Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/sf7s5-AM-tzmpHjd5c06zU0kW84.roa
File: sf7s5-AM-tzmpHjd5c06zU0kW84.roa (raw, json)
Hash identifier: Zx9eei+i26oPhAWR0z3LtySSfJ+LYYDyrO5E5vyhhOc=
Subject key identifier: B1:FE:EC:E7:E0:0C:FA:DC:E6:A4:78:DD:E5:CD:3A:CD:4D:24:5B:CE
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 1751303A
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/sf7s5-AM-tzmpHjd5c06zU0kW84.roa
Signing time: Sat 01 Jan 2022 16:03:53 +0000
ROA not before: Sat 01 Jan 2022 16:03:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50336
IP address blocks: 188.211.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391196730 (0x1751303a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1feece7e00cfadce6a478dde5cd3acd4d245bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:85:1f:47:4f:e1:f7:a7:ef:95:cc:97:28:d8:
6b:0a:f7:33:42:d4:0e:78:bd:78:29:f8:60:54:ad:
3a:38:f8:7e:13:91:05:e3:00:94:c6:77:c9:a3:2b:
3a:ab:51:ac:38:78:94:d4:b7:99:dc:ca:00:28:30:
17:ee:b2:13:63:ab:be:41:eb:d7:7a:b7:4e:85:34:
5c:91:c9:fc:0b:97:00:0b:28:8f:96:73:d4:7e:14:
30:58:e2:c0:e2:5d:f0:04:cc:df:e8:7d:9b:71:28:
55:32:87:b8:25:8c:89:25:cf:23:fe:bc:52:1a:10:
54:dd:27:9f:58:6f:1b:ba:ef:bc:d5:50:3a:f7:c5:
b1:c2:0f:7d:2a:c4:1a:f8:14:61:b8:04:d9:20:6d:
3c:83:e6:9f:66:1e:68:93:69:ad:cf:fc:62:4d:28:
fe:5d:7a:a4:0c:87:0a:9b:aa:e7:56:93:f8:be:34:
89:42:5c:15:a9:b5:10:db:82:f9:d1:0b:cf:90:94:
0d:b8:eb:a8:73:88:b0:62:fe:72:ba:15:eb:e7:3f:
c2:08:aa:e3:dc:c0:f3:8c:91:29:bc:9a:5e:2e:6d:
c6:23:e7:24:e3:61:e8:18:de:21:ae:79:37:01:48:
95:90:49:25:35:dc:c6:44:62:25:41:62:00:a9:ae:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:EC:E7:E0:0C:FA:DC:E6:A4:78:DD:E5:CD:3A:CD:4D:24:5B:CE
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/sf7s5-AM-tzmpHjd5c06zU0kW84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.224.0/22
Signature Algorithm: sha256WithRSAEncryption
03:c5:81:f3:e3:44:c0:76:bd:ac:5e:de:1e:db:6e:b3:4a:d6:
3d:59:5f:bc:cc:50:07:8c:fb:e7:fc:d5:4b:c8:d2:76:e8:c1:
9c:89:ea:82:c7:d4:9e:5f:90:13:91:1e:0f:4e:4e:b1:73:af:
32:69:04:12:bf:9b:93:a4:2a:4f:82:90:4e:70:6e:cf:db:2e:
e3:f0:e7:e8:f6:db:0e:54:06:dd:67:e0:f1:5a:37:6c:4b:8f:
be:a5:f0:87:1a:56:f2:2f:5b:96:eb:cc:33:88:e7:7a:c4:c5:
15:a1:ba:dc:cd:8e:3e:bf:39:95:a0:95:3d:56:67:49:7a:ce:
19:68:8e:33:7d:94:2c:19:4a:23:f2:7d:83:f1:7a:5c:f0:59:
96:04:92:2e:54:57:48:8b:98:ee:0e:54:ea:25:a7:c4:e7:f2:
0a:7c:86:84:e3:29:4f:77:2e:45:f1:25:ee:c2:46:b9:b1:45:
42:45:2b:72:0b:ff:80:ce:f6:cf:6e:2b:eb:e1:58:98:a3:d9:
22:82:05:46:b8:a6:01:98:a7:6e:c5:11:9c:7a:5d:7e:96:b6:
62:ec:45:88:97:fa:d1:f6:ee:e0:1d:fb:fb:f4:09:e9:99:7b:
0c:d9:66:3e:89:ea:4e:35:7c:43:20:3a:8c:fe:82:a7:18:a9:
b0:6c:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:41 2024 by rpki-client on console-ams.rpki-client.org