Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tR0A_6Hgw2n26olbXkM9_L07oLQ.roa
File: tR0A_6Hgw2n26olbXkM9_L07oLQ.roa (raw, json)
Hash identifier: KtZVeANh/LtPy2UH2mxWlKWHoQHzB2wsO9Z05QHBL2U=
Subject key identifier: B5:1D:00:FF:A1:E0:C3:69:F6:EA:89:5B:5E:43:3D:FC:BD:3B:A0:B4
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01837A152150CB113AA3745975EF4CB35EDC
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tR0A_6Hgw2n26olbXkM9_L07oLQ.roa
Signing time: Mon 26 Sep 2022 13:55:48 +0000
ROA not before: Mon 26 Sep 2022 13:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203025
IP address blocks: 194.50.188.0/23 maxlen: 23
194.50.184.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:15:21:50:cb:11:3a:a3:74:59:75:ef:4c:b3:5e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 26 13:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b51d00ffa1e0c369f6ea895b5e433dfcbd3ba0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:6c:68:d5:8a:34:01:24:85:3f:3a:8e:a0:
87:6e:93:ca:50:d4:2e:86:cf:42:34:13:a8:4f:3d:
f7:b7:f5:21:9d:42:33:93:5e:21:3f:83:ca:3f:79:
4b:bb:33:1f:7e:f0:54:81:49:a6:37:27:79:a9:34:
f4:cc:69:63:4d:34:9a:24:29:0d:fe:f7:92:d8:49:
03:e2:89:e6:ab:89:5c:8b:7b:3f:19:79:df:8c:9e:
9d:22:4a:5c:cf:53:4c:b2:ca:23:ef:75:2d:43:a1:
6c:fc:87:34:cb:08:c8:6e:2b:3d:0c:68:7a:26:0d:
31:12:01:9e:93:1c:c7:91:7d:b5:d5:3b:48:55:ad:
e8:58:4b:c3:73:3b:04:ac:4e:e1:ff:bd:70:1b:2a:
16:c5:a4:c2:0e:ef:52:86:fc:bb:fa:24:55:46:20:
c8:2a:6f:0b:4c:dd:cb:93:a0:48:42:59:8e:c2:89:
85:0a:17:b2:aa:a4:c1:85:b4:b3:74:95:98:07:e8:
67:02:76:4d:bb:dc:09:e7:74:99:a7:32:e7:ec:84:
83:f9:06:95:d8:57:25:e4:e9:ca:57:52:25:d7:35:
7d:14:62:6a:30:ed:12:91:9f:a1:95:de:ab:9c:b6:
2d:72:43:74:d8:ea:dc:39:cf:aa:f0:26:5c:e9:87:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1D:00:FF:A1:E0:C3:69:F6:EA:89:5B:5E:43:3D:FC:BD:3B:A0:B4
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tR0A_6Hgw2n26olbXkM9_L07oLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.184.0/23
194.50.188.0/23
Signature Algorithm: sha256WithRSAEncryption
64:45:47:46:20:14:b4:a6:f8:ef:be:a1:2c:5c:03:5d:a5:0f:
2c:7e:cf:74:13:9f:b4:ee:0c:1f:9c:c2:6c:f2:d2:f1:c7:b1:
b9:9d:2b:c8:83:67:56:86:43:48:e4:51:d1:e7:d4:e9:c5:53:
80:3a:e0:28:e4:35:6a:03:5b:fd:d2:49:12:3f:6e:bd:ad:5d:
d6:0a:4e:7a:b6:52:37:96:3d:8d:cb:93:f9:e7:bf:a1:63:6b:
cd:5e:78:74:8d:14:2b:bb:e7:75:14:00:cf:d9:9f:a6:2b:12:
f8:28:83:18:99:83:e3:dc:4f:4d:45:ff:1c:97:3e:b2:0c:bb:
dc:53:d6:cd:ca:98:c2:de:7f:58:09:7a:f3:92:bd:fb:38:9e:
73:37:92:1f:a4:f6:24:49:43:15:c4:e2:48:cc:18:a7:3f:e3:
1c:bd:2b:5b:b3:e4:1e:52:04:20:a5:b6:38:42:e8:b6:bb:cc:
ac:3c:0b:58:e3:74:a8:b6:e7:fe:0a:68:5d:a6:42:ab:bb:6b:
29:a1:c8:f5:51:cf:56:6c:e7:0e:f0:69:6f:f0:e2:33:49:d8:
39:de:54:bf:2b:b6:62:14:c3:c3:28:1c:aa:4b:3c:72:5c:67:
53:79:c7:4e:2f:87:d2:cf:c5:a4:04:da:ac:ca:f7:1c:2c:f8:
c1:88:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org