Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/_dhaKzP-8dVxPLVHbjmUPvPrl3s.roa
File: _dhaKzP-8dVxPLVHbjmUPvPrl3s.roa (raw, json)
Hash identifier: AL8LPatsHe7ttLpFhLVL2/UqtKowPzUFxhrJZ12dEk0=
Subject key identifier: FD:D8:5A:2B:33:FE:F1:D5:71:3C:B5:47:6E:39:94:3E:F3:EB:97:7B
Certificate issuer: /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial: 0BCB820D
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/_dhaKzP-8dVxPLVHbjmUPvPrl3s.roa
Signing time: Sat 01 Jan 2022 01:51:26 +0000
ROA not before: Sat 01 Jan 2022 01:51:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44071
IP address blocks: 185.167.190.0/24 maxlen: 24
185.167.189.0/24 maxlen: 24
185.167.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197886477 (0xbcb820d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
Validity
Not Before: Jan 1 01:51:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdd85a2b33fef1d5713cb5476e39943ef3eb977b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:cb:7c:a3:d9:d4:38:54:56:49:9c:25:8c:
e7:cd:2b:02:1d:00:ea:b0:1c:7d:4f:7a:c1:f9:77:
ae:42:66:8a:9d:2e:75:5c:da:1c:8b:cb:56:5f:9c:
fa:0a:8f:a5:56:3d:7a:ba:1a:f8:f3:42:12:78:3f:
74:d1:68:b0:8f:bd:a2:ae:a5:1d:9a:c8:a3:ee:0f:
e3:99:84:d1:33:19:13:ea:f7:9b:64:49:f2:35:b2:
b2:63:34:c2:90:9d:a6:ce:67:0e:33:25:40:83:7e:
fb:92:95:c2:6c:a5:de:0c:51:3d:c4:d1:04:86:e8:
6e:2d:b5:a4:17:58:20:ce:07:fc:e0:6f:f4:7a:99:
11:f9:13:35:45:9e:b3:c3:99:e7:e5:35:63:ee:9c:
13:15:4b:ab:bb:85:f1:69:b8:92:aa:c6:20:a0:4a:
3f:de:06:81:53:fc:7a:2a:3d:ae:fd:c5:ad:7f:87:
ec:ec:80:91:41:28:62:3c:3f:4d:75:64:5b:2a:7f:
5c:f7:d8:c4:13:3b:30:f6:70:c6:71:ce:3d:5a:51:
b5:29:e4:53:1a:c0:54:9b:df:6d:f0:a6:13:3b:6d:
7a:a1:b9:ad:bd:a3:76:fc:b5:7e:7a:b6:de:7e:60:
d9:c1:b8:f5:7c:5f:4f:6f:6b:b4:f4:bd:55:12:9a:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D8:5A:2B:33:FE:F1:D5:71:3C:B5:47:6E:39:94:3E:F3:EB:97:7B
X509v3 Authority Key Identifier:
keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/_dhaKzP-8dVxPLVHbjmUPvPrl3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.188.0-185.167.190.255
Signature Algorithm: sha256WithRSAEncryption
24:6a:73:a4:60:02:f9:81:90:a4:44:69:ad:20:48:fa:29:ea:
32:53:fa:1e:0e:13:10:4a:02:18:e8:6a:05:46:2a:bd:8c:fd:
46:ee:ba:75:40:52:4a:08:36:30:08:84:59:ce:1e:9f:48:a0:
6c:42:da:51:54:69:83:f4:fa:99:92:f8:fb:1f:76:d9:56:35:
f1:07:38:03:f3:c9:5b:05:9a:cf:3c:7d:36:e2:48:e6:87:02:
f7:3b:36:d5:ff:ba:61:8c:0d:ca:3e:56:f1:ff:7f:77:9d:50:
02:e2:0a:35:cd:1c:71:4e:1e:43:51:9c:9a:40:c8:d2:8b:f7:
ad:82:f7:84:4a:ac:6e:f5:f9:1b:d4:ab:f1:f9:23:67:d6:d3:
51:d9:95:b9:ea:25:70:ec:12:87:12:36:0a:0b:97:96:30:b6:
ea:8f:48:e0:50:68:c1:87:c4:a8:8f:67:59:ec:43:a6:a9:ee:
c7:05:15:38:dc:13:8e:f7:54:7e:6a:62:52:1e:55:cb:c8:1e:
5c:8d:a3:a5:c5:9f:75:84:12:e6:73:e5:4e:4e:28:e5:d3:7a:
cc:50:f2:67:f8:d5:fa:58:69:87:1a:d3:75:c9:a2:e6:9e:3d:
97:b6:11:7e:fd:b8:04:9f:8f:14:09:59:b9:2d:f0:b4:e8:25:
62:2b:4d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:28 2024 by rpki-client on console-fra.rpki-client.org