Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/57-iufXY_4D5jqLEVngN0bZZuh4.roa
File: 57-iufXY_4D5jqLEVngN0bZZuh4.roa (raw, json)
Hash identifier: NJ4+W+RcZixsTJk218VHEtEKTyJ+4ODfHRl0mjw/x8k=
Subject key identifier: E7:BF:A2:B9:F5:D8:FF:80:F9:8E:A2:C4:56:78:0D:D1:B6:59:BA:1E
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 01849E3A0FA8E9C28E405CEB39FBDCAD4721
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/57-iufXY_4D5jqLEVngN0bZZuh4.roa
Signing time: Tue 22 Nov 2022 07:25:15 +0000
ROA not before: Tue 22 Nov 2022 07:25:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201405
IP address blocks: 185.49.48.0/24 maxlen: 24
2a04:b700:185a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:3a:0f:a8:e9:c2:8e:40:5c:eb:39:fb:dc:ad:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Nov 22 07:25:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7bfa2b9f5d8ff80f98ea2c456780dd1b659ba1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:2d:53:52:f9:f3:66:d7:ce:5e:8d:dc:c7:
2b:b0:9e:6c:d3:95:33:a3:aa:66:1a:0f:0b:2e:99:
57:00:8b:60:9e:8e:2d:ca:fd:8d:14:5d:c9:02:90:
c9:30:90:d2:1e:47:bb:eb:fd:3b:a2:97:4d:8b:82:
36:d8:f1:9f:38:58:04:59:63:7a:bf:9d:a2:d4:48:
a6:05:fc:7a:09:35:c3:aa:4d:fc:c5:6b:45:cc:a6:
bb:a8:52:65:6a:a0:85:52:cd:6f:52:d3:01:56:65:
cd:fb:5e:7d:f1:bf:67:7d:d1:50:da:41:9a:ce:56:
0f:ac:ea:50:78:76:fb:7b:ab:bf:b1:c8:74:0f:9d:
f9:ac:1d:18:1e:21:2e:72:47:69:c1:02:e8:69:71:
82:3b:3c:52:b0:51:f8:10:02:2b:58:28:17:04:b9:
cf:25:72:a7:0b:e0:a0:fc:24:a4:d2:dc:cc:c4:86:
1d:d3:2b:cd:1a:b2:d9:95:e6:91:d9:97:f2:4b:68:
20:4c:35:b6:bb:02:42:26:fa:9b:b1:ba:4e:de:b6:
7e:93:16:a5:9c:f5:4c:de:d5:77:c0:5f:db:bc:76:
7b:54:df:f1:3b:9c:76:15:6e:8a:04:bf:c7:56:da:
83:2b:13:ba:00:c4:c4:3c:ba:99:17:22:3b:61:67:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BF:A2:B9:F5:D8:FF:80:F9:8E:A2:C4:56:78:0D:D1:B6:59:BA:1E
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/57-iufXY_4D5jqLEVngN0bZZuh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.48.0/24
IPv6:
2a04:b700:185a::/48
Signature Algorithm: sha256WithRSAEncryption
8c:90:1f:b4:be:fd:68:5e:24:5e:e1:d6:84:f4:b8:1d:7b:49:
7b:4c:b2:7d:c2:e6:3d:1b:a2:bb:d5:66:75:77:bf:8b:cc:f5:
e2:52:fa:95:08:7c:6a:34:79:78:64:90:00:66:bb:37:f1:db:
12:de:02:2e:3f:5b:43:00:2a:33:64:e1:5f:83:ff:70:17:5c:
ab:5c:28:f0:22:61:71:fd:05:62:8f:33:cc:b1:88:75:c1:28:
b1:57:10:61:2c:b3:37:84:a4:15:db:3b:03:85:2c:1e:6e:12:
ea:08:4c:8c:a9:3b:62:93:3f:fc:e9:07:08:32:7f:02:6c:3c:
da:55:64:ac:ec:d0:df:64:43:8d:6e:46:5d:ed:03:d4:5a:6c:
5e:79:96:8f:99:47:c9:d0:27:0e:39:1b:a3:9e:aa:61:18:48:
28:cb:41:40:9d:58:a2:f9:80:f5:3c:0a:32:05:42:d4:b0:fe:
e3:73:47:69:15:46:38:b0:34:92:7b:37:db:d2:1d:5a:79:61:
f5:fd:52:75:8f:eb:2c:6b:a9:75:dd:59:4f:db:17:ef:97:4c:
82:44:36:0e:2f:ef:79:6f:b3:37:5d:75:c6:06:00:e5:e2:96:
db:a3:b0:36:3d:a3:77:6e:cd:1f:cf:ea:bc:71:45:b4:82:58:
4f:c6:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-fra.rpki-client.org