Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/50PWcEv4sw73pBDTjRIefQ4RFy0.roa
File: 50PWcEv4sw73pBDTjRIefQ4RFy0.roa (raw, json)
Hash identifier: z13YQxoou099PfPigzVZszxrgzKCm+I9mlUQwMbAuf0=
Subject key identifier: E7:43:D6:70:4B:F8:B3:0E:F7:A4:10:D3:8D:12:1E:7D:0E:11:17:2D
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 08A20E35
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/50PWcEv4sw73pBDTjRIefQ4RFy0.roa
Signing time: Thu 14 Apr 2022 11:59:47 +0000
ROA not before: Thu 14 Apr 2022 11:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.128.112.0/24 maxlen: 24
185.128.113.0/24 maxlen: 24
185.128.114.0/24 maxlen: 24
185.128.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144838197 (0x8a20e35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Apr 14 11:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e743d6704bf8b30ef7a410d38d121e7d0e11172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:f4:6f:08:9d:bd:23:cf:f7:aa:05:a6:3a:
fa:16:4c:69:17:de:af:7f:75:ee:e1:f4:a0:90:cd:
bd:88:a8:00:9f:53:00:78:da:6c:12:9d:a7:51:89:
e5:50:ef:48:5a:30:ab:8e:86:45:df:9e:d0:e5:ba:
4d:e4:9f:2a:51:2e:06:5b:94:b2:ce:e4:5f:0b:48:
0e:2e:57:d7:50:20:a5:b8:69:df:5d:61:12:d4:d6:
96:1a:fa:e6:e4:3a:fb:cb:05:5f:76:f2:88:3f:61:
27:d1:59:e3:79:c0:65:c2:5c:2f:70:4e:71:a5:13:
ef:dc:4e:b4:02:74:a1:b3:6c:34:4c:42:4b:f7:f4:
30:25:db:80:56:f0:5f:9f:08:26:57:5f:1a:41:2e:
29:fe:03:82:ec:51:37:58:a3:41:87:f3:fb:c5:25:
93:4e:c8:a3:27:26:7c:59:3b:b5:d0:c0:1d:e8:39:
3b:fe:8d:f3:bc:50:3e:81:ba:d5:cf:af:40:52:c5:
66:c3:9f:0a:55:72:d0:23:f9:56:71:1d:dd:95:3f:
2f:9f:6c:5d:d9:9c:ca:38:62:a1:3b:03:1d:2e:be:
24:02:8d:0f:fa:c4:a9:5d:04:2a:b7:d8:92:9a:54:
cf:40:b2:d0:cc:4e:cf:ec:fe:25:bd:79:22:f4:09:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:43:D6:70:4B:F8:B3:0E:F7:A4:10:D3:8D:12:1E:7D:0E:11:17:2D
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/50PWcEv4sw73pBDTjRIefQ4RFy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:5c:4b:49:94:b0:07:5a:eb:c5:b4:b8:92:be:c4:8c:14:3d:
f7:1f:e5:f5:fd:eb:ba:e9:74:69:c1:49:5d:95:ab:43:2e:a0:
bf:dc:03:89:4d:55:16:25:eb:a4:71:23:85:8a:8f:77:4d:2c:
94:b9:ac:5e:24:7f:21:ff:e5:ac:7f:fb:73:57:c9:68:19:a9:
90:cf:82:af:03:82:45:7e:ac:42:8d:42:ea:3a:9b:31:a8:6a:
d1:72:d2:09:62:86:ea:1e:51:03:25:0c:62:01:d5:c7:7e:22:
89:cf:9f:15:e2:3e:a0:ad:fd:5f:20:e5:c9:5d:db:8c:c9:e5:
07:5f:14:d4:6e:d5:d2:8a:fa:a8:6a:eb:20:f7:41:ae:d4:56:
39:1c:87:1c:06:58:13:79:d0:c1:c1:b3:28:5f:aa:ac:60:1a:
09:45:64:0c:d7:17:05:0e:70:0e:10:82:e4:b2:59:bf:ad:65:
22:5b:54:25:e2:1b:0b:6b:25:0c:05:97:8d:a5:77:87:cc:6b:
7d:37:95:02:1e:c3:00:90:9d:8d:77:9f:75:6d:91:6a:a9:ce:
2d:f3:f6:1b:4f:3d:e4:e8:3d:3d:d4:fc:cc:02:c7:dc:30:cf:
13:44:fd:7f:f6:4b:50:c5:7f:b6:32:d8:03:bd:1b:a6:a6:ca:
2c:f8:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:50 2023 by rpki-client on console-fra.rpki-client.org