Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/DMlbU5BT4x7torwQ-w6aoEDG0RM.roa
File: DMlbU5BT4x7torwQ-w6aoEDG0RM.roa (raw, json)
Hash identifier: 7QPusjjFlKWmQ1MhpT8xj1XUT2mbay+9dKLXTn+x5Ms=
Subject key identifier: 0C:C9:5B:53:90:53:E3:1E:ED:A2:BC:10:FB:0E:9A:A0:40:C6:D1:13
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 0590D4F8
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/DMlbU5BT4x7torwQ-w6aoEDG0RM.roa
Signing time: Sat 01 Jan 2022 04:53:07 +0000
ROA not before: Sat 01 Jan 2022 04:53:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205723
IP address blocks: 194.50.176.0/24 maxlen: 24
2a0a:4540:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93377784 (0x590d4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: Jan 1 04:53:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cc95b539053e31eeda2bc10fb0e9aa040c6d113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:98:85:ea:28:d4:7c:c4:28:e7:0a:29:1a:
e8:01:b6:e7:38:c0:7f:11:c8:8e:de:c3:fe:83:85:
e7:8c:3f:af:c7:18:a7:61:1f:12:6c:77:9d:00:97:
89:16:a1:15:1b:8a:ff:fc:cb:38:f2:79:85:ec:be:
33:94:dc:0a:11:b4:d0:8d:3c:0e:ff:d2:85:91:91:
d1:d6:00:18:3f:6f:c2:d3:f4:b3:5b:5c:dc:3a:a2:
c4:bc:2e:a9:f4:6d:89:c3:50:5b:b2:f5:a0:10:a4:
90:10:ab:62:cb:5b:25:ea:65:ca:3f:3b:47:cc:2b:
d5:a9:a6:e7:fb:9b:c0:ff:a5:dc:13:7e:a2:bc:02:
f7:57:0e:ac:0f:5f:f2:a4:27:12:3b:a6:7d:6b:f1:
82:44:77:d8:76:b2:8c:fd:7b:8b:5b:3f:7a:e2:c5:
85:84:8c:b6:99:cc:7a:09:14:29:51:f2:e8:b4:c5:
b4:67:1c:68:a9:b8:67:ed:c5:45:fc:ee:f9:f7:b3:
cc:40:6c:1f:a8:fa:e1:f9:b6:2b:3d:68:a5:e3:ac:
e2:8a:9d:c6:94:54:1a:a5:fb:9d:1c:f8:09:9b:65:
d1:da:b9:1a:3a:fa:14:3e:1c:21:03:4e:67:0f:09:
0a:a4:8f:83:34:83:08:e1:08:ce:4c:fc:53:2e:75:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C9:5B:53:90:53:E3:1E:ED:A2:BC:10:FB:0E:9A:A0:40:C6:D1:13
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/DMlbU5BT4x7torwQ-w6aoEDG0RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.176.0/24
IPv6:
2a0a:4540:10::/48
Signature Algorithm: sha256WithRSAEncryption
21:e3:1a:a4:e0:0e:9b:99:48:d8:02:1c:17:78:e0:6b:b2:52:
51:ff:19:4e:b6:a1:c9:cc:cc:00:84:a9:42:8d:9a:6b:e1:d0:
c4:43:db:57:ae:f0:2b:ca:07:3f:13:53:20:0d:21:1b:e9:f8:
44:8f:99:55:b0:bc:a1:75:64:ff:32:bb:7d:b9:de:ea:0a:94:
e1:95:1f:b7:96:5d:28:2e:4a:6d:5a:db:ef:10:43:d6:c9:c8:
1e:a9:a2:e1:a2:1b:9e:5c:15:10:0b:0d:b0:09:86:6a:ff:3d:
e3:16:33:07:fa:b7:7d:0f:e5:f6:a4:84:97:1c:6d:83:86:2a:
0a:70:78:60:82:12:de:64:ad:c1:3e:df:05:dc:e7:bb:62:23:
4d:a6:0e:80:ae:e9:c0:cc:6a:3d:e7:64:98:a1:d6:39:5f:f0:
20:63:59:41:dd:3a:64:72:17:8f:e7:48:22:49:fa:cd:1f:9e:
15:da:19:87:05:22:db:79:00:c4:78:cc:53:78:c6:35:86:5a:
24:bf:61:e5:44:a0:34:b1:30:43:99:77:a0:9f:98:4f:74:c6:
7e:ec:4d:9d:dc:ff:d5:8a:1a:1c:00:19:2b:2f:90:4c:a8:53:
52:56:83:ad:ce:50:23:53:35:15:33:7c:33:c1:b1:39:4f:4e:
3a:dc:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org