Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/2WE5dVWBM_ddTvy0GRnL2TLUqb0.roa
File: 2WE5dVWBM_ddTvy0GRnL2TLUqb0.roa (raw, json)
Hash identifier: maNrUFuH+g9C1aQUhNZ6/si3WFSDtDXMNHi08G3DvN0=
Subject key identifier: D9:61:39:75:55:81:33:F7:5D:4E:FC:B4:19:19:CB:D9:32:D4:A9:BD
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 030557EC
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/2WE5dVWBM_ddTvy0GRnL2TLUqb0.roa
Signing time: Sat 01 Jan 2022 04:57:05 +0000
ROA not before: Sat 01 Jan 2022 04:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49097
IP address blocks: 185.170.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50681836 (0x30557ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Jan 1 04:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9613975558133f75d4efcb41919cbd932d4a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:26:69:41:81:61:d9:8f:93:90:41:48:8d:
8b:61:af:47:95:31:6d:a9:e1:13:2c:3a:a2:20:71:
63:35:61:ed:39:a5:f9:b1:70:a9:fd:a0:30:ae:9d:
b7:30:71:3b:fd:aa:14:cd:9e:64:8e:f1:a9:c3:73:
a3:45:90:7e:d8:89:3c:52:c6:db:5d:c3:37:23:a3:
6a:d2:15:74:fb:2a:e7:3d:47:32:9b:8b:b8:7e:6e:
5e:e1:cf:98:a5:13:d0:3b:fa:bf:bf:8f:e7:06:50:
10:d9:72:97:e0:9a:5a:be:e7:25:cc:0a:5d:66:ca:
b1:1c:f3:ab:9c:cf:39:9c:8a:5b:87:a4:85:64:d9:
61:82:9e:c8:6d:2e:87:f7:df:e5:bf:49:25:66:39:
c1:38:d4:07:39:47:da:76:d3:54:c8:13:b9:c9:48:
3d:5b:51:39:a2:96:b9:c9:6d:5b:c2:57:62:a8:bd:
42:cb:3a:7b:c6:c2:46:8c:46:b9:b7:2a:b2:5d:36:
5a:ae:16:5f:9b:35:69:2c:cb:60:d6:8b:aa:5a:56:
87:7d:25:08:ab:b3:c8:eb:26:66:e2:b1:6d:2e:f8:
95:79:c2:a0:30:0b:0f:56:8b:db:a0:52:cb:b5:0e:
35:67:f3:ff:df:e2:eb:8f:c0:85:4c:7c:af:29:21:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:39:75:55:81:33:F7:5D:4E:FC:B4:19:19:CB:D9:32:D4:A9:BD
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/2WE5dVWBM_ddTvy0GRnL2TLUqb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.24.0/22
Signature Algorithm: sha256WithRSAEncryption
42:ef:87:04:2c:d6:42:7a:16:da:0b:16:f6:98:d4:5b:5b:4a:
fd:bf:95:91:93:41:96:07:87:39:14:a5:58:60:1c:fa:ee:38:
c1:fb:bc:57:1f:ce:a7:25:c8:41:7f:9b:cb:35:c5:8e:e1:07:
a9:50:9a:12:bb:f4:ae:2b:42:7a:81:39:c3:7a:f3:d0:8f:b6:
2a:cd:ba:0a:34:39:25:e2:dc:bd:7c:bc:f2:23:1e:b5:e0:0f:
25:3b:07:38:03:b1:a7:49:5d:e2:8b:68:0b:f0:25:c9:77:8c:
af:51:83:4e:1d:50:a3:70:d8:67:41:e7:c8:c2:b0:f6:08:d4:
5a:cc:34:4c:17:ac:05:69:e8:4b:05:b3:c7:7a:fe:cf:51:de:
b9:4e:ea:1d:95:3f:56:36:b9:38:4b:c0:7e:91:14:54:7c:72:
d2:c1:b3:11:68:2c:0e:99:ed:05:67:6a:b5:d1:bb:5d:be:14:
70:44:cb:b5:4e:6f:5f:0d:e2:88:07:9b:a8:25:62:72:34:8f:
86:cd:39:4a:16:0d:01:ac:77:e0:15:fa:94:b2:b1:8a:ef:02:
f7:67:99:a8:19:cd:71:d8:c6:20:2e:3e:90:3f:71:a9:16:04:
70:27:8b:99:f6:cc:89:99:6d:9b:28:ca:46:c8:01:e3:10:9f:
90:d1:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:43 2024 by rpki-client on console-ams.rpki-client.org