Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/cDWtNJY4eLaQOZLOij7FHTPHavA.roa
File: cDWtNJY4eLaQOZLOij7FHTPHavA.roa (raw, json)
Hash identifier: VGSqzKziNpAG6EsVn0bClCP+HMJrwfw3qGci92xSPNw=
Subject key identifier: 70:35:AD:34:96:38:78:B6:90:39:92:CE:8A:3E:C5:1D:33:C7:6A:F0
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 09B636B1
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/cDWtNJY4eLaQOZLOij7FHTPHavA.roa
Signing time: Wed 20 Apr 2022 16:32:50 +0000
ROA not before: Wed 20 Apr 2022 16:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204154
IP address blocks: 185.50.75.0/24 maxlen: 24
185.50.73.0/24 maxlen: 24
185.50.74.0/24 maxlen: 24
185.50.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162936497 (0x9b636b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Apr 20 16:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7035ad34963878b6903992ce8a3ec51d33c76af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:87:71:aa:86:1e:91:2b:ca:21:ba:4a:96:
b4:95:0b:0c:8e:4d:d3:92:de:8f:58:7b:55:14:07:
dd:01:c6:f0:75:2b:77:bf:18:e4:0f:e0:97:c4:86:
64:98:99:11:16:78:a3:f4:1a:4c:99:51:3a:21:74:
01:94:95:d5:0c:99:5d:2a:db:33:ab:ab:05:bb:f9:
f1:5e:3e:97:2c:67:44:1b:ca:c8:97:37:97:df:59:
7b:97:d6:db:fa:f9:9a:54:6c:4b:bf:a5:e4:87:6f:
c5:4f:bc:8e:6b:ea:c0:da:ba:3b:1c:7f:af:22:7d:
53:83:02:a6:1f:1f:9c:69:12:0e:b8:30:24:29:6c:
d7:4b:f9:ea:d6:83:be:67:c0:9f:04:d1:5e:55:48:
b8:e8:e2:2e:47:15:79:c4:01:01:3d:f0:78:9a:46:
9e:ad:60:b6:16:50:f9:c9:20:7b:21:0e:c2:da:3d:
07:8f:49:b9:d6:92:53:97:c2:9f:75:b0:ea:fd:fb:
a6:e5:be:32:6f:8f:cd:c7:d3:2c:c6:33:77:fc:47:
3a:e9:27:91:0d:da:da:f4:df:db:77:6b:90:52:fa:
91:f6:96:05:f6:31:6e:2a:79:81:7e:c8:87:1a:d3:
60:3d:d9:81:f3:f5:44:d1:bb:9b:6e:87:69:e7:a1:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:35:AD:34:96:38:78:B6:90:39:92:CE:8A:3E:C5:1D:33:C7:6A:F0
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/cDWtNJY4eLaQOZLOij7FHTPHavA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:0f:55:bc:39:f6:e6:be:c7:9d:11:7f:83:8d:ed:a2:90:ec:
09:b6:81:bf:0e:c8:a7:f1:25:ad:90:a8:3c:3c:86:a0:4e:9b:
04:59:83:ca:3b:2a:02:db:bd:52:5c:55:8c:3e:ea:d6:81:69:
d6:0d:de:05:98:47:e7:dd:78:a1:59:19:59:d0:b3:29:b6:c3:
b9:e3:69:4e:f2:99:26:50:5c:2c:1e:27:33:7a:79:cf:c1:2a:
24:12:4e:b3:e6:4f:f6:d0:c9:2b:e8:17:a3:30:8d:61:f9:c9:
37:c1:cd:0e:e3:7a:b8:b8:08:b3:f6:43:e8:cb:c9:ab:2c:93:
c5:63:67:56:78:f1:07:a7:58:ec:99:58:0a:3a:b4:fb:92:1f:
30:3b:83:b8:16:8b:73:44:59:df:de:73:07:b9:4e:2a:b8:fa:
99:3d:d9:83:5f:5e:d4:8d:8e:a6:d0:e1:43:70:95:f3:a5:56:
f3:de:79:9d:f8:de:6d:d8:9d:32:80:fe:53:f1:ea:61:bb:44:
f9:c5:9c:29:81:b1:78:e6:59:e0:1c:8d:2e:0a:b0:ab:c4:ad:
50:09:f9:78:e4:4e:85:dc:f6:f3:36:1e:3b:35:ce:ea:92:b9:
4d:0f:9d:df:32:f1:cc:53:d2:29:8a:fb:f8:ec:72:0d:77:cc:
e4:4f:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org