Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/hjg4XLXui8vfzUZ-4_HX0uL2NtU.roa
File: hjg4XLXui8vfzUZ-4_HX0uL2NtU.roa (raw, json)
Hash identifier: sO0bJcM6Askc8suRokmOL1SRznRamPEeiS3QqxKbHtw=
Subject key identifier: 86:38:38:5C:B5:EE:8B:CB:DF:CD:46:7E:E3:F1:D7:D2:E2:F6:36:D5
Certificate issuer: /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial: 0259CC42
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/hjg4XLXui8vfzUZ-4_HX0uL2NtU.roa
Signing time: Sat 01 Jan 2022 07:54:38 +0000
ROA not before: Sat 01 Jan 2022 07:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201602
IP address blocks: 185.199.50.0/24 maxlen: 24
185.199.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39439426 (0x259cc42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Validity
Not Before: Jan 1 07:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8638385cb5ee8bcbdfcd467ee3f1d7d2e2f636d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:e5:66:1c:de:30:f2:b8:e5:1c:dd:c7:b4:
16:63:e4:e3:23:fe:40:e1:22:98:c3:30:4b:d0:ad:
54:7e:07:6f:f7:7e:51:0c:cd:f1:95:e5:51:ee:1b:
8b:df:46:f3:00:66:07:98:29:c7:8f:3e:d0:20:46:
5f:79:29:1f:48:29:ed:95:ad:3d:89:ad:95:82:a7:
71:46:13:bc:ab:23:f5:71:a3:c3:f9:a3:56:d7:f7:
4d:0a:a6:2a:a2:79:46:4f:c5:ff:0a:ef:30:35:b3:
f5:8f:6e:62:86:a1:f6:52:2b:d3:78:82:9f:9d:3e:
73:5c:50:dd:a6:09:b3:40:1a:e6:1f:2b:60:c2:17:
dc:1b:86:3a:b4:98:a5:8d:30:ee:4c:47:cc:30:20:
39:42:09:14:29:88:ce:42:51:16:80:6d:a0:62:4a:
6f:15:4f:24:3c:99:55:a5:ff:0d:31:91:66:a7:0b:
26:8e:b8:e3:ff:28:f6:4a:83:42:cf:20:71:99:f5:
19:a8:a1:78:88:14:6d:73:49:da:45:77:df:37:41:
8c:8a:40:23:7d:57:60:87:d4:ec:b4:4e:3b:b2:ac:
19:0b:a9:c6:85:b1:ec:c3:76:a2:af:e6:84:3a:4f:
8e:f2:1a:ce:18:f8:1e:e4:16:d6:12:80:4a:50:ea:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:38:38:5C:B5:EE:8B:CB:DF:CD:46:7E:E3:F1:D7:D2:E2:F6:36:D5
X509v3 Authority Key Identifier:
keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/hjg4XLXui8vfzUZ-4_HX0uL2NtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.50.0/23
Signature Algorithm: sha256WithRSAEncryption
97:bb:d7:72:50:09:5b:fa:5a:db:93:7f:67:d3:e2:41:e4:29:
8e:5b:74:f2:5d:2c:cd:f0:a8:b3:3d:c1:f5:11:fe:24:1a:a0:
0b:ca:d8:5c:5c:02:1d:0d:fb:be:50:24:f9:5c:0a:00:3a:26:
9b:31:01:74:ee:90:e4:f1:e1:1c:22:9a:38:d0:e9:1a:72:e1:
6f:8b:05:cb:df:57:22:1a:b8:c5:08:1b:b0:8e:72:ab:d6:a9:
d3:20:8d:0b:9c:e1:69:40:df:ab:80:dc:e3:d9:91:3a:38:77:
72:48:ba:73:9d:17:7b:e3:71:a7:f9:d8:9a:ac:b2:33:26:89:
2f:6c:73:f2:84:e3:df:4e:3d:32:12:fd:42:3d:84:be:e4:0f:
21:bc:15:bb:b8:13:26:3d:2a:34:84:3c:c9:a8:0f:bf:8a:dd:
7a:8f:cc:c7:8a:46:3b:f4:21:83:ad:af:b7:32:d6:c1:12:31:
e7:92:1a:4d:20:90:cd:9c:f5:0d:8f:c4:c2:29:83:d9:a1:c1:
90:40:fb:ca:e8:8d:bc:1c:ae:09:ed:c5:a0:27:19:a3:d3:37:
2e:97:b2:1e:6c:06:42:d1:d2:e3:96:1e:a3:3a:78:85:21:d3:
7e:1d:a4:b1:7b:f2:e0:bb:e3:52:fa:82:bf:33:bb:dd:1d:bd:
94:02:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:13 2024 by rpki-client on console-ams.rpki-client.org