Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/REVwXzjQMy_5YKIxqVjPYdqI54U.roa
File: REVwXzjQMy_5YKIxqVjPYdqI54U.roa (raw, json)
Hash identifier: ZbPbbtzKrezv+27f3MxLRFsrXKBvxujsteJgDC1Sn5Q=
Subject key identifier: 44:45:70:5F:38:D0:33:2F:F9:60:A2:31:A9:58:CF:61:DA:88:E7:85
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 138948CB
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/REVwXzjQMy_5YKIxqVjPYdqI54U.roa
Signing time: Sat 01 Jan 2022 05:56:19 +0000
ROA not before: Sat 01 Jan 2022 05:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202822
IP address blocks: 185.147.50.0/24 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327764171 (0x138948cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4445705f38d0332ff960a231a958cf61da88e785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:63:ba:66:ff:38:cc:8a:d8:d9:60:b2:5b:
d5:3e:e3:36:08:c3:0e:f3:a3:68:42:b4:af:1c:0e:
7b:94:f1:fa:17:3a:7c:62:9e:23:da:2f:3d:a2:93:
33:08:a8:b1:9e:ac:8b:8f:bb:24:11:85:8b:28:d2:
ad:6e:1b:3d:09:65:de:26:d1:55:a6:f2:4a:76:41:
a0:e5:a6:41:c2:c5:de:31:92:0f:f2:65:ba:0d:9d:
42:ae:80:73:2a:f1:65:b3:ec:22:d4:e6:ef:d1:2f:
17:c9:ff:f9:dc:55:96:8a:db:3b:9c:e6:ed:1b:f4:
f6:ab:18:37:ad:f2:2f:5a:97:53:5a:11:d9:45:60:
15:ab:41:d5:a5:78:7a:9f:ac:6f:50:b5:9c:21:cb:
cd:0e:4c:51:eb:65:57:36:b1:bd:47:16:78:d4:19:
7f:29:fd:8c:03:2e:06:75:c1:f5:77:f5:f9:57:23:
b7:e6:ac:5b:a0:b7:16:83:d0:79:46:52:a1:7d:ee:
5f:15:11:0a:3e:1e:90:fd:b8:00:30:7d:4d:79:7b:
77:00:2d:d1:49:81:60:61:ae:48:06:32:9e:9e:f6:
d9:38:6e:a2:49:7e:a5:62:dd:91:d1:6d:d2:53:26:
0c:be:12:2e:7b:7d:d0:fb:12:5f:b2:73:d3:0c:de:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:70:5F:38:D0:33:2F:F9:60:A2:31:A9:58:CF:61:DA:88:E7:85
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/REVwXzjQMy_5YKIxqVjPYdqI54U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4a:62:61:62:b8:64:97:38:c1:3a:66:27:0d:8e:ad:9e:80:
26:95:c2:3d:9e:96:98:48:e5:4d:ab:d8:6b:b8:e6:63:20:d8:
15:c5:0d:65:54:a6:e1:ed:a6:03:63:64:00:06:d5:3f:a1:88:
39:e8:20:93:34:88:58:a3:e8:8e:08:b5:65:fc:e0:ea:07:d3:
3a:eb:52:61:4b:fb:71:70:0f:c6:a2:11:ce:ab:d2:35:d6:2c:
0b:51:86:4c:11:df:ce:19:0a:6b:93:5f:45:6e:e2:f5:6e:d1:
42:ad:59:3b:65:9a:21:e4:d3:f5:03:cd:39:ab:69:69:27:ac:
09:59:7f:65:ae:21:86:39:fd:a0:c0:e5:a6:1c:38:42:1c:a2:
06:a2:65:a3:03:d5:76:61:8f:69:bd:2c:69:7c:95:b9:f9:89:
8f:d9:99:b2:9d:09:58:6f:15:0d:c8:15:2d:67:32:47:6c:60:
78:65:01:8d:40:7b:61:da:cf:b1:59:20:39:db:f5:6b:5c:04:
67:b9:c3:72:e2:b2:85:83:c7:20:79:a8:cb:05:78:c0:7d:80:
6e:5b:3d:bb:06:99:c6:08:14:72:d0:9c:a4:90:80:b9:c6:bb:
81:39:e7:af:60:61:30:4e:88:f3:7f:6e:00:7b:0a:7b:b1:d8:
00:1d:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org