Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/cvMGRrdhJG0ZPa4eykWPFxpZFDI.roa
File: cvMGRrdhJG0ZPa4eykWPFxpZFDI.roa (raw, json)
Hash identifier: GL4itA3XC7FXCYiLqE7tFOaHXCOst0HMkHiRGcuJPHQ=
Subject key identifier: 72:F3:06:46:B7:61:24:6D:19:3D:AE:1E:CA:45:8F:17:1A:59:14:32
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0183D40EB2189EC2CF54348FA20830A6D306
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/cvMGRrdhJG0ZPa4eykWPFxpZFDI.roa
Signing time: Fri 14 Oct 2022 01:14:36 +0000
ROA not before: Fri 14 Oct 2022 01:14:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400509
IP address blocks: 185.2.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d4:0e:b2:18:9e:c2:cf:54:34:8f:a2:08:30:a6:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Oct 14 01:14:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72f30646b761246d193dae1eca458f171a591432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:4a:d8:8c:e1:be:9e:8f:b3:40:45:95:aa:
4b:48:59:bc:b9:8f:bc:9c:45:a0:02:e8:d1:89:31:
a4:1f:bf:d2:49:e8:9c:70:16:a6:73:71:e9:08:9c:
8f:e3:14:7a:18:d2:76:1c:a2:aa:f1:c4:a1:06:e5:
f6:94:12:42:40:d5:8a:67:12:80:30:c6:79:08:09:
42:d9:db:68:ed:64:d7:be:f9:e0:c8:2c:bb:a7:38:
4f:2b:09:a4:99:5f:75:20:57:57:c2:04:ee:26:4c:
6a:17:6b:69:8b:4d:90:76:c2:dc:24:a2:50:1a:21:
6b:6d:6f:52:8a:2d:3c:65:cc:e1:9c:24:ac:1a:48:
4c:fb:c2:22:a5:14:7b:61:ab:38:3e:e5:80:d4:b9:
0b:75:4e:c9:c5:ba:b0:29:3e:8a:bc:61:15:ce:c4:
ee:52:58:5d:48:93:63:34:22:88:44:af:1b:de:60:
fe:08:51:b5:75:db:70:f7:85:22:e0:d7:0a:db:82:
d2:7f:3c:d6:d0:c8:05:74:f4:83:b7:e8:13:2b:29:
ba:b3:60:4b:59:e2:e4:82:78:0e:42:a3:ce:53:ef:
b1:b6:ed:3d:8e:ea:ff:e5:e4:77:4b:ec:9d:31:39:
56:4b:d3:40:d1:67:b0:d6:be:bd:24:2a:23:b7:79:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F3:06:46:B7:61:24:6D:19:3D:AE:1E:CA:45:8F:17:1A:59:14:32
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/cvMGRrdhJG0ZPa4eykWPFxpZFDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.49.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:b4:e1:f1:81:ea:65:fe:5f:e5:32:9b:82:69:79:d4:65:
1d:ff:60:7f:d1:b4:81:0d:a1:9f:ea:d2:88:43:13:38:8c:37:
a6:29:95:8e:a5:c1:b9:9d:5c:fb:37:0b:e0:67:7b:32:ca:a8:
41:38:d1:fe:d3:5f:36:62:f0:37:e9:d1:10:73:b8:64:ed:26:
4a:81:54:e1:a5:8f:8d:fc:c3:30:99:04:65:9e:be:d1:ce:3e:
9f:aa:5a:d9:ed:89:69:64:be:9b:a2:74:68:4a:66:0f:fa:ff:
72:f1:cb:d0:b4:7e:19:89:37:b2:68:2c:d4:31:7d:74:7b:10:
67:86:87:fc:2e:24:81:83:12:49:2a:36:2b:7b:5f:3f:fc:1e:
ac:f3:c5:fb:68:b2:c2:1b:38:3c:44:52:0e:b4:00:0d:30:a6:
57:cc:cd:65:12:cf:3c:4d:90:af:e9:44:a6:49:dd:0e:6b:2f:
d4:3a:0c:72:15:12:04:c8:b3:78:7f:50:63:23:01:c0:1f:19:
7f:44:bc:6a:a3:fe:ca:d5:69:f3:4a:45:01:bf:54:39:b7:2f:
67:9c:4d:cf:47:f5:5a:fd:9b:fe:89:02:a5:7f:77:8e:50:0b:
b5:c9:62:b1:a5:93:99:87:20:2a:e8:56:3b:00:0f:a1:e9:ff:
96:51:b4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:19 2024 by rpki-client on console-fra.rpki-client.org