Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/OnpSa1sz86ORCs2ty5z6Hm_xjH4.roa
File: OnpSa1sz86ORCs2ty5z6Hm_xjH4.roa (raw, json)
Hash identifier: b0uFB+cmFRDute2OfkBsUSDbB0RuuxmI/5tXAWEl1kk=
Subject key identifier: 3A:7A:52:6B:5B:33:F3:A3:91:0A:CD:AD:CB:9C:FA:1E:6F:F1:8C:7E
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 024DD325
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/OnpSa1sz86ORCs2ty5z6Hm_xjH4.roa
Signing time: Sat 01 Jan 2022 15:58:08 +0000
ROA not before: Sat 01 Jan 2022 15:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50103
IP address blocks: 185.186.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38654757 (0x24dd325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Jan 1 15:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a7a526b5b33f3a3910acdadcb9cfa1e6ff18c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a4:d5:a1:14:04:dd:82:93:07:95:24:29:fb:
3b:f2:88:5c:cf:2a:fa:42:b7:69:0a:b3:b2:06:96:
87:bb:a3:b3:5c:62:86:53:25:72:36:6a:fd:42:49:
4b:f0:5e:a9:2d:73:11:91:2d:6c:d6:2d:63:10:62:
07:29:06:7b:8c:f2:0d:86:44:18:e0:02:f4:ce:10:
30:b5:49:46:4b:37:4a:55:cc:05:97:60:32:4e:dc:
55:b1:58:63:9f:5c:61:19:76:39:f9:a8:ec:15:a7:
98:c2:10:e8:30:b4:3a:ba:0a:9e:f5:f7:b6:cd:62:
0f:a7:3b:91:12:bf:6e:25:50:6e:95:d8:63:ab:4b:
ba:4b:6d:f5:00:26:ad:83:92:17:86:e9:91:51:9e:
7d:fa:c1:66:15:98:af:d8:34:0b:cb:c4:69:ee:fa:
5c:81:19:98:2d:1a:a8:06:bf:f2:c7:0b:77:82:26:
30:d0:90:82:42:82:3c:1a:84:93:53:49:b1:29:3c:
b0:bf:31:8b:45:24:3b:8f:5c:eb:c1:70:45:70:1a:
93:d3:ac:55:d3:70:98:d7:29:29:c6:58:7c:88:c5:
5d:93:a1:56:48:a6:9b:04:36:d9:fe:36:dd:0e:76:
d6:a5:a9:10:66:3b:61:0e:3a:19:bd:47:61:3a:4b:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:52:6B:5B:33:F3:A3:91:0A:CD:AD:CB:9C:FA:1E:6F:F1:8C:7E
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/OnpSa1sz86ORCs2ty5z6Hm_xjH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.1.0/24
Signature Algorithm: sha256WithRSAEncryption
06:22:a9:97:f6:8a:7c:59:0f:f6:13:3e:71:3a:bb:35:8a:54:
33:4d:8e:e6:3a:d4:3d:5e:f8:60:12:69:26:90:13:ee:c0:3b:
55:05:a7:36:d5:2e:62:e1:60:23:57:ad:7b:42:7b:b1:3d:09:
ea:53:ab:e9:93:9e:4e:2c:63:cf:5a:32:f1:1e:50:ce:ed:7d:
39:9a:75:c5:c2:ea:14:84:ef:85:b4:d9:08:66:c3:2d:38:e6:
fe:26:b7:13:22:27:00:e8:82:5a:dc:1b:06:f3:65:44:d2:ad:
6d:27:22:dd:1c:ce:6a:1a:e8:eb:2f:c6:17:1f:54:c0:e2:45:
09:bb:eb:43:7f:7d:47:0d:df:a1:70:b3:44:9e:a8:c9:69:b6:
a4:bf:96:36:5e:45:f9:47:df:93:a0:44:79:18:ed:50:66:c3:
ac:cf:5e:c6:18:73:ce:40:69:e8:3f:c6:e6:cc:52:30:67:d3:
21:17:7f:7d:da:c2:23:09:df:c5:59:19:6e:54:02:a9:be:1e:
e6:1d:c0:bc:94:07:5b:a3:ca:2a:c5:a1:26:d0:1f:c8:8f:ce:
76:79:fa:0b:65:87:9b:e9:1a:02:63:6f:20:da:f0:dc:1b:ec:
33:5a:c8:91:f1:35:17:04:f1:46:b7:1b:1a:c4:d4:a3:45:ff:
8b:2c:08:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:19 2024 by rpki-client on console-fra.rpki-client.org