Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/DFH50UqPNxOwIdw9VGIhXeiuf7E.roa
File: DFH50UqPNxOwIdw9VGIhXeiuf7E.roa (raw, json)
Hash identifier: sI10JRr3HfiISgy0AhdpHTtCgCGC6lOpGixQ7Sh/Zy8=
Subject key identifier: 0C:51:F9:D1:4A:8F:37:13:B0:21:DC:3D:54:62:21:5D:E8:AE:7F:B1
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 029F20A2
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/DFH50UqPNxOwIdw9VGIhXeiuf7E.roa
Signing time: Sat 01 Jan 2022 01:59:41 +0000
ROA not before: Sat 01 Jan 2022 01:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49173
IP address blocks: 185.141.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43983010 (0x29f20a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Jan 1 01:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c51f9d14a8f3713b021dc3d5462215de8ae7fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:e4:ac:53:6f:8b:50:9f:2e:70:da:a8:5e:
5d:ce:c1:fa:18:26:47:0a:f9:f6:85:42:f7:10:ad:
3a:c3:6c:41:0b:68:cc:94:7e:16:b0:97:75:16:21:
6c:70:62:a1:98:39:02:0e:7c:f5:86:41:03:3e:cf:
cf:c2:7d:a4:27:0f:bf:14:42:10:1e:64:31:c5:6c:
c5:ce:fd:5a:7a:de:8a:c0:a2:66:d7:1f:41:fc:99:
ce:17:e6:51:68:26:89:4d:ac:35:f0:af:da:e5:66:
41:7c:64:5d:24:25:aa:77:19:39:14:fa:ca:a3:ca:
d5:c9:1a:2b:21:29:93:2d:5d:4c:a2:03:67:67:9b:
e6:50:85:6c:44:15:c5:c1:37:57:ca:fd:2e:0a:08:
28:f2:c2:29:27:8c:a1:46:79:fe:46:10:5b:95:f6:
21:4a:d6:f5:76:d4:c5:3a:e7:18:2a:ce:6a:be:09:
a3:02:91:78:d6:2a:9c:d0:d9:e7:bb:3f:da:41:4a:
ce:e5:45:36:0f:42:ea:18:39:36:e6:c7:eb:3d:3c:
a5:3c:f6:6c:02:98:73:1c:f1:76:62:ab:cf:0f:45:
3e:75:a1:f7:bb:bc:a3:90:49:e4:61:3a:1c:8f:8c:
3d:ec:06:3e:07:b0:b5:56:b8:2b:eb:0b:69:8d:1e:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:51:F9:D1:4A:8F:37:13:B0:21:DC:3D:54:62:21:5D:E8:AE:7F:B1
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/DFH50UqPNxOwIdw9VGIhXeiuf7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.240.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:1a:d7:44:43:56:ce:73:dc:86:61:38:66:2b:59:e7:3b:41:
c5:91:05:17:96:fe:55:b2:6e:77:4e:19:33:4c:43:99:9e:a1:
9f:c1:10:e9:77:63:c8:b6:85:3c:d5:76:94:fc:8a:0e:21:7b:
df:6c:66:47:c7:4e:e6:49:f1:db:66:bd:8a:02:77:36:38:46:
a9:a1:61:3b:72:05:90:de:7c:67:74:71:46:61:3b:69:a4:a1:
77:5a:e1:33:33:f4:71:2a:49:db:58:9b:7b:df:11:14:74:f7:
68:10:6d:c3:4c:f4:f1:c9:10:b3:5f:8a:24:7b:c4:0f:fa:20:
80:a3:0f:73:55:d6:98:30:9f:de:d6:54:d5:c6:6c:3f:90:09:
a2:ab:a8:10:6f:ba:85:d6:3b:b2:83:3b:7a:e4:11:28:c0:75:
d2:1a:0d:21:73:93:58:73:fe:2e:47:81:f3:1c:e1:4d:8a:f4:
95:51:23:7f:6f:44:05:7c:63:1f:1a:33:95:fb:50:e4:8d:95:
bd:04:84:ba:45:68:47:cb:c7:b6:91:07:46:fb:ac:f7:9e:f8:
6f:2c:8a:f9:0c:28:e9:74:ff:29:a9:06:27:53:d2:98:a2:78:
4f:7d:cd:65:0c:04:0f:44:ea:89:9a:dd:13:5a:b2:91:e1:15:
ec:a7:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:42 2024 by rpki-client on console-fra.rpki-client.org