Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/SSGfcohXqLF-mOcDBMqmAPhXu7E.roa
File: SSGfcohXqLF-mOcDBMqmAPhXu7E.roa (raw, json)
Hash identifier: lTvAOZ6gga+8GU2YdyV7wdat/UN66bAlhHbeqLEjuaw=
Subject key identifier: 49:21:9F:72:88:57:A8:B1:7E:98:E7:03:04:CA:A6:00:F8:57:BB:B1
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 556D07
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/SSGfcohXqLF-mOcDBMqmAPhXu7E.roa
Signing time: Sat 01 Jan 2022 02:57:44 +0000
ROA not before: Sat 01 Jan 2022 02:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47719
IP address blocks: 185.61.48.0/24 maxlen: 24
185.61.51.0/24 maxlen: 24
185.61.50.0/24 maxlen: 24
185.61.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5598471 (0x556d07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Jan 1 02:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49219f728857a8b17e98e70304caa600f857bbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:e0:b2:db:89:fe:3a:94:73:20:2f:d1:e3:
de:5a:42:12:bc:03:e9:80:5c:f2:27:bf:fb:b0:5d:
b7:df:fc:dd:86:7e:c9:49:1b:03:e4:e2:57:88:dd:
d4:54:57:a6:be:ca:ef:d0:1b:e4:65:15:c6:cc:a8:
a0:77:28:2e:4b:3d:a2:c9:bb:2f:ff:aa:57:1a:8a:
35:6e:9b:cb:5a:40:63:6e:23:4d:0d:c0:98:3d:80:
f0:6d:b1:e2:be:92:d3:81:fa:1e:ef:ef:db:c3:14:
8c:72:0e:39:7f:cf:63:f7:db:75:d7:ef:d2:ec:99:
dc:a6:60:51:85:6a:33:4f:5b:61:70:b4:33:47:48:
a4:98:ab:d7:78:55:13:65:de:84:71:ae:63:96:9d:
a6:e6:c8:ad:78:84:64:7a:71:c6:5a:fb:1a:03:52:
3b:3a:7a:83:8e:dc:8d:30:9e:19:39:c0:49:41:c3:
b1:dd:76:43:d8:70:89:34:d4:02:45:d4:cc:c8:92:
45:f6:69:b9:66:a6:e3:41:ff:4b:53:6f:56:7e:4b:
db:aa:70:c5:d3:ad:52:e9:61:a2:d9:38:ff:9d:40:
e0:24:14:80:4a:c8:8c:2b:08:37:4f:8c:86:a7:d6:
c3:38:03:13:ab:d3:c2:91:e6:08:97:71:fb:bd:09:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:9F:72:88:57:A8:B1:7E:98:E7:03:04:CA:A6:00:F8:57:BB:B1
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/SSGfcohXqLF-mOcDBMqmAPhXu7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.48.0/22
Signature Algorithm: sha256WithRSAEncryption
19:3c:0f:fd:2c:53:d1:a2:4e:a4:2f:06:5b:95:c4:8f:5f:9f:
ea:c0:12:d0:13:5d:6f:80:46:72:b9:10:7d:55:df:91:96:ae:
b7:72:98:c5:a5:0b:a9:a3:9b:4d:2b:71:4e:73:7a:0f:d3:0d:
13:2e:09:36:8e:71:ca:83:3f:15:69:e5:f7:23:22:ac:cc:7e:
67:fd:b0:30:e1:83:f1:7a:16:3f:31:94:d3:f9:0a:d9:59:78:
bb:4e:11:49:e8:3b:8f:1a:10:96:82:7f:ca:02:32:0d:02:b1:
35:52:fd:73:b6:a2:da:8a:f8:b9:c5:ed:ad:98:ca:f9:35:9a:
fb:41:21:23:4f:2f:4b:e6:96:61:7b:13:a4:eb:bb:74:e7:0c:
71:16:37:ce:10:a8:03:6f:6b:3b:6d:6b:b3:c7:fc:b0:54:dc:
70:57:1f:d3:8b:07:82:2f:21:60:2e:ac:8b:4c:da:59:3a:0f:
31:68:3e:5f:76:9d:0a:cc:f2:2a:4d:5d:8c:c1:e0:25:d0:01:
f7:b5:a4:f5:55:35:cc:0f:65:95:39:d7:92:bf:50:39:fd:ae:
52:61:57:88:e8:01:4e:6f:2d:14:50:78:8d:3f:c3:50:52:f9:
cd:b9:05:2b:34:f6:0c:c0:0d:40:dd:bf:a9:02:75:6e:c3:ad:
b7:97:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:33 2023 by rpki-client on console-ams.rpki-client.org