Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/pnCMHWJP0HPhfNtlLNz9e7H645A.roa
File: pnCMHWJP0HPhfNtlLNz9e7H645A.roa (raw, json)
Hash identifier: w17FwId5WfNPkqt7Fqj6/8q0L+HLvr6oG+r2stg0lcc=
Subject key identifier: A6:70:8C:1D:62:4F:D0:73:E1:7C:DB:65:2C:DC:FD:7B:B1:FA:E3:90
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01850B093F4B080DCE345B92C6144686900F
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/pnCMHWJP0HPhfNtlLNz9e7H645A.roa
Signing time: Tue 13 Dec 2022 10:30:33 +0000
ROA not before: Tue 13 Dec 2022 10:30:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 194.50.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:09:3f:4b:08:0d:ce:34:5b:92:c6:14:46:86:90:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Dec 13 10:30:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6708c1d624fd073e17cdb652cdcfd7bb1fae390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:2b:93:59:90:91:bb:1f:a1:58:9b:3b:08:
c9:a6:91:6c:ac:58:6d:72:a3:d9:18:93:a0:c3:73:
2a:bb:3a:47:25:91:36:c4:e0:dc:16:a3:08:b1:4a:
f3:25:4a:20:59:17:91:26:ee:69:0f:ad:f8:5c:61:
38:3c:65:0b:d5:d3:8e:5d:46:77:e3:65:7e:31:9a:
ec:09:e9:96:22:30:32:8f:cf:10:75:7e:4f:87:50:
b5:ca:23:22:84:ba:a2:cf:a3:35:91:f3:c6:06:f9:
ae:57:d5:ac:bf:44:cb:c2:86:26:a2:71:74:3f:b9:
60:30:fd:44:9f:37:d7:33:71:50:13:fc:00:b9:cd:
04:5e:59:4d:a5:96:18:67:44:a9:82:61:4d:71:b9:
a5:dd:54:c9:9d:20:43:aa:57:84:c4:9c:b2:f8:98:
d9:49:e0:29:4a:78:49:82:e9:f4:28:a1:b2:da:74:
5b:4a:94:92:1f:4d:28:d4:6f:bd:2c:11:6f:c5:1e:
4d:ba:c3:3c:6d:66:b4:fd:7f:dc:d5:d3:31:1d:86:
45:cb:b4:4c:e3:df:fe:3a:1b:ac:50:c8:60:fd:1f:
3a:0c:0f:bd:b9:00:74:c2:64:1e:36:ae:96:ca:09:
ae:bf:0c:d7:71:35:8a:5d:a3:4b:c9:77:b4:52:8a:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:70:8C:1D:62:4F:D0:73:E1:7C:DB:65:2C:DC:FD:7B:B1:FA:E3:90
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/pnCMHWJP0HPhfNtlLNz9e7H645A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.52.0/24
Signature Algorithm: sha256WithRSAEncryption
87:de:7a:50:2f:fb:62:12:76:e8:3a:a7:11:ff:32:28:23:b3:
d1:41:47:d8:3c:64:84:74:ac:3f:49:3f:b2:52:bc:00:63:e5:
8f:26:08:5f:17:58:4e:63:31:c4:07:f9:4f:16:e9:76:b2:d4:
16:23:9d:7a:98:f8:76:b5:2e:43:f1:56:d7:df:f4:95:47:82:
79:b2:53:7b:9b:29:0c:15:82:e8:20:87:73:1f:1a:1f:cb:63:
a4:3e:d9:f7:dc:be:b6:03:1e:1c:15:c5:ef:f5:a3:96:8c:dd:
4d:e6:2a:4b:aa:b0:a9:b4:ec:c6:9b:89:bb:95:51:34:e4:9d:
45:ee:47:2c:c8:29:91:8d:5f:81:11:ac:f6:2a:9d:fb:ec:05:
89:9a:a6:da:f9:14:3d:e0:e5:a7:d2:84:c2:8c:bd:f7:b0:9b:
4a:a3:b5:f8:e8:16:4b:a9:59:9e:85:3c:d0:64:b5:84:fd:91:
49:57:6f:3d:94:3c:6d:bc:ff:ef:22:05:42:7c:e5:3b:56:94:
c9:bf:69:ba:83:4b:c6:f7:fb:a6:c0:56:cf:be:84:f7:73:41:
34:e4:72:2b:ae:d4:2f:57:a6:34:d9:bd:ac:61:d6:93:12:79:
b2:7a:f2:74:b1:b5:b3:3d:a7:22:61:3e:3f:2a:dc:f6:24:6f:
64:76:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org