Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/Dd_ShDFoKqKVAI-8FVE1aqUGxio.roa
File: Dd_ShDFoKqKVAI-8FVE1aqUGxio.roa (raw, json)
Hash identifier: 1i3KFR1/kgDFoUHhhtu/BkHgN4xplqiFkqxNtxxO64k=
Subject key identifier: 0D:DF:D2:84:31:68:2A:A2:95:00:8F:BC:15:51:35:6A:A5:06:C6:2A
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 100A31AD
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/Dd_ShDFoKqKVAI-8FVE1aqUGxio.roa
Signing time: Mon 07 Mar 2022 09:41:59 +0000
ROA not before: Mon 07 Mar 2022 09:41:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.157.50.0/24 maxlen: 24
185.157.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269103533 (0x100a31ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Mar 7 09:41:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ddfd28431682aa295008fbc1551356aa506c62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:79:b9:41:66:1d:be:8c:ed:1d:da:78:6e:
02:e0:aa:f5:b4:36:d6:ad:66:37:39:3e:1f:8f:7b:
7e:6f:b7:1c:2e:41:17:88:cf:b8:dc:f1:c3:7f:08:
bb:c9:f0:8e:c4:1d:72:20:3c:76:4a:1d:cd:e2:0a:
a2:62:a8:a0:7b:52:2a:1c:29:43:c8:ab:db:c4:6f:
5e:44:db:02:6f:2d:eb:ca:4b:42:d9:b2:39:db:f5:
9a:c0:c9:f7:50:56:33:76:51:ae:c9:26:7c:64:4c:
82:c2:60:00:3e:bf:e0:ba:63:30:39:ee:41:ec:1f:
ee:68:66:60:13:0d:36:51:ae:1f:d2:b6:2b:fa:04:
22:1c:a4:77:fd:e6:97:ba:57:7f:27:bb:f7:6e:b7:
15:fe:89:74:67:30:bc:39:dc:87:dc:6e:81:b8:07:
a3:86:b8:0a:27:c6:a1:2d:b7:ae:6b:3d:9a:7d:b2:
10:a8:d1:b1:c8:ba:88:23:91:b0:e8:02:e5:4d:88:
7c:79:91:32:6e:8a:d3:69:e0:57:09:4b:a7:33:61:
4c:9f:f5:6b:32:25:84:0c:97:02:37:38:42:cf:18:
19:b4:74:34:3a:4f:12:2f:2b:b3:8c:6a:c7:f5:9f:
77:f1:ea:4c:39:86:b1:c7:e2:ed:1b:4b:34:25:90:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DF:D2:84:31:68:2A:A2:95:00:8F:BC:15:51:35:6A:A5:06:C6:2A
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/Dd_ShDFoKqKVAI-8FVE1aqUGxio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.50.0/23
Signature Algorithm: sha256WithRSAEncryption
45:d4:25:e6:1a:55:98:df:6b:a0:8e:1b:ed:65:ce:d1:85:ca:
25:42:95:c1:a2:1a:ec:45:99:43:af:a3:25:f4:3d:61:94:d5:
34:c2:2b:d9:3a:42:47:60:00:2e:5c:11:44:52:86:04:a3:69:
88:fe:a3:da:fb:1d:e9:14:cb:0a:86:d3:a9:a2:b2:85:7e:ae:
d3:e7:c3:31:1a:3d:51:8e:c3:2f:1f:3a:4d:c9:00:39:47:5f:
01:66:54:d2:0c:3a:7b:e9:bc:59:89:99:6e:f6:e4:bf:a1:be:
a5:ec:52:80:c1:76:61:a1:3e:c0:15:5a:88:94:7b:92:53:d3:
ba:0e:4a:33:e9:fd:18:58:9e:b3:18:ee:4f:75:ac:5a:e1:e7:
69:00:7e:86:21:57:0a:35:4f:0d:14:ea:1a:b1:56:e6:85:76:
6d:5f:ac:80:6b:50:6e:d5:46:7e:dd:35:5e:19:2b:ea:a2:ee:
1c:3c:b9:d0:9a:53:67:f6:79:18:93:17:7c:04:79:6d:de:25:
07:d8:8f:70:b8:f7:93:5f:43:3d:3b:56:96:52:aa:04:56:08:
47:52:74:11:76:f6:80:d7:03:a8:db:31:42:0f:bc:d3:67:6c:
91:30:41:8a:f5:de:4f:bf:80:04:dd:57:f9:23:dd:e4:eb:e1:
2e:d3:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:16 2024 by rpki-client on console-ams.rpki-client.org