Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/aCGj849zT16VVJtt0W_9hvbiDyk.roa
File: aCGj849zT16VVJtt0W_9hvbiDyk.roa (raw, json)
Hash identifier: ctFjBZOdkWRtejE12ZU77AFZrv2fty/iQeryGxDO/FY=
Subject key identifier: 68:21:A3:F3:8F:73:4F:5E:95:54:9B:6D:D1:6F:FD:86:F6:E2:0F:29
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 06A8C526
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/aCGj849zT16VVJtt0W_9hvbiDyk.roa
Signing time: Sat 01 Jan 2022 14:04:55 +0000
ROA not before: Sat 01 Jan 2022 14:04:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29256
IP address blocks: 185.151.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111723814 (0x6a8c526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: Jan 1 14:04:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6821a3f38f734f5e95549b6dd16ffd86f6e20f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:16:5f:f7:0d:63:cf:90:c6:64:b8:f2:70:
bb:4a:32:a1:8f:dc:a9:b3:e8:b9:ca:90:1c:d8:da:
43:8c:3f:3c:2a:b9:32:52:03:97:04:09:3b:c9:83:
6d:ef:1a:81:79:da:43:ad:f1:36:2a:ac:34:22:4f:
e5:cc:55:b3:dd:d4:5b:0e:ba:dd:e2:b8:25:7f:47:
f3:f4:a5:2c:4f:d5:f7:12:68:43:73:31:ab:dc:09:
58:45:14:9a:f4:3b:80:94:84:4c:94:6c:66:56:af:
98:2a:e8:b4:04:76:36:09:eb:a3:37:b6:18:fa:8e:
f9:03:6a:d6:be:eb:e6:2a:8a:84:61:a2:e2:92:78:
ca:41:19:a7:15:94:e4:d3:cb:2e:b8:15:c5:21:67:
9a:e5:6c:4f:25:03:0c:01:50:21:f3:10:6d:7c:f9:
81:e0:da:7d:a5:eb:7a:d1:04:e6:06:57:40:9c:d8:
0b:df:ac:df:32:60:c7:53:41:c5:50:cd:24:97:1a:
0b:7d:b8:b9:4e:28:fd:36:30:6b:c8:42:2c:35:2f:
47:f6:ea:96:a6:df:5f:39:6b:b5:0f:52:7e:f8:ac:
d4:bc:cd:eb:9d:14:d5:e4:be:aa:0a:29:a4:91:b4:
ff:0d:6e:24:59:89:fd:b9:7b:7a:59:ac:33:7a:e4:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:A3:F3:8F:73:4F:5E:95:54:9B:6D:D1:6F:FD:86:F6:E2:0F:29
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/aCGj849zT16VVJtt0W_9hvbiDyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:3d:97:49:8d:b1:a2:69:2d:c6:aa:9b:86:28:78:db:c2:55:
77:1a:eb:8c:d9:f5:a1:15:07:70:55:67:4e:5e:a3:5f:9d:dc:
29:71:9d:4e:39:84:80:b4:62:b5:3d:a2:02:3a:59:a3:54:09:
17:29:ab:d1:8f:c3:ec:63:57:4c:7b:5d:2d:6e:18:d5:bd:f6:
e5:ac:92:16:f1:31:cd:b3:33:0f:d3:77:66:18:dc:af:79:76:
33:fb:98:56:d7:3b:a9:be:8e:6e:53:91:93:b8:66:9f:9d:cd:
96:7c:d8:4d:ec:2a:88:af:0b:64:28:e8:50:f2:93:2e:95:1b:
af:51:b7:38:be:09:59:35:a2:10:3b:1d:c7:15:d9:16:d3:a6:
ef:25:85:cc:17:72:62:e9:7f:84:56:d2:be:59:ac:16:78:9d:
78:f5:d6:52:9d:09:75:12:25:6c:3b:b0:1a:70:ba:83:a6:2c:
81:fb:85:96:4a:79:77:87:9d:91:9e:7e:0d:33:37:90:27:cc:
e0:d1:3d:04:fd:0d:11:32:45:ef:df:22:13:a2:51:e8:65:88:
6e:c9:30:07:c0:03:c4:21:e3:1d:61:a8:64:b4:6b:4a:2c:88:
05:bb:ad:64:56:2a:b8:e4:28:ac:3b:15:69:32:41:26:b9:e6:
df:74:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:34 2024 by rpki-client on console-ams.rpki-client.org