Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/9K8THwdI-xxlu74NNaerVzSbMtg.roa
File: 9K8THwdI-xxlu74NNaerVzSbMtg.roa (raw, json)
Hash identifier: nWMNFTEUmX/9UexvdrwaogNoMcjykGFdZM5zy6ITcro=
Subject key identifier: F4:AF:13:1F:07:48:FB:1C:65:BB:BE:0D:35:A7:AB:57:34:9B:32:D8
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 04F76775
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/9K8THwdI-xxlu74NNaerVzSbMtg.roa
Signing time: Sat 01 Jan 2022 00:58:26 +0000
ROA not before: Sat 01 Jan 2022 00:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206775
IP address blocks: 185.124.243.0/24 maxlen: 24
2a10:1340::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83322741 (0x4f76775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Jan 1 00:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4af131f0748fb1c65bbbe0d35a7ab57349b32d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:6c:67:11:52:08:27:49:4d:92:35:1f:d2:
1e:1a:bd:f4:11:e4:20:af:72:5e:77:e8:48:25:a5:
11:fa:77:dc:37:f9:16:96:b3:ac:7a:52:2a:09:06:
fa:98:40:8b:d4:8f:a5:30:4a:76:ea:f0:47:63:8f:
8a:d8:41:ef:5f:2e:48:9d:1b:22:10:05:31:2d:14:
41:9f:4d:ba:ae:25:c1:65:18:7b:0f:d9:25:1a:3e:
aa:42:46:af:68:b6:9f:19:65:ef:55:2e:ab:cb:98:
1b:56:7d:e9:8d:7c:63:b0:ad:94:d6:83:c6:44:17:
e6:86:44:a1:4a:ef:f3:73:98:ef:27:cf:e9:57:ee:
0f:83:c4:37:5f:49:24:30:1d:c8:6a:65:9f:ae:7c:
db:da:6e:3e:3a:af:4a:ee:e5:0f:71:96:bf:09:a8:
3c:bc:8b:fb:78:5f:18:ff:47:40:40:0b:48:6b:41:
44:41:64:21:fd:d0:a5:bf:d4:48:42:82:2c:99:95:
25:dd:8c:30:aa:2c:e0:a9:c7:ef:32:a2:dc:64:cb:
66:f0:38:c1:ad:7d:06:4d:de:53:68:f0:79:9b:f8:
0c:89:99:d2:f8:10:c5:ce:db:32:26:d2:45:02:77:
22:60:23:1f:73:a7:8d:7d:c1:55:a3:49:ad:d9:14:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:13:1F:07:48:FB:1C:65:BB:BE:0D:35:A7:AB:57:34:9B:32:D8
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/9K8THwdI-xxlu74NNaerVzSbMtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.243.0/24
IPv6:
2a10:1340::/29
Signature Algorithm: sha256WithRSAEncryption
55:97:3a:c0:10:f2:e6:c7:f2:b6:2f:44:0b:58:fb:44:15:5c:
cd:87:ae:d4:3a:35:a6:65:4f:0a:cf:43:51:40:74:ff:b4:ea:
1c:85:ee:9f:84:5d:42:65:6d:df:07:8d:fd:00:de:b4:95:cd:
ee:97:b4:fc:b7:df:22:34:8d:07:10:b2:f1:41:a3:2f:06:05:
58:1f:93:09:c8:89:d0:21:17:17:26:82:5e:25:a3:3c:a6:e5:
e8:4a:fc:d4:86:71:63:ad:9a:e9:2d:82:51:81:40:36:e7:97:
50:c1:93:d3:74:15:24:be:18:d7:ff:33:f0:26:ca:05:61:9d:
fb:f4:ef:90:0d:df:4e:ac:03:cc:ac:11:2a:f3:88:a9:48:32:
66:1a:a7:8f:af:d1:78:1a:84:78:d3:92:53:65:89:63:e4:eb:
17:d2:2b:27:9d:9d:e9:f1:17:6d:fe:47:32:be:99:46:35:ab:
2d:da:a0:bf:ff:b3:57:3f:5e:16:4c:96:e4:ff:1a:f2:d5:b4:
dd:8a:78:51:01:46:c0:c3:18:49:90:b4:32:bc:68:7a:23:f4:
dc:b1:fa:26:a7:68:e1:36:4d:ab:54:41:e2:6d:2c:39:88:02:
8e:26:8d:8b:e1:13:46:c2:7b:8d:0b:fa:bd:f9:1a:05:db:50:
6f:19:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:37 2024 by rpki-client on console-ams.rpki-client.org