Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/Zqt2a6Ae0Dt-uODR5rcEpHkJ5RE.roa
File: Zqt2a6Ae0Dt-uODR5rcEpHkJ5RE.roa (raw, json)
Hash identifier: WF/7L7WJFDrj/dMSFsfYQE8/XsSsQRa1kQeKFOS6rhQ=
Subject key identifier: 66:AB:76:6B:A0:1E:D0:3B:7E:B8:E0:D1:E6:B7:04:A4:79:09:E5:11
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 031D68AF
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/Zqt2a6Ae0Dt-uODR5rcEpHkJ5RE.roa
Signing time: Sat 01 Jan 2022 08:56:33 +0000
ROA not before: Sat 01 Jan 2022 08:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212978
IP address blocks: 185.50.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52258991 (0x31d68af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Jan 1 08:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66ab766ba01ed03b7eb8e0d1e6b704a47909e511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:70:f2:b8:da:d1:2b:96:7c:f1:3f:a0:09:
d2:77:f1:3d:b0:0c:3b:ff:0d:f7:04:5e:fd:2b:86:
81:4e:9b:7c:1a:83:8b:23:16:ff:37:93:9e:fa:ee:
bf:fe:4c:e4:3a:90:ae:f7:ae:fe:d4:4c:f7:a3:cc:
cc:2e:da:2b:4f:03:0d:57:4c:58:0e:35:09:42:41:
06:1a:b7:44:d5:79:bd:26:2d:6b:e2:c9:ff:03:87:
96:8e:10:f1:df:44:07:8d:32:cd:0f:ee:c5:79:79:
d0:56:6e:b3:be:33:31:fb:90:7e:8f:bc:78:6f:0b:
3e:0d:93:1c:1a:3f:ed:db:69:61:62:a1:06:c5:82:
44:eb:88:5f:a7:de:2e:46:d3:8e:c0:4c:f9:6a:5e:
0f:7c:ee:be:85:32:39:21:83:a8:0f:70:63:7a:d5:
eb:10:b3:da:a0:6d:37:9b:c0:35:d7:70:fa:d2:7b:
74:f6:43:dc:7a:e2:4b:2e:51:86:dd:93:51:9c:b4:
7b:47:a0:f9:89:a5:e2:93:bc:58:8d:44:8a:9d:bb:
89:cf:67:5c:5b:5f:c5:0f:90:18:0f:1a:14:44:de:
9d:9a:8d:cc:3a:fd:cc:cf:ce:09:b3:b7:40:e2:67:
20:fa:76:3e:e7:81:9e:de:2d:e4:7c:fc:31:e1:52:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:76:6B:A0:1E:D0:3B:7E:B8:E0:D1:E6:B7:04:A4:79:09:E5:11
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/Zqt2a6Ae0Dt-uODR5rcEpHkJ5RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.36.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:2d:90:bd:dd:69:30:cc:c5:45:7d:23:a4:28:01:52:0f:a8:
94:f4:ae:5e:f5:3e:05:15:ea:90:4f:57:28:ac:38:3a:5e:08:
d9:6f:7f:f9:b6:55:1a:e8:f1:3d:9d:4d:2a:73:5e:6a:fd:f4:
80:5b:21:28:32:4a:e3:9c:9d:17:1a:74:40:0d:d0:8a:66:9c:
9c:f6:c3:66:5f:79:c8:62:c4:e5:69:ea:6f:fb:64:be:c3:14:
0a:fd:dd:06:d1:f8:83:10:6c:0d:9c:a4:e0:1b:ba:06:e7:25:
19:58:79:a7:0a:dd:28:94:2d:3d:f4:db:cd:16:df:87:1f:57:
f3:4a:38:c0:68:a6:30:3b:ce:ee:dc:92:d5:e2:59:78:39:d8:
d9:15:57:fb:13:4d:cb:d7:4b:99:7b:2f:98:9f:92:b6:36:1a:
0b:32:80:ee:61:b7:46:3f:db:6a:a2:79:e8:2a:54:3e:20:1d:
a4:c4:2f:2b:3a:24:e9:92:23:99:2e:75:9a:04:e5:d3:fc:63:
e8:bb:25:8b:93:d0:8c:75:a9:0a:da:4b:03:c8:0b:95:0f:c6:
48:41:e2:68:d8:0f:25:c1:fc:43:00:bd:71:35:b8:7b:91:86:
e2:1d:4b:68:d7:43:7c:df:7a:73:7e:d0:8c:ae:f0:de:87:83:
a2:ae:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:24 2024 by rpki-client on console-ams.rpki-client.org