Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/UL0BLfa-pMuLogDs08gBzbqu-N8.roa
File: UL0BLfa-pMuLogDs08gBzbqu-N8.roa (raw, json)
Hash identifier: lZQ5COIM2iRqLq5lvzmft/iPZA7g8s5sNeROiJfRB9g=
Subject key identifier: 50:BD:01:2D:F6:BE:A4:CB:8B:A2:00:EC:D3:C8:01:CD:BA:AE:F8:DF
Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial: 047571D3
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/UL0BLfa-pMuLogDs08gBzbqu-N8.roa
Signing time: Sat 01 Jan 2022 07:00:39 +0000
ROA not before: Sat 01 Jan 2022 07:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50894
IP address blocks: 178.22.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74805715 (0x47571d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Validity
Not Before: Jan 1 07:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50bd012df6bea4cb8ba200ecd3c801cdbaaef8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3f:be:d4:01:e7:86:bf:67:b5:23:30:b9:16:
2c:55:65:80:a0:c2:a6:bb:49:e1:b4:17:67:5e:03:
70:b7:c9:e6:74:e9:9c:b4:bc:e2:b4:53:c0:70:bb:
88:91:8a:52:33:f9:0b:26:66:04:88:9f:a1:0d:65:
35:2f:8b:13:aa:03:7c:71:21:54:e4:0d:34:3d:4c:
1d:58:d6:03:61:79:2c:27:2a:32:c7:e1:da:5d:f6:
45:b3:37:f7:b5:5b:83:99:19:d1:a2:84:33:62:44:
47:83:56:00:f3:77:64:d2:cf:71:ae:b8:92:80:42:
4d:86:74:9c:13:a1:70:93:28:1c:c9:7c:c6:92:2c:
eb:05:17:11:dc:09:12:d0:c8:6f:4b:34:a5:f0:ac:
bb:05:9d:ab:83:40:7a:c1:ac:02:88:ea:97:22:95:
45:da:dd:56:60:90:bf:ef:41:fd:9d:f0:f1:ca:87:
a4:30:9f:fc:da:54:47:d0:e6:ec:93:3a:c7:11:8b:
ef:fa:c4:76:81:93:4c:b9:db:59:36:a2:90:74:86:
1e:25:06:33:04:a1:78:02:06:59:6e:71:ee:91:c5:
37:00:ef:ec:e7:14:28:18:30:77:99:26:77:f0:1c:
c7:e4:0a:23:3f:b6:11:47:96:49:41:4b:a5:a3:33:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BD:01:2D:F6:BE:A4:CB:8B:A2:00:EC:D3:C8:01:CD:BA:AE:F8:DF
X509v3 Authority Key Identifier:
keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/UL0BLfa-pMuLogDs08gBzbqu-N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:a3:99:c0:71:f6:6e:79:61:8d:ea:8c:1c:b4:62:ee:50:68:
21:fb:bf:45:e6:44:51:b4:80:be:dc:4a:b5:3a:c7:4a:57:31:
1c:d3:f1:c9:34:d8:45:cd:4f:47:35:a9:40:cd:5a:63:2f:04:
72:bb:3f:42:29:4c:23:d3:a0:68:12:12:a1:20:c1:ea:e5:d5:
45:10:88:21:95:d4:fc:bd:ec:17:94:d8:99:e8:5e:39:dd:bf:
3f:a3:72:40:0d:00:25:fe:ca:3e:55:80:31:98:19:d7:59:38:
38:9b:2e:50:b6:2a:92:d5:29:00:70:66:2a:d1:52:05:61:48:
1c:e0:83:db:68:3c:27:55:7d:4b:05:35:eb:0d:81:18:a0:9c:
f8:f8:bd:ed:e9:a3:a4:4e:86:a9:71:02:15:ad:35:b9:02:8c:
10:02:27:d8:4c:19:fe:f2:cc:02:2c:d1:99:41:ab:28:67:c4:
f1:6c:ae:2b:3b:36:cb:2a:a0:f0:4e:d3:52:41:7a:ee:8d:63:
8f:5f:21:d9:53:96:92:cd:7c:6c:80:26:5d:55:9d:fb:98:e7:
d4:67:7f:5d:8c:46:73:a3:80:39:1d:79:5e:48:8d:56:ad:32:
10:8f:7e:46:72:c1:2b:9b:bc:9f:bd:d5:5f:c6:e1:4d:f4:3e:
ac:33:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:11 2024 by rpki-client on console-ams.rpki-client.org