Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Sc25DcjLO4VZZfwEonBWsiLsL1E.roa
File: Sc25DcjLO4VZZfwEonBWsiLsL1E.roa (raw, json)
Hash identifier: 1PzyFIxA47yFT9nD+xCXqYEdcWdwgSoUGLUSHLG35os=
Subject key identifier: 49:CD:B9:0D:C8:CB:3B:85:59:65:FC:04:A2:70:56:B2:22:EC:2F:51
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821A2CDA51EA57D1B9CB05A2289234A75A
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Sc25DcjLO4VZZfwEonBWsiLsL1E.roa
Signing time: Wed 20 Jul 2022 05:55:23 +0000
ROA not before: Wed 20 Jul 2022 05:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199437
IP address blocks: 188.21.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:2c:da:51:ea:57:d1:b9:cb:05:a2:28:92:34:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 20 05:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49cdb90dc8cb3b855965fc04a27056b222ec2f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:4a:85:b1:2a:13:f2:c6:f4:fd:ec:a5:4a:
44:8d:b5:50:d6:b9:66:e5:ed:b9:f0:c9:9f:86:54:
68:b7:ae:c3:f7:cb:06:ea:a3:88:0a:66:b0:ea:5f:
e1:59:0c:b2:8a:89:ed:35:6b:03:a6:93:b2:09:79:
44:8d:9e:69:03:80:f5:a4:34:82:09:de:76:d7:ec:
da:90:49:9a:61:2c:fe:d3:56:85:1e:67:dc:80:f1:
46:07:2c:27:50:c4:ce:d1:8b:f3:e6:0f:78:4a:19:
43:fc:99:77:7d:4d:4c:44:d9:90:98:82:48:a3:e0:
a2:d2:42:a3:bc:70:23:d4:86:67:80:29:c8:51:6f:
d8:f5:79:7e:89:e2:82:40:9a:ab:53:75:6d:92:69:
67:81:48:86:12:1e:9d:be:72:18:83:89:34:c8:be:
e2:7a:e7:18:56:09:65:9a:b4:44:23:70:4f:46:e6:
94:97:51:76:ab:13:7d:32:b3:29:87:6a:48:93:3e:
e0:68:17:d8:87:ab:2f:35:5c:80:ad:14:1a:54:ea:
4e:7a:84:e5:e0:2f:5b:e9:ab:3b:8e:04:99:3b:af:
76:f4:d7:36:41:c2:d8:a6:89:2b:09:e1:98:27:66:
94:0a:f3:93:fa:ca:67:55:2d:cc:97:dd:71:43:b6:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:B9:0D:C8:CB:3B:85:59:65:FC:04:A2:70:56:B2:22:EC:2F:51
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/Sc25DcjLO4VZZfwEonBWsiLsL1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.21.6.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:f7:25:34:f0:09:5e:88:c1:48:2d:84:55:7b:60:b2:dd:94:
d4:ae:7d:04:35:fa:b6:38:7c:2c:74:85:d4:00:9b:5b:76:5a:
c9:dc:e2:87:3f:64:2d:81:7f:f5:60:6f:c4:cf:ee:ed:5f:29:
04:fa:b5:c3:b7:ee:86:85:f3:9b:8f:a5:fa:46:af:e1:74:8c:
15:96:6f:8d:56:91:8e:94:d1:53:6b:5f:bf:09:b1:c3:e2:10:
78:91:14:4f:ae:97:43:99:08:13:33:8c:6a:82:ef:99:c0:b5:
d3:a1:eb:5c:79:24:e3:13:b4:54:1c:6a:e1:40:fd:3d:a9:4a:
ae:1f:22:aa:0d:fe:46:c8:e3:04:a9:92:1b:a6:65:04:33:c9:
8d:0f:b5:22:24:9e:fb:b3:45:7c:08:ba:c4:f8:74:b5:99:54:
3e:d4:9e:a5:54:3b:b9:3f:f4:e5:77:1c:fb:7c:42:61:55:ac:
32:ff:c0:9a:1b:f2:b6:05:f7:f6:e4:7e:55:80:96:e6:cb:dd:
f5:46:e6:8e:46:e1:b4:1d:93:2a:c2:3a:ff:e1:b3:cd:6e:f9:
46:61:72:f0:7e:47:b8:d8:29:9a:6e:7d:23:39:90:74:8b:3e:
af:f0:7f:ee:d8:ca:64:cd:13:16:fd:56:b8:8f:60:fe:cd:8f:
68:58:8f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org