Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/hX-71NALOSGzFUJtYZtkOqMbuXk.roa
File: hX-71NALOSGzFUJtYZtkOqMbuXk.roa (raw, json)
Hash identifier: sBtoCos7g22rqc+fr2zcTo+kgaJyueHnyMsZR3GmqWs=
Subject key identifier: 85:7F:BB:D4:D0:0B:39:21:B3:15:42:6D:61:9B:64:3A:A3:1B:B9:79
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B5C5540
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/hX-71NALOSGzFUJtYZtkOqMbuXk.roa
Signing time: Sat 01 Jan 2022 10:02:32 +0000
ROA not before: Sat 01 Jan 2022 10:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16280
IP address blocks: 194.149.50.0/24 maxlen: 24
194.149.48.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459035968 (0x1b5c5540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=857fbbd4d00b3921b315426d619b643aa31bb979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:e9:4b:34:5e:6b:b6:ea:25:f1:ac:1f:d1:
3e:3b:fe:8d:ae:8f:55:11:14:d6:a8:d7:a5:90:c7:
93:1f:01:3b:8d:02:29:dc:72:fc:bf:93:1f:2f:65:
6f:20:83:e9:39:3c:65:12:97:24:10:87:3f:59:76:
b2:4a:29:5a:d9:f8:7f:66:c9:88:04:1f:f5:f5:c5:
28:ca:e9:74:5d:c1:3c:eb:b1:31:1f:11:2f:bf:d3:
08:69:d7:7a:d0:be:af:73:e8:e8:0c:97:49:24:0c:
6e:be:63:41:a3:0a:cf:93:86:9e:a8:cf:99:04:46:
c6:43:1d:d6:7b:57:6e:e9:df:09:83:4e:20:f9:ce:
85:d1:33:eb:15:84:47:44:1e:56:d3:0a:8e:1e:d8:
71:fd:79:27:c5:d0:1f:e9:f0:77:41:fa:d9:a5:b3:
f4:3e:26:0b:f6:b0:6b:e0:2a:a7:8d:fc:e4:76:50:
44:23:aa:3c:b2:f5:a7:22:61:ef:3e:d1:01:3d:2d:
10:9c:9a:6e:93:7f:00:51:8a:97:37:ed:92:a7:2a:
9f:c5:41:e2:80:4e:c9:a3:90:3c:80:0b:47:5a:a5:
08:72:25:89:8a:5b:99:67:4f:0f:4e:89:8b:38:a0:
c9:81:77:f1:01:28:e9:e8:ee:2f:5b:c7:ce:0a:0e:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7F:BB:D4:D0:0B:39:21:B3:15:42:6D:61:9B:64:3A:A3:1B:B9:79
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/hX-71NALOSGzFUJtYZtkOqMbuXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.48.0-194.149.50.255
Signature Algorithm: sha256WithRSAEncryption
51:16:9f:82:64:46:82:af:f1:2a:60:eb:4b:04:74:68:2b:99:
70:04:7c:59:e9:c6:25:2c:4f:db:e3:94:71:5e:c2:ad:5e:58:
bd:4c:f2:44:41:80:de:d1:21:ba:fe:28:23:f5:52:2b:42:27:
88:aa:fc:b0:ad:66:6d:aa:8a:91:4e:af:d7:97:ed:de:4b:94:
e2:81:a9:d7:dd:5c:b3:8d:6d:56:10:bc:ee:6b:a9:a0:e1:bc:
b5:bc:d6:a8:81:be:4b:98:ef:1b:f1:d3:fb:5e:e1:20:44:c3:
02:81:68:bd:10:0f:8a:c0:7d:20:53:90:34:9e:cc:72:ea:e7:
74:88:cc:cc:b7:76:1b:41:c7:48:3b:c2:b1:60:32:ce:74:69:
38:e1:03:82:73:57:e1:79:0f:f3:ea:62:74:75:df:f0:96:cc:
0f:e0:a2:de:61:db:47:b1:8e:c1:2e:ee:61:3e:e5:19:99:dd:
82:36:bd:7c:5a:c9:d1:12:be:bf:cb:9d:b1:9b:d5:5e:77:95:
ed:7e:c2:6d:38:af:ae:f0:b3:29:23:a4:2d:19:d5:d7:7e:d3:
50:68:e6:80:dd:97:4d:aa:80:b8:78:1e:3b:f5:b8:70:97:c9:
93:88:bb:be:d9:25:74:06:96:c2:6b:08:23:61:d2:f0:de:ff:
1b:0e:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org