Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/tVyDcG2n48kkhYqA2CKv-FItVeY.roa
File: tVyDcG2n48kkhYqA2CKv-FItVeY.roa (raw, json)
Hash identifier: xXiSfM94w2ISM72lQoX+L3/Dkoh4KDuRVavvEXyvC2I=
Subject key identifier: B5:5C:83:70:6D:A7:E3:C9:24:85:8A:80:D8:22:AF:F8:52:2D:55:E6
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 057B80B9
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/tVyDcG2n48kkhYqA2CKv-FItVeY.roa
Signing time: Sat 01 Jan 2022 12:05:39 +0000
ROA not before: Sat 01 Jan 2022 12:05:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 84.22.148.0/23 maxlen: 23
84.22.150.0/24 maxlen: 24
91.204.183.0/24 maxlen: 24
91.204.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91979961 (0x57b80b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 1 12:05:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b55c83706da7e3c924858a80d822aff8522d55e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:02:a4:92:40:21:c6:bb:46:89:c3:2e:d3:66:
5b:6e:0c:11:aa:30:46:aa:88:51:47:6b:d5:44:49:
6a:02:01:ab:16:fd:37:8a:7c:08:db:8e:d3:d2:b7:
d6:9b:d1:db:58:2b:c4:d6:1e:88:5b:4b:43:4e:fa:
8c:52:0e:5f:ae:fe:5b:cf:f7:7c:84:11:c0:9f:fb:
c3:35:0d:62:d3:72:02:ea:4a:91:c9:a4:da:bf:84:
9b:c1:a3:55:42:6a:27:ed:07:8e:42:3c:91:d5:63:
4e:78:10:bd:05:e6:3a:a1:f6:67:cb:17:d4:5a:8b:
16:0d:2e:4b:63:1e:41:21:a1:ff:64:c9:68:b2:70:
e9:0f:94:6e:23:51:a8:d1:00:5d:36:c5:6f:72:26:
c9:20:56:3f:0f:5d:f6:b3:27:a2:53:09:68:e5:5d:
da:81:58:cb:3c:05:d9:59:55:71:f4:13:ba:50:0d:
9a:0b:7b:9b:78:2f:93:c4:64:0b:92:06:95:6e:2e:
5a:12:02:a8:a2:56:55:c7:53:46:52:3d:55:a6:65:
96:1a:50:ee:95:0f:28:0c:39:f9:05:23:df:e2:67:
f3:80:da:6c:af:11:8f:fa:8e:36:f6:93:3f:56:96:
c7:03:9c:52:9c:6b:ab:70:67:71:b8:01:ef:44:50:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:83:70:6D:A7:E3:C9:24:85:8A:80:D8:22:AF:F8:52:2D:55:E6
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/tVyDcG2n48kkhYqA2CKv-FItVeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.148.0-84.22.150.255
91.204.182.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:d3:a2:1d:0a:22:c2:0e:19:a1:47:83:16:19:39:a2:1b:9e:
2e:ae:22:08:47:17:b8:26:0f:45:a3:21:3a:e1:8a:15:2f:6a:
45:31:29:93:14:40:02:77:25:f4:bb:c2:06:f9:2c:2a:05:4e:
fe:98:50:26:ab:69:94:a2:0f:03:4d:7b:1e:ef:e8:df:aa:4d:
b3:48:a0:85:94:cc:ad:f2:f1:52:79:c3:8c:ea:54:bb:2f:6c:
71:89:95:ce:58:96:b6:57:35:91:19:72:a0:59:bb:fa:f9:4c:
15:76:65:83:23:14:cd:c9:93:6b:69:74:93:2e:13:ce:24:9a:
73:ed:15:ef:82:9e:96:14:b3:0a:e8:c8:22:c5:5f:28:fc:a3:
65:b6:6a:62:0d:06:71:27:b1:19:7d:ea:5b:62:8e:97:3a:dc:
2e:a2:f8:ac:c9:0c:f9:7d:26:21:7a:eb:18:3b:2b:50:12:5d:
46:f2:89:56:60:5a:17:e8:e2:e2:16:d7:aa:4d:fd:54:7e:77:
71:ab:76:ae:04:9a:67:d5:b2:28:90:5c:c4:ef:40:e1:ff:41:
eb:67:d0:f3:1e:61:e4:53:50:5a:ef:40:17:90:0d:af:d5:84:
0a:dd:af:b1:db:8c:9b:ee:6f:4c:36:19:63:26:83:4f:31:94:
51:ad:86:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:03 2024 by rpki-client on console-ams.rpki-client.org