Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Ray50MQ-M_Xga2pZgZDqi1byEco.roa
File: Ray50MQ-M_Xga2pZgZDqi1byEco.roa (raw, json)
Hash identifier: hnUdcxDh8/Bq0ZaF01JpysSeG2VYxX2ESLTaqE2z4K0=
Subject key identifier: 45:AC:B9:D0:C4:3E:33:F5:E0:6B:6A:59:81:90:EA:8B:56:F2:11:CA
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 384ED4BD
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Ray50MQ-M_Xga2pZgZDqi1byEco.roa
Signing time: Mon 21 Mar 2022 15:04:53 +0000
ROA not before: Mon 21 Mar 2022 15:04:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50149
IP address blocks: 62.122.216.0/22 maxlen: 22
94.154.128.0/22 maxlen: 22
89.104.107.0/24 maxlen: 24
2a00:ab01::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944690365 (0x384ed4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Mar 21 15:04:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45acb9d0c43e33f5e06b6a598190ea8b56f211ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:7a:c3:f1:55:70:04:fa:2c:de:a6:fe:49:
f1:ed:34:a1:ee:a9:f9:5b:85:7f:0b:63:2a:2d:ea:
d0:24:ee:6f:d5:ef:f8:ee:e3:6b:47:18:c5:f6:85:
42:02:67:0d:19:b1:10:3e:c2:43:a8:07:a7:a4:b3:
ab:b4:44:ab:cd:66:87:7d:c7:57:32:47:ac:99:54:
35:d8:be:63:34:17:a8:76:46:1d:18:7c:a0:94:a2:
72:40:c0:b4:7a:df:ca:c2:5c:d0:b2:f0:66:64:eb:
f4:ce:33:a7:e9:1e:88:57:48:69:ae:29:0d:c2:5e:
41:84:5d:17:f7:56:3e:5d:ac:1b:24:78:d2:d6:23:
12:84:97:15:08:2f:73:e2:ee:24:78:94:a6:23:a7:
c6:a8:49:66:8a:bb:97:fa:34:d5:25:90:8e:6e:25:
b6:6c:13:e7:88:cd:d9:83:0a:3b:93:85:99:0a:78:
56:21:56:3d:bd:96:e4:8c:f9:f3:0f:e7:00:68:71:
cb:4d:28:83:f4:36:65:8c:5d:1f:df:24:96:23:ee:
3e:d5:6e:e5:fc:28:b0:86:eb:5e:31:db:d8:1c:46:
2c:28:b2:5c:d5:59:4d:72:09:e2:b2:38:91:4d:8e:
91:f4:4d:b8:65:82:b6:fc:49:e6:cb:02:9f:7f:5c:
70:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:B9:D0:C4:3E:33:F5:E0:6B:6A:59:81:90:EA:8B:56:F2:11:CA
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Ray50MQ-M_Xga2pZgZDqi1byEco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.216.0/22
89.104.107.0/24
94.154.128.0/22
IPv6:
2a00:ab01::/32
Signature Algorithm: sha256WithRSAEncryption
79:1c:f8:2e:12:ad:9f:0b:1c:80:53:74:c2:22:db:91:9d:cd:
86:f0:e5:10:a4:8d:56:80:dd:2c:07:62:55:b4:8e:32:37:68:
8e:5f:b5:28:e0:9f:d4:25:ab:c4:e3:dc:5d:d1:40:4f:87:3c:
7c:04:14:81:e5:7d:5b:70:94:0c:11:eb:35:46:6a:06:08:eb:
b4:4a:b3:85:82:a3:90:d5:ee:79:4e:9b:c7:77:b0:b6:fd:8c:
55:02:1a:db:2d:bd:74:69:c7:fd:32:be:33:0d:41:cd:ce:b1:
6c:f0:d6:60:f3:37:23:25:69:94:49:a3:cd:ac:e3:21:1d:24:
d9:92:48:17:68:85:23:4d:0c:d5:76:27:81:05:ec:e1:67:4d:
34:29:6b:da:a3:af:32:7c:6a:e9:94:31:7b:86:94:06:7a:c2:
e5:62:9f:bc:96:5d:6f:b4:86:b9:ed:42:90:ea:61:31:14:a0:
04:5d:9f:e6:32:4a:49:82:f7:b5:fe:16:a1:d5:94:c1:1d:22:
ab:56:9f:b2:44:11:5b:3f:f4:f6:82:5f:e3:7f:0b:2f:36:90:
21:31:39:74:4e:b4:0b:49:80:92:eb:9d:fa:70:7a:6e:cc:23:
98:1e:53:de:af:6d:0f:27:b2:84:92:de:da:8f:6c:0f:53:27:
70:da:11:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:36 2024 by rpki-client on console-fra.rpki-client.org