Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/5O_BZOckJa8JdbKo-mWsKg_68ZE.roa
File: 5O_BZOckJa8JdbKo-mWsKg_68ZE.roa (raw, json)
Hash identifier: q9aKWvebEgxFhUlgRWin21UYfW06XKeG8rPt2VsVlw4=
Subject key identifier: E4:EF:C1:64:E7:24:25:AF:09:75:B2:A8:FA:65:AC:2A:0F:FA:F1:91
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0183760257BB12A6D39A2EAE145BDDED562E
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/5O_BZOckJa8JdbKo-mWsKg_68ZE.roa
Signing time: Sun 25 Sep 2022 18:56:48 +0000
ROA not before: Sun 25 Sep 2022 18:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201086
IP address blocks: 185.205.19.0/24 maxlen: 24
193.36.63.0/24 maxlen: 24
185.254.94.0/24 maxlen: 24
2a05:b700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:76:02:57:bb:12:a6:d3:9a:2e:ae:14:5b:dd:ed:56:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Sep 25 18:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4efc164e72425af0975b2a8fa65ac2a0ffaf191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:38:2b:cd:f2:b5:f8:8e:ce:24:46:f7:f8:
84:79:e9:d7:57:ff:18:cf:00:df:63:f1:98:15:49:
fe:79:65:81:46:b9:61:58:a8:53:0e:2c:68:38:c3:
77:d0:95:1b:dd:6a:f1:cf:ee:f6:08:f9:05:04:a1:
65:42:db:c5:f2:ee:5b:cc:de:16:df:b8:2a:99:ba:
0d:82:6b:8f:34:ec:a5:c1:c7:38:85:98:28:cc:cf:
0a:27:1f:3e:66:f0:fd:89:dc:01:52:40:a4:ee:4c:
84:3d:c0:37:3d:cf:a5:14:cc:db:cb:d8:a2:62:d6:
9b:3a:22:30:f6:1a:81:b6:59:94:d7:94:e8:e0:99:
ae:d8:64:80:90:e1:9b:a3:02:63:7f:99:bb:c6:6b:
a4:f2:91:53:41:a7:52:f3:5a:d8:a0:da:ec:8d:a0:
0e:c7:38:a2:35:54:e9:81:30:e5:c0:ea:da:fe:c1:
22:86:4f:56:6b:97:6b:ff:8e:21:a2:50:b7:8f:02:
65:51:fa:12:e6:91:46:04:8b:1d:85:59:d7:06:a9:
88:66:1b:fa:e3:c8:2c:cd:a0:34:3a:c5:a2:65:92:
1a:dd:18:3e:3e:ce:19:08:d5:09:41:fa:b6:e1:6e:
84:a2:8c:7b:72:13:07:35:f4:50:a0:06:a3:ce:0e:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EF:C1:64:E7:24:25:AF:09:75:B2:A8:FA:65:AC:2A:0F:FA:F1:91
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/5O_BZOckJa8JdbKo-mWsKg_68ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.19.0/24
185.254.94.0/24
193.36.63.0/24
IPv6:
2a05:b700::/29
Signature Algorithm: sha256WithRSAEncryption
3f:64:78:2f:31:89:77:ff:4d:07:81:de:04:cd:7c:c3:d9:53:
b1:5b:b0:6b:f1:55:2c:19:5a:22:4c:23:77:37:b4:b3:9e:ec:
ef:3f:28:2a:84:82:8f:43:eb:1d:9a:00:18:75:40:61:f9:df:
bd:ea:bd:cf:42:8c:ec:42:4e:e6:dd:a1:9a:59:68:ee:ef:b2:
e5:6e:c1:6e:55:4b:54:50:50:38:52:e4:9d:a5:e8:0b:30:20:
8a:c7:40:88:ff:fd:24:df:c5:7f:c4:20:17:17:cc:43:a8:c5:
04:1a:f5:0a:8f:f9:a8:08:6b:8d:9e:aa:ff:5d:5e:49:e5:14:
68:57:48:26:89:a4:6f:62:f8:48:84:6f:70:d7:90:3a:5d:ec:
df:5e:91:35:d7:6f:8d:06:50:bc:07:f9:73:95:6f:2b:9b:48:
f6:f3:f6:61:fc:a2:66:0b:9e:75:96:a9:d6:9a:30:92:07:0a:
f1:0c:c1:29:3a:d4:38:c1:f5:ef:aa:82:28:50:01:d4:3e:2a:
61:b7:b6:cd:af:5e:78:2a:38:e5:dd:21:d6:33:a3:ec:54:44:
11:ce:fd:4c:8b:b0:ce:0c:3a:f6:dd:33:d8:7c:06:70:1c:b0:
14:d7:a8:46:d4:bc:e0:4d:3e:db:dc:8d:ff:c3:01:2d:c1:4c:
61:6d:f5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org