Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/RUm1oCNx4njdPyUaCMifGQI-jfA.roa
File: RUm1oCNx4njdPyUaCMifGQI-jfA.roa (raw, json)
Hash identifier: ppolI6OSsOqPLcumVC1cV9fHdqeDlCd209ZCnsnp02M=
Subject key identifier: 45:49:B5:A0:23:71:E2:78:DD:3F:25:1A:08:C8:9F:19:02:3E:8D:F0
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 395349B3
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/RUm1oCNx4njdPyUaCMifGQI-jfA.roa
Signing time: Thu 10 Feb 2022 09:01:10 +0000
ROA not before: Thu 10 Feb 2022 09:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60025
IP address blocks: 185.24.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961759667 (0x395349b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 10 09:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4549b5a02371e278dd3f251a08c89f19023e8df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:7b:eb:6d:f9:a2:e5:ce:ef:08:4a:ad:c2:
aa:c5:54:de:4b:3a:24:e9:0d:bd:70:eb:54:c1:95:
be:ba:cc:cd:a4:cc:ac:5e:24:77:f9:a8:62:48:87:
48:01:0a:04:f0:6b:b1:4f:64:9e:9c:7c:32:6a:36:
f9:7b:98:e1:8e:59:38:c4:90:58:1f:cb:53:1d:48:
99:cf:15:27:02:1a:da:21:5d:4b:8a:02:7c:20:49:
51:77:0f:86:b8:b1:a5:c2:e2:39:7f:8c:63:2f:65:
5c:7c:d2:13:df:1a:7e:46:10:58:04:83:c8:05:f6:
3a:66:42:43:01:dd:6c:9a:74:16:ba:88:3c:68:0e:
ce:d3:7f:72:b5:10:69:2d:e5:97:61:46:89:b9:7a:
a4:6f:a9:7e:6a:77:60:ba:43:14:e2:a0:cf:dc:ff:
79:2c:08:7f:c4:f3:54:b7:bd:a2:ab:4c:e8:15:7a:
06:6e:3a:39:81:94:3b:54:f3:7a:98:cb:73:bc:d5:
b9:77:0f:c0:1c:42:2b:78:1a:e6:f1:46:22:9a:13:
4e:b6:f6:f6:22:02:e8:40:94:3d:47:05:ca:3a:0b:
b3:02:ba:ae:62:aa:6a:cb:08:39:11:f6:5d:b2:0a:
8f:f3:da:49:8b:dc:cf:43:cc:35:dd:21:c0:e5:28:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:B5:A0:23:71:E2:78:DD:3F:25:1A:08:C8:9F:19:02:3E:8D:F0
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/RUm1oCNx4njdPyUaCMifGQI-jfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.149.0/24
Signature Algorithm: sha256WithRSAEncryption
95:8d:e9:3c:85:63:00:bb:73:e7:45:6d:5b:10:8e:88:0f:a1:
0c:da:4a:22:86:3a:4c:ef:6a:1c:5d:b8:a4:f8:3c:47:9a:26:
ac:5f:5a:26:54:58:39:41:fd:7e:ae:4c:29:58:3b:f7:39:0a:
b6:14:8d:af:08:da:3e:2a:0b:8f:3c:c8:45:23:22:bf:f2:55:
21:55:0b:71:a1:66:b8:11:e7:2a:ba:6c:8c:11:e6:aa:d0:bd:
af:77:3f:e6:fa:fe:55:76:99:09:f6:e7:58:f7:8b:95:a7:ad:
c3:1e:b0:af:aa:aa:13:cb:a6:66:42:e1:06:8e:51:fb:cd:f9:
c6:38:0d:9b:5f:b8:49:6c:44:ab:d0:3c:4c:2a:e6:4a:46:16:
ec:f1:d7:e5:14:9c:55:68:21:3b:70:2f:c0:d7:ab:5d:d0:3e:
c3:84:a9:22:67:3a:39:3a:6b:7d:f4:47:93:69:75:18:c7:ac:
2a:fe:4b:de:a5:a1:15:36:c9:c4:ba:37:0a:32:63:a9:d5:71:
4e:00:53:ca:8f:5a:a6:7a:9c:ee:61:73:30:2b:df:06:99:3d:
e7:b9:2c:99:46:f4:d8:80:5d:5b:ff:9d:13:c7:33:ac:4f:4d:
ce:dc:09:19:c6:48:db:ce:65:29:7c:c8:34:9d:b5:d8:9f:44:
68:dd:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org