Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/AmQuEg6h6_8jiwLL-1tsHt6v3nM.roa
File: AmQuEg6h6_8jiwLL-1tsHt6v3nM.roa (raw, json)
Hash identifier: vpgma7GMA0TF/PXEC/GrknyA05GdOIzjo5zP0u1IAWM=
Subject key identifier: 02:64:2E:12:0E:A1:EB:FF:23:8B:02:CB:FB:5B:6C:1E:DE:AF:DE:73
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 01836B05D7215C616916B47B2B2399F968CC
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/AmQuEg6h6_8jiwLL-1tsHt6v3nM.roa
Signing time: Fri 23 Sep 2022 15:44:48 +0000
ROA not before: Fri 23 Sep 2022 15:44:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202179
IP address blocks: 185.50.180.0/22 maxlen: 22
185.50.181.0/24 maxlen: 24
185.50.182.0/24 maxlen: 24
185.50.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6b:05:d7:21:5c:61:69:16:b4:7b:2b:23:99:f9:68:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Sep 23 15:44:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02642e120ea1ebff238b02cbfb5b6c1edeafde73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:86:9b:55:fd:07:7b:f9:7a:4c:17:05:05:
2a:7a:96:7e:8f:dd:af:ac:f8:8b:70:50:b1:3a:9d:
96:4f:e2:d1:e8:7c:0e:8f:5d:b6:72:c5:d9:99:28:
2e:cd:cd:88:33:53:ae:16:ba:d6:dd:26:20:d6:01:
bd:5f:1e:cc:c1:0f:6b:b8:ca:40:d3:75:df:59:62:
48:80:5d:56:86:37:58:69:5a:10:32:a7:11:af:83:
44:3f:ee:0d:15:9d:35:d8:26:0d:c6:43:73:c2:ba:
19:cb:db:25:59:db:15:72:f9:42:33:96:c6:68:a8:
aa:20:33:bb:f8:fd:dc:a1:1e:0d:da:25:58:50:6d:
d8:aa:7c:56:ce:79:1e:8b:c4:8e:3a:50:d1:95:33:
63:b6:45:4a:9b:54:20:fe:e6:1b:6c:b2:14:ce:73:
61:20:1e:56:10:0c:dc:4d:ea:68:2d:af:df:3e:0e:
73:e2:e6:96:0f:99:9e:7a:67:e4:e2:34:58:33:ec:
e9:37:04:71:9e:04:86:7a:4d:8c:69:5b:01:6a:82:
a1:06:15:a2:b7:51:e7:ea:3f:ed:23:16:6a:10:bc:
19:22:41:d2:ba:6e:8f:03:0b:fe:e9:25:3b:3c:28:
dc:17:1c:8f:3b:9c:15:b2:01:a7:86:2e:79:9a:f5:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:64:2E:12:0E:A1:EB:FF:23:8B:02:CB:FB:5B:6C:1E:DE:AF:DE:73
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/AmQuEg6h6_8jiwLL-1tsHt6v3nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.180.0/22
Signature Algorithm: sha256WithRSAEncryption
73:62:cc:88:59:d8:9c:9e:04:6f:da:f0:cb:dd:e6:aa:5a:a6:
5b:a0:0f:b2:56:86:59:3d:30:77:08:41:19:2a:34:57:42:44:
ec:d9:b4:3a:0e:ad:48:0b:2c:61:7f:5c:a0:64:14:94:e7:54:
6a:21:16:04:a5:b4:3d:68:ff:d6:80:d6:a7:e8:96:af:d9:66:
3b:9f:46:f9:8f:81:82:57:11:15:27:67:e4:38:44:89:a9:b9:
76:77:c5:0c:28:b6:19:45:03:2e:78:1d:31:ff:0d:b5:80:48:
32:cd:47:6f:05:f8:ef:98:53:9b:c9:6a:aa:00:28:d6:d3:e6:
91:3d:41:9c:fb:a1:72:50:69:26:31:5c:db:8b:20:cf:c4:15:
64:85:55:7c:53:3a:51:12:2e:41:35:26:c5:f0:8c:fb:f2:2b:
5d:b2:b7:b2:ff:d7:a8:fc:64:ad:2f:74:1f:56:34:30:21:df:
e7:ad:b9:02:f0:d6:6b:3d:f8:8e:10:13:cc:59:b7:b7:57:a9:
67:20:40:e5:08:d0:61:94:5c:3b:cd:f3:1b:ed:f8:87:01:61:
1f:95:12:92:cc:98:4f:c7:bd:6c:84:0b:cb:74:24:0b:6a:27:
db:2a:99:88:91:0c:ac:82:90:f3:5f:7c:0d:1b:3b:4c:99:b1:
da:06:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:08 2024 by rpki-client on console-fra.rpki-client.org