Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/4MEIBo0bVL0oxt3QYHaOcSC65OI.roa
File: 4MEIBo0bVL0oxt3QYHaOcSC65OI.roa (raw, json)
Hash identifier: ybRF5KXZvzUqFH//72qfUAA3ZqV9jlS2UKEeNo1GT2g=
Subject key identifier: E0:C1:08:06:8D:1B:54:BD:28:C6:DD:D0:60:76:8E:71:20:BA:E4:E2
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 0EE9EA3D
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/4MEIBo0bVL0oxt3QYHaOcSC65OI.roa
Signing time: Sat 01 Jan 2022 11:00:35 +0000
ROA not before: Sat 01 Jan 2022 11:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.99.50.0/24 maxlen: 24
185.99.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250210877 (0xee9ea3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Jan 1 11:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0c108068d1b54bd28c6ddd060768e7120bae4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:89:57:d6:f2:6f:39:dd:40:34:b5:b5:4a:
72:41:41:0c:f3:0b:48:1f:35:c8:89:3d:e2:28:be:
89:40:18:e1:2a:77:25:ca:82:26:56:cd:51:2b:95:
18:28:ee:2c:39:30:5b:44:b5:12:f5:67:ae:a5:0d:
b9:3e:b4:2f:62:57:06:d3:da:fb:af:31:50:9f:3e:
42:b0:1b:c0:5c:5b:c5:31:b9:f6:65:dd:1b:86:c5:
70:e0:02:dd:27:91:8b:58:d3:66:5d:19:c4:81:6b:
54:4b:e0:75:47:c4:ed:86:bf:bf:7e:a9:c4:45:3f:
93:5a:2c:36:f7:7d:18:0c:bb:b9:21:39:da:23:e2:
e5:92:1a:43:0f:7b:bd:29:be:81:2f:a6:ac:d7:d2:
8c:ca:7d:fe:6c:6b:9c:5c:52:f8:d5:21:43:1a:9d:
f4:8b:25:79:3c:9d:5b:01:79:cd:c8:58:99:f5:66:
48:c6:63:f1:9a:90:cb:1b:07:50:fe:ed:a3:a1:f5:
75:26:f4:74:4d:46:05:c9:89:14:c1:66:b1:1a:a8:
8e:01:bc:14:a2:c4:91:9d:ea:fa:a7:4c:b0:28:8f:
df:07:2d:6c:7c:eb:d5:f0:7c:88:a6:c6:ee:b4:fb:
02:cc:84:21:2e:3e:42:ba:fc:80:58:e6:e4:b1:9e:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C1:08:06:8D:1B:54:BD:28:C6:DD:D0:60:76:8E:71:20:BA:E4:E2
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/4MEIBo0bVL0oxt3QYHaOcSC65OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.50.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:08:66:4c:78:9e:96:51:ff:f5:3d:75:62:46:0e:e0:4f:08:
49:c8:87:5a:a8:45:b9:cc:31:e6:a9:fe:8a:37:bc:91:1a:7f:
11:3a:29:b4:df:df:6c:f3:5e:38:19:1d:b4:ef:4d:c0:a3:1d:
e1:e7:a0:54:f7:d5:0c:f7:6e:61:2a:07:e2:36:fd:9d:f9:b3:
6c:29:73:d2:3f:b4:3f:a2:1b:4f:8f:60:2d:4c:e7:dc:7f:9a:
a4:77:81:8b:79:64:18:4f:88:82:46:17:15:0d:b8:cc:04:0b:
fa:ae:95:43:61:0d:60:b0:47:79:51:8a:14:e3:63:cb:4e:29:
d0:ac:2b:dc:04:8c:2e:ea:da:b6:5d:f5:19:84:10:9b:b3:94:
19:6e:66:cd:99:9c:2a:b1:8b:58:4f:81:32:05:53:aa:51:eb:
f8:90:b2:21:ac:92:b7:37:cf:24:d6:3f:7d:77:eb:a5:4f:3d:
20:51:3f:b6:40:40:d5:65:36:0a:63:28:14:e0:43:40:bf:13:
6d:b8:cf:76:40:d1:3d:30:21:01:f8:3c:97:37:89:6e:f3:4a:
db:86:90:40:29:92:f5:5e:84:26:7b:dd:7f:c5:bd:b5:cb:a6:
21:64:80:97:a7:fc:75:fe:05:1f:ea:fe:1b:8f:ae:91:64:c1:
ea:6d:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org