgnFoFJ6WLxQcmH7GGxsie8WvTA.roa
File: ZgnFoFJ6WLxQcmH7GGxsie8WvTA.roa (raw, json)
Hash identifier: h/h9Bn17Pu8okkCd3ShYUE/oRH7Yu5AWuqpKQNnf+RU=
Subject key identifier: 66:09:C5:A0:52:7A:58:BC:50:72:61:FB:18:6C:6C:89:EF:16:BD:30
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 0186B66AD6BA1380BCA82FBAC16B7976A426
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/ZgnFoFJ6WLxQcmH7GGxsie8WvTA.roa
Signing time: Mon 06 Mar 2023 10:15:00 +0000
ROA not before: Mon 06 Mar 2023 10:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202179
IP address blocks: 185.50.180.0/22 maxlen: 22
185.50.181.0/24 maxlen: 24
185.50.182.0/24 maxlen: 24
185.50.183.0/24 maxlen: 24
2a01:a960::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:6a:d6:ba:13:80:bc:a8:2f:ba:c1:6b:79:76:a4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Mar 6 10:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6609c5a0527a58bc507261fb186c6c89ef16bd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:77:03:b8:42:b2:ac:36:a0:0a:26:f5:79:
1b:81:58:f2:d2:97:26:8d:8f:90:58:1c:c0:53:61:
f3:c0:f1:e4:40:03:0e:a8:75:6e:27:83:40:c7:03:
1d:16:20:8e:49:fc:22:e9:36:f1:eb:d5:01:06:95:
dc:5a:10:23:2d:11:98:e5:bc:18:10:df:be:71:30:
c7:d3:b4:b2:74:4b:24:a4:e5:7d:fd:e0:5d:ea:11:
e9:83:a4:51:c3:ba:f3:a0:b5:02:86:78:20:7e:03:
14:36:d6:8d:09:cb:a6:8e:08:79:b0:ae:10:b3:e1:
12:78:a2:09:6b:45:81:40:00:ef:b9:c3:4b:56:5e:
3b:f8:70:e8:e6:23:9a:2c:b5:03:a3:ac:b0:e7:04:
65:2a:91:44:7a:10:e6:c4:b6:ed:58:fc:55:52:f9:
1a:ca:62:d4:c4:75:01:1b:2b:49:61:8e:f9:aa:7a:
64:e1:e2:90:08:23:6a:6e:8f:7d:89:ef:5a:f2:ed:
d7:c6:e3:14:88:bc:1c:c7:1d:9b:4d:2e:c1:f7:78:
17:86:c7:b6:53:cc:d5:e5:c6:e7:1b:76:68:8b:3c:
d6:18:a0:84:52:82:e3:09:69:e8:d0:0d:a1:53:fd:
70:49:06:f0:7b:db:88:7d:7e:8b:0b:43:b9:8d:57:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:09:C5:A0:52:7A:58:BC:50:72:61:FB:18:6C:6C:89:EF:16:BD:30
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/ZgnFoFJ6WLxQcmH7GGxsie8WvTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.180.0/22
IPv6:
2a01:a960::/32
Signature Algorithm: sha256WithRSAEncryption
27:5e:d2:ba:67:f7:1c:36:58:c0:56:3f:06:3d:b2:41:47:44:
fc:e8:c4:e5:f0:4f:c4:60:59:b7:ab:b6:8d:88:c2:3f:06:d8:
bd:32:42:dd:13:13:a5:6a:a7:14:f9:ab:2a:b2:50:0f:f2:16:
f7:b1:1f:cc:bb:f0:75:7c:ae:ce:b5:5b:ae:55:b1:fd:76:0c:
52:2f:ab:c0:7b:16:7c:dc:44:af:85:07:57:84:81:95:b6:5f:
97:12:e1:9d:e5:86:51:b3:c3:6e:6a:d1:26:d0:34:98:12:41:
fe:5c:93:a4:73:c6:80:13:58:a5:da:de:91:8c:37:25:c6:aa:
c1:9d:13:f5:b8:e7:43:16:7c:dc:66:39:8f:6e:64:03:d3:4d:
52:37:e6:bb:61:42:0f:56:19:89:11:de:8f:c7:89:e8:3c:6e:
4e:f9:52:f3:8f:99:5a:38:59:fe:07:25:5a:86:cb:0c:de:7e:
bf:e5:1f:5b:50:3f:8b:e9:c7:bb:df:cc:f3:f5:ea:1a:34:73:
e4:ee:e6:0a:15:2c:90:45:6f:11:29:64:d2:d7:08:ee:cf:31:
dd:34:3c:7c:f4:e3:55:23:9a:cb:cd:cb:36:06:eb:41:15:8e:
ba:25:96:1a:04:3e:c6:44:21:c5:25:ae:6e:70:b8:6b:7d:6d:
79:ae:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:40:10 2025 by rpki-client