Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/M9XGCeSfLOwcrbGYIo8UDM1WhaU.roa
File: M9XGCeSfLOwcrbGYIo8UDM1WhaU.roa (raw, json)
Hash identifier: idU79hZrRzmMNdxPtrU/gZZaSTwG0Ggd7dZ2Ux0icJ4=
Subject key identifier: 33:D5:C6:09:E4:9F:2C:EC:1C:AD:B1:98:22:8F:14:0C:CD:56:85:A5
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 048858E8
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/M9XGCeSfLOwcrbGYIo8UDM1WhaU.roa
Signing time: Sat 01 Jan 2022 12:59:18 +0000
ROA not before: Sat 01 Jan 2022 12:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28682
IP address blocks: 185.49.0.0/22 maxlen: 22
2a01:9ce0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76044520 (0x48858e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Jan 1 12:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33d5c609e49f2cec1cadb198228f140ccd5685a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:13:fc:75:e9:c8:4d:0e:e9:d1:83:5c:7c:
00:d1:ac:2c:49:1d:81:63:ad:30:33:ce:6a:f8:b1:
77:da:e1:ac:f2:ae:9c:93:46:e9:9e:e0:06:f0:ae:
c3:b0:fb:ff:a6:21:72:23:a9:28:28:e8:4e:87:e9:
4e:27:42:d5:5e:49:69:ac:08:e0:6a:a1:3e:49:8f:
05:a1:d7:96:a4:47:f8:7e:6a:7f:fe:3e:cc:dd:05:
39:31:4d:e8:d4:08:a6:26:ac:b0:61:28:4c:41:16:
6f:66:95:80:c4:50:99:bd:5a:e9:74:3b:2d:86:ca:
5b:12:a5:70:00:c6:88:d3:7a:e4:9c:b7:36:20:a5:
a6:74:67:28:bb:92:0f:38:41:f1:8f:8e:41:ff:aa:
7c:ca:64:fb:77:cd:fa:ef:0a:48:4e:2c:af:ea:46:
dd:0a:45:4e:35:de:7b:1f:14:29:4b:61:21:5f:18:
c3:d5:35:25:e0:ff:06:13:06:ee:dc:90:30:dd:ef:
59:17:52:03:c6:9a:85:b2:53:0f:b7:38:a7:b1:47:
61:47:cd:94:68:b4:b5:5a:66:72:49:92:88:32:61:
74:d4:6c:1c:9e:91:ac:b3:1f:b8:7f:77:05:e2:5a:
28:c8:fe:3e:8b:ed:5c:9a:01:ee:ee:f2:e8:e2:2a:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D5:C6:09:E4:9F:2C:EC:1C:AD:B1:98:22:8F:14:0C:CD:56:85:A5
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/M9XGCeSfLOwcrbGYIo8UDM1WhaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.0.0/22
IPv6:
2a01:9ce0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:02:05:c4:14:a4:d2:aa:2c:cb:85:26:f2:52:02:d9:1c:ed:
d3:97:bf:36:22:e7:87:34:7f:10:18:28:be:c6:2b:1b:b0:44:
6f:66:86:52:d3:71:c3:3c:f6:30:d9:14:35:a3:4f:6b:a0:47:
72:c0:9d:46:55:02:b8:0d:87:73:f1:93:90:e8:81:b3:b2:2f:
de:42:0d:d0:3e:26:35:56:94:a3:43:62:63:ca:f4:f9:44:3a:
f8:64:96:1a:eb:fe:ce:83:cd:dc:e0:02:91:c1:06:6c:d8:8c:
5f:12:df:b2:b5:65:94:29:f0:fc:fe:b1:4f:c0:2a:ee:af:cf:
4e:48:ae:29:98:03:a0:0e:bf:c9:e5:86:94:79:c9:3a:a0:2f:
c7:fd:fd:33:e1:38:4a:4f:0c:d1:d0:c1:63:0d:49:82:64:ba:
45:18:a6:22:ed:98:ce:2c:49:77:75:c4:48:f8:fa:5e:85:4b:
86:84:b7:eb:d6:c6:13:97:9a:9e:2e:66:03:14:b0:84:5f:40:
bc:c7:15:59:9c:d4:bb:b6:b2:d8:92:a2:53:af:fc:81:87:93:
db:15:93:3b:36:4c:93:d6:25:cf:6b:e9:2b:3a:f9:b0:7b:e0:
fb:f9:dd:2b:49:30:58:e6:be:df:5b:4f:b1:ca:b4:1e:77:c2:
f6:b2:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:31 2024 by rpki-client on console-fra.rpki-client.org