Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/801D54Dcz-hRgg0w0B5s01Rxiek.roa
File: 801D54Dcz-hRgg0w0B5s01Rxiek.roa (raw, json)
Hash identifier: Thri3RyTy2zrpsjtRVaxKzv/+ZqpzwcQH1YfrwHe/Mg=
Subject key identifier: F3:4D:43:E7:80:DC:CF:E8:51:82:0D:30:D0:1E:6C:D3:54:71:89:E9
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 19188D50
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/801D54Dcz-hRgg0w0B5s01Rxiek.roa
Signing time: Sat 01 Jan 2022 07:56:04 +0000
ROA not before: Sat 01 Jan 2022 07:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202214
IP address blocks: 185.50.64.0/22 maxlen: 22
185.50.66.0/24 maxlen: 24
185.50.67.0/24 maxlen: 24
2a01:a6a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421039440 (0x19188d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Jan 1 07:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f34d43e780dccfe851820d30d01e6cd3547189e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:51:38:fa:2d:0f:a2:46:7d:92:72:75:f8:
8a:6e:17:d5:4d:7f:70:32:9d:20:62:ee:04:97:bc:
e6:c0:8c:a8:f1:52:c1:bc:37:88:d7:c0:e7:ec:03:
cd:14:05:94:09:55:0f:73:79:2d:fd:f2:42:87:bd:
04:ad:a7:b8:66:bc:b4:1f:de:1c:5c:fc:62:cc:b9:
21:9f:ee:04:7f:b6:d2:6b:30:9b:03:10:8e:87:2b:
37:48:57:64:e3:c6:66:41:bd:d4:b4:18:d4:65:c0:
ea:00:72:6e:78:d0:e9:c7:bb:e2:fb:2b:b5:8a:89:
29:45:fa:81:f8:c3:36:24:a5:50:a1:51:c4:09:69:
46:ad:16:4c:41:5a:a2:1d:c1:fc:73:42:2d:e3:22:
ce:4f:ca:58:38:63:6d:61:a0:b7:3a:26:88:61:c1:
53:eb:9f:dd:0b:e3:13:79:81:1a:e8:f9:13:da:93:
1e:f9:ce:fa:78:35:3c:cb:1e:0f:8d:dd:53:8e:27:
f1:42:96:a2:94:50:3c:14:cb:0b:45:c7:78:2d:2e:
7a:19:4d:ab:82:bd:7a:49:ed:7d:fe:41:0b:98:6f:
8e:c1:bd:17:7f:e0:6b:86:38:c1:91:ee:f6:a1:de:
d4:5b:17:9e:72:d9:57:8b:ad:54:1e:cd:04:06:3f:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4D:43:E7:80:DC:CF:E8:51:82:0D:30:D0:1E:6C:D3:54:71:89:E9
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/801D54Dcz-hRgg0w0B5s01Rxiek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.64.0/22
IPv6:
2a01:a6a0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:2c:de:99:b0:91:e3:3f:ad:75:e4:14:8b:4d:eb:9e:a3:4c:
2a:7e:b4:01:7a:7b:a0:f8:b1:2b:71:00:c5:2a:b6:a6:1b:06:
c7:91:5e:d5:5f:a8:cd:8d:27:59:38:fe:62:5e:78:9e:d7:ef:
5b:09:fc:42:62:a9:f6:cf:0d:15:f2:9a:44:70:0f:96:2a:93:
b6:d9:ea:c2:73:b5:11:d2:96:e9:e4:77:6a:9f:cc:59:43:20:
f5:f9:a4:89:fc:aa:ec:2b:f8:2f:6b:87:ba:02:92:e0:c4:b1:
a3:37:75:34:68:76:97:3f:30:1f:46:71:44:d3:b0:54:aa:97:
3e:a3:3f:73:77:26:f8:14:de:fc:ad:da:56:8f:04:b1:06:7c:
80:a4:e6:84:13:de:41:f1:01:e0:b7:24:fd:df:b2:c3:e9:ce:
55:fc:5b:cc:a8:ef:cf:76:d8:d1:11:e7:a8:fd:b7:71:52:c5:
70:61:a2:49:54:47:76:88:f1:23:1b:45:c0:52:46:68:da:63:
4b:1b:1a:6c:ea:3a:aa:90:e2:d0:9c:86:70:60:11:42:6c:26:
1f:d3:20:a7:a1:5b:54:fa:03:94:7f:29:f1:e3:bf:e7:0d:e3:
bf:1f:b7:20:ba:b9:69:1b:87:a7:2f:a1:1e:90:d2:8f:67:36:
3e:44:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:16 2024 by rpki-client on console-fra.rpki-client.org