Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/nMfFUKhBwMvLhx512dJ1EtTu0FA.roa
File: nMfFUKhBwMvLhx512dJ1EtTu0FA.roa (raw, json)
Hash identifier: USDB9F9dccqoCWdYhSjj77mzimlsvfiSqRSm/dKkt8s=
Subject key identifier: 9C:C7:C5:50:A8:41:C0:CB:CB:87:1E:75:D9:D2:75:12:D4:EE:D0:50
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 0182C9FC6379157A3CE882BD3213F83B4752
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/nMfFUKhBwMvLhx512dJ1EtTu0FA.roa
Signing time: Tue 23 Aug 2022 09:15:37 +0000
ROA not before: Tue 23 Aug 2022 09:15:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.248.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:fc:63:79:15:7a:3c:e8:82:bd:32:13:f8:3b:47:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Aug 23 09:15:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cc7c550a841c0cbcb871e75d9d27512d4eed050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:18:c5:bb:68:c1:8a:c3:aa:d3:ca:82:1b:59:
0e:f9:70:27:1b:95:0a:41:f7:3d:b4:f0:1b:90:82:
44:73:59:b1:71:b7:9b:1f:50:3c:f7:47:61:4b:c3:
c1:86:e4:f7:e8:28:28:f9:cd:4e:56:16:13:d6:c6:
42:f8:69:8f:65:4c:b7:8f:33:21:e0:19:00:9a:ee:
ee:87:68:c7:80:01:5a:32:ab:38:a1:7f:a0:ef:d2:
35:03:9a:91:ff:07:54:19:aa:0c:52:e1:84:3c:a1:
f2:ee:46:39:5f:da:e4:32:6f:a3:01:9c:ce:34:fe:
1d:6a:51:cc:33:d4:77:8b:05:73:bb:d6:cf:5e:c6:
5d:f4:aa:e3:f5:63:c4:12:07:57:55:83:18:85:03:
5f:e9:80:ea:e7:4e:7c:f8:4d:ad:30:28:4d:82:90:
01:07:eb:a8:28:8f:bd:53:28:f5:8e:6a:83:58:2d:
a0:d0:72:7f:1b:52:14:37:9f:29:7d:46:88:db:27:
9e:65:42:f8:35:ef:9c:0f:e3:01:f3:79:c9:b6:3c:
d8:d9:87:9e:5d:5a:a8:9f:a1:ca:1a:f1:24:7a:82:
22:15:3b:78:4a:17:93:7a:de:13:cc:08:54:6c:5d:
35:1e:f6:dd:21:e2:52:9f:ff:3b:1e:dc:4b:a4:43:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:C5:50:A8:41:C0:CB:CB:87:1E:75:D9:D2:75:12:D4:EE:D0:50
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/nMfFUKhBwMvLhx512dJ1EtTu0FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.50.0/24
Signature Algorithm: sha256WithRSAEncryption
65:dc:44:2d:ee:b5:f5:c6:06:2d:a4:8b:54:5c:6c:39:68:6f:
6d:c7:5e:02:ed:79:93:02:cb:11:90:ee:c8:50:33:3a:c3:7c:
ce:f8:4b:e2:c1:c1:9f:81:b7:04:57:f2:38:37:83:e3:a8:d3:
b9:7f:3a:ca:da:32:39:68:3d:23:ba:51:1e:7f:1e:c9:71:62:
96:08:de:56:ab:cf:ed:e3:fc:0d:81:4f:87:53:bc:52:19:25:
29:68:78:06:d1:3a:1b:5d:a3:93:6b:91:17:5c:77:d4:b2:b8:
32:a0:02:bd:22:bc:20:4e:85:1b:3c:3e:c2:62:09:cf:c3:a3:
07:f0:03:d8:c5:f5:c2:3c:8a:0a:17:21:e2:6f:de:20:2c:bc:
7f:1d:a5:37:84:81:54:fb:46:58:91:36:ff:71:2c:d0:a2:96:
0e:a0:09:cc:09:3f:47:53:20:bb:e5:28:1c:1b:a6:d2:74:51:
87:0d:0a:24:19:8a:9c:dd:d5:46:bd:85:85:66:93:bf:b6:85:
fb:45:d6:15:1a:d5:2e:c9:f8:70:74:2c:49:9e:77:f2:e2:2c:
b1:f7:a9:16:d6:9e:2d:47:67:44:b7:cf:27:ec:db:3b:e1:57:
b3:25:1e:23:ad:40:3b:f9:b1:95:85:2b:e0:5d:3c:f8:c3:0b:
fa:e6:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:59 2023 by rpki-client on console-ams.rpki-client.org