Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/49KsOUUG1bVpjnQFodWQVQ0FNYY.roa
File: 49KsOUUG1bVpjnQFodWQVQ0FNYY.roa (raw, json)
Hash identifier: idNQal2Brhly/0Tlryqpi7Tka4okv+dEnXNA0H7ANk4=
Subject key identifier: E3:D2:AC:39:45:06:D5:B5:69:8E:74:05:A1:D5:90:55:0D:05:35:86
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 035E2101
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/49KsOUUG1bVpjnQFodWQVQ0FNYY.roa
Signing time: Sat 01 Jan 2022 04:57:35 +0000
ROA not before: Sat 01 Jan 2022 04:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49114
IP address blocks: 185.220.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56500481 (0x35e2101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Jan 1 04:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3d2ac394506d5b5698e7405a1d590550d053586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:18:3f:bc:cb:04:72:e1:85:31:25:7d:e7:
69:7a:65:2b:db:4f:a5:81:a9:50:0b:bd:0d:05:36:
68:a1:72:3e:41:18:49:8f:91:a7:d3:25:2f:3c:10:
ff:f6:a2:a2:82:ab:aa:17:53:5c:11:c3:5b:7c:ed:
85:92:be:ee:2b:05:94:59:e3:ea:b9:9f:68:34:1b:
f9:62:47:ca:ad:f4:34:d6:e7:f2:3f:ca:71:99:2d:
fc:f1:03:ac:cd:66:75:cb:b2:e1:45:2c:dc:2c:a2:
1a:fa:1d:18:48:6f:a4:37:2a:d7:2c:ac:0c:85:36:
4f:d1:df:02:46:73:32:2d:b0:d1:15:2b:92:2b:f7:
9c:25:9e:ef:5e:ca:38:39:8d:03:4c:c6:26:01:80:
18:bb:dd:9c:94:7d:86:e5:f6:3f:2a:ba:8e:98:5c:
9f:14:f3:78:53:f4:29:7c:05:33:71:ad:b3:bb:0e:
46:d8:46:13:7b:fc:e7:c7:14:f6:aa:eb:b1:67:a1:
7a:48:4d:0b:e4:69:25:3c:62:aa:c0:18:6e:59:fa:
19:20:fa:d0:cf:05:9e:4c:b6:8f:d5:de:c9:69:f4:
e9:8d:b1:e5:ea:4f:3c:29:6b:1c:13:61:27:c4:0d:
b9:e2:ee:42:a6:cb:43:51:a2:cd:6e:b0:92:77:d1:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D2:AC:39:45:06:D5:B5:69:8E:74:05:A1:D5:90:55:0D:05:35:86
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/49KsOUUG1bVpjnQFodWQVQ0FNYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.81.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a4:d2:1b:fe:23:9f:08:66:9e:f0:c6:2e:af:9f:cd:8e:03:
c8:11:4f:4b:03:71:77:f0:ca:ea:3e:2a:18:25:bf:86:a9:73:
4f:49:e3:b7:10:38:8f:65:4d:e1:ef:5d:b2:09:6f:fc:ae:31:
ef:97:b1:d1:19:fc:6e:9a:09:06:96:f2:2e:a0:db:c7:bd:8e:
df:54:1d:d6:88:71:89:84:df:c1:02:c5:44:04:fb:93:02:60:
3d:8d:6e:40:3c:1a:f2:6d:24:dc:66:ef:f4:b7:70:7b:0e:70:
0c:9d:16:a3:f9:78:9b:33:5b:2b:a4:6d:9e:68:8e:db:b3:dd:
35:1e:48:d5:05:7c:ff:a1:c6:b5:8b:85:80:b5:f9:59:30:8c:
41:44:b6:40:10:8a:ec:68:f1:e8:eb:13:f7:bf:fc:df:6d:2c:
83:b0:af:b7:3f:13:04:a4:19:70:b5:a6:25:6c:5e:b9:1d:13:
9a:49:de:37:a7:ad:40:1f:23:9e:cd:d2:26:2b:e9:e1:a5:fd:
5a:bf:90:8f:d6:9f:35:c5:af:5b:2a:22:89:67:ab:5b:7f:91:
3a:7f:4a:95:9b:1c:f7:75:26:ae:c9:ef:15:ca:dc:64:c5:96:
07:c2:15:b0:e7:99:39:3c:66:ea:bd:1d:56:b8:1e:f1:db:55:
67:25:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:36 2023 by rpki-client on console-fra.rpki-client.org