Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/LkyQt97TNZvAhn3Kk4xYU9O9kzM.roa
File: LkyQt97TNZvAhn3Kk4xYU9O9kzM.roa (raw, json)
Hash identifier: hqf/Drv3UeNeaNwhe3TjesREBAcB44yKA4FRr9d3eMo=
Subject key identifier: 2E:4C:90:B7:DE:D3:35:9B:C0:86:7D:CA:93:8C:58:53:D3:BD:93:33
Certificate issuer: /CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Certificate serial: 6805
Authority key identifier: 42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/LkyQt97TNZvAhn3Kk4xYU9O9kzM.roa
Signing time: Wed 26 Jan 2022 18:28:11 +0000
ROA not before: Wed 26 Jan 2022 18:28:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 185.209.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26629 (0x6805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Validity
Not Before: Jan 26 18:28:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e4c90b7ded3359bc0867dca938c5853d3bd9333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:c7:b0:54:6b:42:ea:ed:aa:b9:05:cb:e6:
d7:37:8a:9e:da:3e:07:d2:93:60:d9:75:c8:56:08:
cb:17:35:8b:55:f8:d0:50:56:ce:96:ea:3d:c6:e1:
9c:42:53:39:43:aa:5b:c7:d2:c1:04:4f:cb:b2:01:
46:05:ea:80:4e:1d:3a:b5:0d:a0:33:2e:fc:73:a2:
25:f5:0c:22:0e:96:c5:8a:c2:46:9a:b0:b6:5e:ad:
3d:98:12:f1:a4:6d:66:d7:27:aa:30:33:a2:f8:01:
bb:c7:58:f6:35:32:e8:27:da:61:96:62:de:03:69:
5d:b5:78:2a:79:70:be:d5:be:0b:1e:57:11:ba:8a:
1d:25:c2:53:a3:73:ab:bd:ba:d6:6d:e1:59:fa:6f:
0a:c2:19:fc:a5:e7:d9:03:4f:06:b9:5c:28:2c:6e:
3c:c4:fa:64:99:20:f3:09:8f:5e:7a:5b:cb:c0:14:
28:a7:f4:43:71:15:2d:32:2f:17:ff:f7:4d:21:d7:
92:8c:3d:8f:88:62:a2:77:47:f2:34:69:19:91:2d:
ee:cd:e1:e6:bd:48:d1:53:4e:98:c1:ee:eb:32:66:
5f:65:57:e5:0a:40:1b:66:8a:09:78:ee:e9:f6:2f:
e8:da:aa:af:39:d5:17:9f:c0:a0:9c:eb:c0:2f:01:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:90:B7:DE:D3:35:9B:C0:86:7D:CA:93:8C:58:53:D3:BD:93:33
X509v3 Authority Key Identifier:
keyid:42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/LkyQt97TNZvAhn3Kk4xYU9O9kzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.50.0/24
Signature Algorithm: sha256WithRSAEncryption
36:36:e4:18:1b:f5:31:90:6b:88:17:c7:a9:97:31:5f:61:c9:
cd:86:40:90:e6:5b:cf:c8:7f:21:56:f9:c0:df:38:3a:95:63:
b1:0d:4d:69:cd:e8:bf:dd:8e:f8:ee:e2:d5:07:73:ca:5c:18:
ae:f7:81:83:f4:a9:a6:98:89:66:33:dc:2a:c4:a0:38:26:91:
12:c2:2c:b7:a3:65:eb:c8:ce:bc:4d:46:27:25:39:df:17:ea:
94:35:8e:d8:93:f4:6c:d1:07:34:d9:60:b9:5a:3b:15:71:96:
c2:5e:75:3f:53:a3:9b:45:bd:e6:88:fa:de:95:fa:23:94:46:
25:ef:77:8f:a5:5e:09:11:85:c1:6f:74:96:85:4a:0f:4c:3a:
e2:50:ca:8a:01:a5:66:fd:76:22:16:a9:42:b6:9e:fd:75:87:
05:b2:4d:a0:e3:3f:46:a0:f2:07:3d:dc:d1:3c:de:ff:82:39:
15:42:77:fa:06:b4:7d:1c:fd:70:79:80:95:3d:19:a6:31:73:
ab:63:eb:c8:2b:a0:f7:54:44:04:68:c3:7c:7f:71:b4:8c:99:
cb:16:72:b2:61:0b:62:59:47:91:f1:ba:77:5d:9d:d7:ca:1b:
39:ae:a4:3e:96:49:3f:3f:93:25:28:a4:c5:4b:3e:dd:0d:80:
ce:4f:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:14 2023 by rpki-client on console-fra.rpki-client.org