Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/FMbJTM8-Bv8NBYtRII6HVWJIPWo.roa
File: FMbJTM8-Bv8NBYtRII6HVWJIPWo.roa (raw, json)
Hash identifier: kBL8gqH76romQDAFI1n/id2cr+abcLj/6Ra+UT6Y6Is=
Subject key identifier: 14:C6:C9:4C:CF:3E:06:FF:0D:05:8B:51:20:8E:87:55:62:48:3D:6A
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 03FD6714
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/FMbJTM8-Bv8NBYtRII6HVWJIPWo.roa
Signing time: Sat 14 May 2022 05:05:44 +0000
ROA not before: Sat 14 May 2022 05:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 185.248.50.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66938644 (0x3fd6714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: May 14 05:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14c6c94ccf3e06ff0d058b51208e875562483d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:33:dc:97:a1:08:42:81:b9:af:91:e0:2e:
b0:e1:76:13:45:21:7b:c8:f6:5e:fd:ae:2f:85:e6:
da:6e:b2:67:26:30:66:84:8b:e3:56:b2:3f:c5:d0:
d6:6d:fd:11:d3:a8:71:02:ef:29:bc:c8:2f:8e:13:
8c:ec:5d:7f:70:e4:d4:72:50:6d:91:ea:ec:58:10:
cb:e9:ca:7d:ec:ce:77:dd:b1:fd:f8:d1:d5:7f:1a:
15:a3:eb:39:56:46:f0:13:a5:b7:12:a7:df:f6:c0:
02:34:45:bd:88:10:57:7a:21:cf:04:1b:42:98:db:
10:3b:05:32:0d:80:28:81:ac:d6:3e:b6:34:90:c2:
c1:8d:34:a1:33:fd:c7:14:c9:fd:ea:a6:38:49:65:
36:2d:ac:a0:2e:b3:a2:59:81:1f:11:63:bf:b5:c3:
6e:3c:44:b4:ad:5c:70:f7:17:69:20:ee:4b:d1:b2:
d9:e8:c4:78:f8:f1:9e:3b:11:85:7f:9c:2c:5a:56:
ab:83:a5:c7:dd:9d:84:c0:cf:f5:43:32:2b:9b:e4:
7b:34:70:09:c5:47:f0:a9:f7:81:7e:dd:e1:03:b5:
d0:22:ab:da:61:72:a8:da:06:92:89:14:7c:f6:ef:
e4:f5:2b:c2:b5:4a:7b:b4:ca:17:15:f0:bc:12:65:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C6:C9:4C:CF:3E:06:FF:0D:05:8B:51:20:8E:87:55:62:48:3D:6A
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/FMbJTM8-Bv8NBYtRII6HVWJIPWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.50.0/23
Signature Algorithm: sha256WithRSAEncryption
33:a6:ef:e5:cf:0f:2a:f0:9a:cc:e4:d3:b3:7b:f8:4a:c5:d8:
be:74:fb:d7:88:00:44:c5:f8:d3:23:e9:ec:f8:f9:f1:4b:31:
69:7a:d0:62:00:8a:28:87:28:c2:04:12:c3:8f:c1:37:ac:10:
71:f0:7f:2a:3c:50:9a:7e:01:13:49:eb:db:22:86:aa:f8:cf:
d6:bf:e5:1b:6e:89:af:59:31:2b:1f:6b:19:1c:bc:71:e4:33:
28:c4:77:6f:f1:67:7e:8c:7e:5a:0d:94:77:34:a6:83:af:f7:
77:6b:82:b7:cd:32:d7:b4:06:e2:50:2d:5c:ef:d2:6e:a0:c7:
a9:f7:36:67:22:fb:cf:03:28:b3:33:78:55:63:5a:35:3a:6a:
62:f3:7c:f4:94:e3:15:f8:46:8d:3e:51:19:4d:3b:63:41:4d:
aa:70:cc:e0:46:94:b1:4f:f8:10:82:70:3e:b0:a1:ce:a9:1a:
bf:08:e0:02:ef:e7:fc:a6:48:70:2e:e0:79:73:ff:ae:32:64:
bd:18:1e:72:e3:a8:df:a7:17:f9:2d:82:70:99:db:ca:89:4c:
6b:97:60:6d:c8:b8:62:2a:da:fc:4e:ac:84:1d:5a:96:e9:f5:
63:da:be:a5:fc:01:89:c9:86:8a:9a:f3:0f:de:12:8b:cc:ca:
c7:e0:5c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-fra.rpki-client.org