Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/SdjQyMh2-rYPqPY7WRmn5aOACsk.roa
File: SdjQyMh2-rYPqPY7WRmn5aOACsk.roa (raw, json)
Hash identifier: D0c5jfJnwAMR1KVE6JpInAjAUXg6VLgOtKC2ffkNBJ4=
Subject key identifier: 49:D8:D0:C8:C8:76:FA:B6:0F:A8:F6:3B:59:19:A7:E5:A3:80:0A:C9
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 0A925BD4
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/SdjQyMh2-rYPqPY7WRmn5aOACsk.roa
Signing time: Sat 01 Jan 2022 04:51:15 +0000
ROA not before: Sat 01 Jan 2022 04:51:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200069
IP address blocks: 185.250.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177363924 (0xa925bd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Jan 1 04:51:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49d8d0c8c876fab60fa8f63b5919a7e5a3800ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:ce:07:91:09:ae:11:33:0d:06:e9:c3:b4:
d2:07:08:f8:a9:5f:28:b8:9d:0d:ec:72:e2:d9:e2:
73:0a:d4:b1:43:29:26:75:83:c8:0f:56:bc:3e:63:
45:b8:7e:0f:ca:17:9e:0c:3d:07:0b:5f:45:f8:db:
8d:ab:cf:de:61:f8:42:0f:4f:bd:15:3d:e6:17:53:
85:8f:51:17:b4:48:cf:60:fe:5c:55:73:25:99:74:
14:e3:34:09:75:ee:96:46:29:50:37:fa:ec:03:5d:
98:5c:e3:54:56:5b:a2:ff:d0:25:c3:0c:d2:55:62:
eb:ce:dc:2d:7a:f2:99:cc:7e:95:7a:be:9a:ed:36:
1e:78:01:11:2a:81:25:68:84:0f:de:90:33:12:e6:
2f:7d:4b:53:1c:e2:b9:3d:e7:d4:9a:0c:54:d0:1c:
ea:fb:70:9a:90:f8:ea:28:2c:ae:30:10:0d:2e:6b:
7d:d0:1a:70:65:b5:25:ed:82:77:01:2d:96:f6:15:
2a:d5:be:d8:39:55:48:18:3f:82:bf:f9:a1:c6:d6:
24:d0:be:df:4b:5b:c9:7a:81:cb:35:98:d4:2d:cc:
12:83:d9:fe:31:1f:4a:e6:27:ff:10:5e:96:30:46:
60:cc:88:bb:63:db:20:26:82:44:82:88:39:b4:5b:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:D0:C8:C8:76:FA:B6:0F:A8:F6:3B:59:19:A7:E5:A3:80:0A:C9
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/SdjQyMh2-rYPqPY7WRmn5aOACsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.236.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c1:2f:1d:af:b5:32:c3:1b:1a:81:98:51:fa:0c:e4:d0:c7:
4b:2e:eb:88:f3:94:c5:e6:19:97:74:f3:bd:b4:82:b6:ed:ab:
57:d9:27:23:96:ba:66:de:4b:58:bc:69:ee:57:4c:af:18:3a:
c7:77:cb:28:84:eb:33:b6:b7:2f:5e:d7:39:b5:ff:72:9c:f7:
62:44:d6:c6:43:89:01:c5:04:9e:29:fd:87:7d:0d:d8:70:9a:
3f:40:bf:44:23:2a:f4:17:23:f9:8c:e0:fe:41:6e:68:6d:6a:
02:35:dd:ac:a2:a9:b9:51:15:5c:b8:74:47:56:9b:d7:e9:30:
f7:f5:de:b8:15:57:6e:02:b5:dc:2b:cf:c0:b6:38:1b:69:80:
94:e3:13:e6:4a:2e:64:09:50:b4:d5:4f:26:09:e7:6d:b8:2e:
51:a7:e9:71:81:b3:ca:30:a1:64:b7:32:8b:c1:3a:ec:3d:4c:
10:33:d6:79:e2:d2:0c:21:d0:13:e5:ba:0b:fa:20:a4:e9:c9:
2c:e5:69:1e:21:0e:01:dd:be:67:69:ab:bd:1a:6a:92:f1:ab:
7d:0d:6f:40:4b:e8:18:fa:79:c8:d8:20:15:11:51:42:a8:1e:
1d:cb:59:df:32:e4:92:0e:f0:5a:b3:8e:fd:cd:6e:28:50:d2:
06:6e:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:17 2024 by rpki-client on console-ams.rpki-client.org