Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/2MgYRCgqJTb5b18X5OjbQaTtOCU.roa
File: 2MgYRCgqJTb5b18X5OjbQaTtOCU.roa (raw, json)
Hash identifier: nNyBxSpmZIDGqWogYXXGULyVk087ydFJcqfvNZ7Mrj8=
Subject key identifier: D8:C8:18:44:28:2A:25:36:F9:6F:5F:17:E4:E8:DB:41:A4:ED:38:25
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 01F62F5F
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/2MgYRCgqJTb5b18X5OjbQaTtOCU.roa
Signing time: Sat 01 Jan 2022 13:57:02 +0000
ROA not before: Sat 01 Jan 2022 13:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43872
IP address blocks: 185.178.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32911199 (0x1f62f5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: Jan 1 13:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8c81844282a2536f96f5f17e4e8db41a4ed3825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:c6:94:16:b1:a0:23:10:15:e9:14:79:4d:
50:f6:92:f8:37:63:e9:6b:a0:d7:30:44:e7:30:3f:
ca:9c:f1:49:bd:cf:a0:2e:f7:d2:d8:81:64:e8:5b:
bc:01:22:fd:32:23:de:0c:09:77:8d:24:c3:30:cb:
30:cd:16:fb:c0:8c:45:e3:df:c0:b6:d6:df:94:3f:
c8:74:38:78:ee:cb:fc:54:52:40:f5:4e:68:04:4d:
d0:42:d3:db:80:46:43:62:8c:e8:b8:0e:c7:b7:ca:
0b:dd:e9:2c:24:8f:8b:6e:2e:10:b1:8d:3c:a9:f5:
52:6f:5a:1f:06:d7:d2:23:c3:27:db:34:c9:f2:4e:
11:f3:33:45:84:1a:a4:2f:8c:ce:f1:85:2a:c2:d4:
72:d0:5a:80:f0:c9:92:0b:19:38:58:70:8b:f4:22:
fb:4d:52:c6:4e:05:67:c2:55:0d:1f:94:fd:09:6b:
61:72:0b:25:fb:21:82:5f:6f:b9:04:c1:6c:e1:6e:
2d:3f:5e:64:a5:f1:9f:73:98:5c:c7:d0:0d:a9:b2:
23:e4:0c:35:66:6b:21:9c:be:c8:36:e0:a9:75:67:
a5:6a:7a:29:3f:e8:4c:ba:3f:3a:f1:61:8d:47:54:
75:1f:5f:3b:76:01:de:4e:37:0a:81:0e:0b:fa:1e:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:18:44:28:2A:25:36:F9:6F:5F:17:E4:E8:DB:41:A4:ED:38:25
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/2MgYRCgqJTb5b18X5OjbQaTtOCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.50.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fe:b7:c8:5c:f8:59:82:de:80:a0:2e:3d:68:81:97:38:cf:
8c:9b:2e:e0:97:23:c3:1a:ae:82:55:fe:93:d1:83:0d:b8:1a:
a7:37:92:2e:28:a2:5f:64:c7:25:2b:07:e4:44:02:47:11:c6:
b2:ba:6d:a9:78:f0:76:55:e7:be:c2:00:7b:95:be:fc:79:19:
99:f5:17:49:cd:c5:41:92:a0:9b:fa:0b:e9:d5:ac:ae:e5:ad:
eb:0b:23:50:a1:72:3f:03:1b:72:30:51:ad:c6:e2:f6:1e:a5:
91:b7:99:c5:9c:c5:7a:ae:78:bf:d1:6e:9f:3e:02:f0:16:a7:
8d:b5:10:0b:fe:bf:36:98:eb:aa:00:f6:7d:ea:6b:12:ee:5e:
46:fb:cc:8d:d9:77:46:43:e0:2d:da:bc:35:43:d1:39:46:b7:
9a:de:a1:d0:81:70:2d:c0:d5:4f:78:42:ac:29:0d:80:e4:2b:
a4:30:84:67:e0:81:f9:18:8f:fe:1c:71:39:dd:ad:15:d4:25:
97:d9:fd:3e:4c:f6:d3:48:0a:59:28:ee:5b:77:37:25:43:e4:
aa:16:61:d2:f7:e3:e9:31:a2:5a:03:6e:74:5d:0c:ec:5b:18:
bf:0d:44:c6:5e:8c:55:b0:08:1c:6b:ae:2a:72:07:65:78:91:
2a:cc:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:59 2024 by rpki-client on console-ams.rpki-client.org