Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/AmWDTKHKlvjJpX1yGCjNeMYaHK0.roa
File: AmWDTKHKlvjJpX1yGCjNeMYaHK0.roa (raw, json)
Hash identifier: aPLJ6wljL2A1weJM3vWaRKobF0EuJogw5Iakdwx6Tzw=
Subject key identifier: 02:65:83:4C:A1:CA:96:F8:C9:A5:7D:72:18:28:CD:78:C6:1A:1C:AD
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0A3DD5D9
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/AmWDTKHKlvjJpX1yGCjNeMYaHK0.roa
Signing time: Sat 01 Jan 2022 09:53:41 +0000
ROA not before: Sat 01 Jan 2022 09:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207787
IP address blocks: 185.237.81.0/24 maxlen: 24
185.205.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171824601 (0xa3dd5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 1 09:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0265834ca1ca96f8c9a57d721828cd78c61a1cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:8f:74:1a:9e:be:ef:c3:15:24:ab:3b:3d:
8c:4e:a6:2a:7b:9a:4c:79:44:33:56:f5:b7:f2:b7:
8c:d5:bc:bf:83:df:ad:87:3b:fc:21:f8:6f:0f:fa:
65:1f:6d:48:3d:01:a7:07:93:cd:68:37:f7:50:10:
f4:f6:ef:b2:df:1e:f5:7b:97:42:82:2c:af:90:9d:
23:9d:1d:5c:d7:d6:e2:b1:c7:9b:73:39:6f:f2:22:
2b:15:bb:f8:a1:91:6e:50:de:e2:9d:b4:1b:32:7d:
09:87:97:0e:9b:5c:aa:46:a8:fc:74:03:28:be:c2:
63:f8:01:13:7a:c2:d4:77:1d:09:18:b7:e8:9a:72:
ad:a1:35:f4:0b:c1:ff:f4:e7:93:cc:9f:4a:43:4e:
24:96:9d:07:0d:7e:1d:0b:9f:2c:f3:29:c1:7b:cf:
0d:39:f4:2e:3f:a4:34:6d:ed:18:18:f8:d7:f7:ee:
c4:14:1c:74:59:d5:24:11:1a:c0:08:49:69:41:47:
10:c9:d1:c8:f5:f8:13:9f:e2:7c:c1:7a:20:b3:ff:
3b:b0:02:ab:a5:5c:8a:c7:a6:13:e0:6d:e4:02:36:
89:d5:67:84:be:1f:7f:b6:e9:f2:88:7e:92:d6:2c:
e8:c4:8e:e6:bf:7b:86:a0:eb:1a:8e:75:71:48:5b:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:65:83:4C:A1:CA:96:F8:C9:A5:7D:72:18:28:CD:78:C6:1A:1C:AD
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/AmWDTKHKlvjJpX1yGCjNeMYaHK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.19.0/24
185.237.81.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:83:e1:dc:6c:2d:e3:a3:e2:52:8f:a1:80:83:50:60:8e:d5:
53:dd:16:1a:e6:77:3d:f3:c5:9c:8f:5a:3e:d3:26:48:8f:7e:
40:41:18:9b:87:67:24:cd:00:13:90:1f:f1:32:0f:57:0c:8c:
fa:21:7e:24:ee:53:60:98:5a:42:cb:27:aa:e1:1d:c8:1c:b7:
37:2a:f9:e5:39:62:69:f8:ef:43:8d:93:c1:68:e2:cd:0c:a1:
fd:08:dc:52:87:4d:d3:f7:0b:99:d4:e1:02:71:f9:ed:d4:42:
ba:7b:de:2a:e9:47:db:bc:0a:ce:6b:72:90:5a:41:83:47:8d:
c3:bb:86:79:d7:eb:48:69:9f:b9:26:cc:5c:f7:a1:6a:78:22:
14:92:ea:f1:ec:38:e7:44:3c:74:7c:6a:18:16:7f:44:9b:8f:
a1:b0:b1:18:06:24:28:a6:62:f1:76:81:1f:1c:e3:a0:40:80:
70:ff:08:9d:60:66:3f:0f:1a:80:8b:b3:36:eb:61:6d:8c:0a:
cb:46:4f:0e:e7:56:50:82:49:9c:d3:96:37:63:d6:36:e4:97:
b0:66:7e:9b:64:d7:d2:02:ee:a9:8d:40:d7:53:c2:74:85:3e:
18:6a:f1:f8:07:cd:fb:ba:1d:99:39:b2:6d:78:dd:5f:d3:3d:
f7:f2:bf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org