Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/SCryXp_OnNg6MOEDPFOTgBtzGn4.roa
File: SCryXp_OnNg6MOEDPFOTgBtzGn4.roa (raw, json)
Hash identifier: ZoZ9VhPKGWH0JSQM0+h2S1Za4xQj4YZjHKwGmsIKi3Q=
Subject key identifier: 48:2A:F2:5E:9F:CE:9C:D8:3A:30:E1:03:3C:53:93:80:1B:73:1A:7E
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CEF6F1F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/SCryXp_OnNg6MOEDPFOTgBtzGn4.roa
Signing time: Tue 19 Apr 2022 14:25:36 +0000
ROA not before: Tue 19 Apr 2022 14:25:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.163.68.0/24 maxlen: 24
194.233.150.0/24 maxlen: 24
194.64.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217018143 (0xcef6f1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 19 14:25:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=482af25e9fce9cd83a30e1033c5393801b731a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:d7:09:cc:97:16:22:2a:e0:d8:34:5f:0a:
2f:12:f8:b3:5d:4c:ed:0d:5e:dc:83:84:7b:82:46:
50:fe:24:03:d4:60:66:bb:cc:23:7c:98:d9:14:2f:
2e:91:6f:ef:f8:21:ea:de:cd:f4:3b:d0:3e:60:13:
d3:de:73:e1:90:d7:c9:41:af:68:9b:80:b5:55:35:
89:4c:c0:2d:eb:46:b0:1d:fa:60:28:c5:4f:6f:84:
ea:9c:35:21:8e:b0:b1:d6:f9:49:22:25:1f:3d:65:
0f:00:3e:c1:45:05:b4:c3:58:89:9d:0f:ef:e2:23:
7a:e4:13:01:db:3d:2c:4e:ad:df:96:4a:0d:9d:96:
0f:c0:36:b7:30:b6:18:bf:4a:7e:27:88:05:31:ee:
09:18:ff:ae:d4:a2:e9:27:94:92:ff:8a:bb:82:e2:
f5:d0:77:64:26:c5:83:cd:bc:cf:ae:76:d9:d0:e6:
83:0a:4d:48:5b:03:7d:b5:e3:e6:f6:10:47:e1:7f:
2e:a6:00:3c:4b:10:09:ac:ae:6b:9f:1c:9b:b5:2a:
de:b3:f5:24:72:5b:1b:94:91:08:29:8f:c5:5c:53:
3f:d1:be:8b:fa:e1:16:8b:41:fe:2b:f8:a3:50:bd:
3d:73:25:f0:b6:ae:f0:3a:a5:46:6c:2d:74:50:db:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:F2:5E:9F:CE:9C:D8:3A:30:E1:03:3C:53:93:80:1B:73:1A:7E
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/SCryXp_OnNg6MOEDPFOTgBtzGn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.233.150.0/24
Signature Algorithm: sha256WithRSAEncryption
88:62:b4:a9:27:a2:13:72:0a:3f:96:fb:04:71:a3:2a:53:39:
34:34:05:d1:10:2b:90:ab:b7:2c:f8:08:07:cb:8c:14:ab:18:
61:6f:e9:ac:9d:a8:7a:a2:43:dc:d7:21:38:f4:0b:f9:4f:1b:
85:e9:58:22:58:5f:38:51:1b:2a:12:e4:c2:58:32:86:de:19:
6d:80:c8:1d:59:c2:49:69:41:4d:b0:fa:5d:0b:ca:6e:8e:ad:
c2:80:bb:76:47:2e:2f:c4:2c:a4:dd:4f:36:1e:cd:97:c6:eb:
f9:29:d4:34:db:1d:15:59:8c:82:87:a3:4d:d8:39:2a:f8:1a:
30:be:23:99:8d:97:88:b0:9c:d5:54:1b:60:fd:61:ec:7d:e2:
9f:e4:ab:ed:39:b7:45:25:3c:90:3c:61:6a:f9:a9:48:c0:d4:
3a:ce:d2:22:d9:ed:8b:f2:a9:2e:6d:a9:6c:12:46:ab:b7:cd:
ba:c6:af:18:1b:bf:3d:16:eb:85:4c:90:8c:c4:0e:50:34:59:
2a:c5:ca:d6:3a:94:2c:08:df:b0:dc:b2:bf:6a:e0:e9:50:f8:
87:ee:16:df:29:6d:bc:f5:3d:bd:95:e5:8c:ba:bd:12:b4:c4:
c7:74:32:49:3b:ff:c7:cd:95:10:b8:bd:04:ad:f8:14:f1:a5:
24:5e:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org