Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/58_CR_m3aLFsN7qnFJ7ZEXoxWes.roa
File: 58_CR_m3aLFsN7qnFJ7ZEXoxWes.roa (raw, json)
Hash identifier: wUniM03F+Ou9XiNbRsbVzgIQWpqjZSevXEUe+3Kb1eA=
Subject key identifier: E7:CF:C2:47:F9:B7:68:B1:6C:37:BA:A7:14:9E:D9:11:7A:31:59:EB
Certificate issuer: /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial: 026CFE8D
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/58_CR_m3aLFsN7qnFJ7ZEXoxWes.roa
Signing time: Sat 01 Jan 2022 12:56:45 +0000
ROA not before: Sat 01 Jan 2022 12:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8218
IP address blocks: 194.8.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40697485 (0x26cfe8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Validity
Not Before: Jan 1 12:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7cfc247f9b768b16c37baa7149ed9117a3159eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:3b:64:22:d8:da:61:a4:52:e6:74:c7:50:
fd:9c:94:22:f0:13:85:86:45:9b:67:ae:d9:ec:76:
46:ff:5e:52:8e:e1:c4:5d:fc:bd:e5:26:b9:f5:40:
e7:51:0c:63:8a:2f:b4:c4:cc:6a:31:bf:60:41:50:
0f:02:99:59:3b:ec:82:b9:bf:51:1e:db:7a:ef:a7:
af:bd:fd:ec:95:4a:c7:3e:14:db:ed:a6:06:90:9d:
e2:9d:60:07:33:7a:b5:e9:28:7e:17:b6:55:98:b3:
aa:7a:cb:cc:45:7f:98:d5:be:18:58:ab:d7:4c:41:
58:7f:a5:16:c3:60:da:87:6c:dd:c9:47:7e:e7:01:
e1:f3:3f:77:df:9c:31:46:b6:6d:44:96:3d:28:f6:
61:31:c1:f4:54:77:d4:52:89:41:26:af:5f:18:d1:
c7:d1:d4:d4:83:5d:d3:57:89:74:c1:91:55:94:a9:
2b:c4:e2:d6:bc:94:0f:c6:f8:02:d8:fa:43:3b:af:
97:b3:0f:48:c4:16:48:c2:2e:b4:99:97:2f:18:4a:
fd:f4:40:0b:53:a1:58:d6:93:6b:8a:ee:53:e4:30:
e2:49:b9:46:48:83:05:14:95:2d:47:6a:d5:bb:07:
2a:43:ce:8f:4d:7b:4a:fd:4f:2f:56:bd:b3:3c:cb:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:C2:47:F9:B7:68:B1:6C:37:BA:A7:14:9E:D9:11:7A:31:59:EB
X509v3 Authority Key Identifier:
keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/58_CR_m3aLFsN7qnFJ7ZEXoxWes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.50.0/24
Signature Algorithm: sha256WithRSAEncryption
51:06:eb:b0:a0:1d:ba:3b:48:ba:37:de:7b:9a:04:41:13:8a:
6d:51:93:0e:21:b7:eb:15:c1:e2:8d:40:3b:ec:f6:2f:5b:92:
9c:04:7f:cc:1d:b3:1d:61:d1:82:93:60:2b:dc:86:53:18:a3:
1c:75:30:e4:db:82:5e:7d:58:c0:ab:9b:18:71:6f:45:f5:25:
a6:f4:f0:e5:a5:f3:0c:c6:7a:56:f9:97:f7:f8:b0:11:c4:a1:
cf:3b:10:89:43:2f:31:76:83:38:e9:43:98:c0:02:01:f9:be:
5a:34:72:ce:2d:9b:c5:20:b4:29:68:1f:3b:56:c8:14:15:6e:
12:e7:f7:aa:ff:9e:fd:4f:68:17:52:ad:e6:d6:36:22:68:30:
8b:2b:54:e0:1c:66:c6:92:8e:71:c7:ab:62:ad:fd:4b:c6:99:
59:e5:20:5f:27:a8:3f:16:45:76:03:51:8f:36:35:e2:f2:bb:
86:e9:3a:c3:69:b9:66:3f:5e:b3:94:54:53:e8:9e:53:d7:0f:
8a:61:00:60:76:01:91:08:b9:57:1d:4c:7f:29:5e:7e:d0:9f:
0b:de:90:1e:89:8f:76:6b:aa:0f:2a:e8:bd:fa:ee:2e:94:df:
d5:98:36:08:f6:4a:a4:9d:bb:2e:9e:1a:1e:c6:ba:02:9f:39:
12:51:de:9d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAmz+jTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZDczYzI2NjA5YjFiMjFkODdhNjgxMzAyZWYyZDI2ZmMwYTAwZmEzMB4XDTIyMDEw
MTEyNTY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTdjZmMyNDdmOWI3
NjhiMTZjMzdiYWE3MTQ5ZWQ5MTE3YTMxNTllYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOE+O2Qi2NphpFLmdMdQ/ZyUIvAThYZFm2eu2ex2Rv9eUo7h
xF38veUmufVA51EMY4ovtMTMajG/YEFQDwKZWTvsgrm/UR7beu+nr7397JVKxz4U
2+2mBpCd4p1gBzN6tekofhe2VZizqnrLzEV/mNW+GFir10xBWH+lFsNg2ods3clH
fucB4fM/d9+cMUa2bUSWPSj2YTHB9FR31FKJQSavXxjRx9HU1INd01eJdMGRVZSp
K8Ti1ryUD8b4Atj6Qzuvl7MPSMQWSMIutJmXLxhK/fRAC1OhWNaTa4ruU+Qw4km5
RkiDBRSVLUdq1bsHKkPOj017Sv1PL1a9szzLOLkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTnz8JH+bdosWw3uqcUntkRejFZ6zAfBgNVHSMEGDAWgBTtc8JmCbGyHYem
gTAu8tJvwKAPozAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdYUENaZ214c2gySHBvRXdMdkxTYjhDZ0Q2TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvYzhlYTQ2LTlkYzItNDAzNi05MDk2LTRjZDc3YjM4ZjFiMS8x
LzU4X0NSX20zYUxGc043cW5GSjdaRVhveFdlcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
YzhlYTQ2LTlkYzItNDAzNi05MDk2LTRjZDc3YjM4ZjFiMS8xLzdYUENaZ214c2gy
SHBvRXdMdkxTYjhDZ0Q2TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIIMjANBgkqhkiG9w0BAQsFAAOC
AQEAUQbrsKAdujtIujfee5oEQROKbVGTDiG36xXB4o1AO+z2L1uSnAR/zB2zHWHR
gpNgK9yGUxijHHUw5NuCXn1YwKubGHFvRfUlpvTw5aXzDMZ6VvmX9/iwEcShzzsQ
iUMvMXaDOOlDmMACAfm+WjRyzi2bxSC0KWgfO1bIFBVuEuf3qv+e/U9oF1Kt5tY2
ImgwiytU4BxmxpKOccerYq39S8aZWeUgXyeoPxZFdgNRjzY14vK7huk6w2m5Zj9e
s5RUU+ieU9cPimEAYHYBkQi5Vx1MfyleftCfC96QHomPdmuqDyrovfruLpTf1Zg2
CPZKpJ27Lp4aHsa6Ap85ElHenQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:52 2024 by rpki-client on console-ams.rpki-client.org