Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/cweuNn0G2W680GKTns-wolDq9Q8.roa
File: cweuNn0G2W680GKTns-wolDq9Q8.roa (raw, json)
Hash identifier: 3h1nMlRpaU06CtoURFULkQlNRz8Iknh28e+/SVZDsfo=
Subject key identifier: 73:07:AE:36:7D:06:D9:6E:BC:D0:62:93:9E:CF:B0:A2:50:EA:F5:0F
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 07C06AB1
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/cweuNn0G2W680GKTns-wolDq9Q8.roa
Signing time: Sat 01 Jan 2022 09:55:24 +0000
ROA not before: Sat 01 Jan 2022 09:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.75.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130050737 (0x7c06ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Jan 1 09:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7307ae367d06d96ebcd062939ecfb0a250eaf50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:cd:46:bc:62:19:e7:b0:39:22:9b:ee:c2:
0a:a6:db:68:5a:c2:99:8b:6d:69:cc:34:1f:a2:f0:
8a:a8:b9:f4:48:33:c3:cf:89:e8:07:aa:26:87:38:
2f:1b:e1:c5:c5:6d:ea:6e:5c:94:95:14:86:84:a1:
51:4b:5f:88:9e:a4:0d:28:b8:ca:41:bf:e5:46:9b:
76:61:fd:a8:c6:a4:dd:05:a6:12:8c:de:91:a9:a0:
08:89:ff:df:ac:3a:b6:98:15:9b:35:1f:ce:96:c2:
48:0c:07:a0:79:c4:a5:17:25:41:98:22:d2:7d:17:
78:8f:b8:41:dd:2b:eb:f8:a1:2e:56:36:1a:74:30:
fe:20:fc:e1:5b:a8:37:b9:13:df:49:d0:73:58:93:
57:4b:0d:2c:d1:42:fa:68:9b:f3:2b:8f:1d:49:72:
11:09:7c:c5:45:2a:9e:65:0c:f5:1c:0f:01:30:e3:
eb:af:37:31:56:92:37:ad:17:c2:28:88:86:79:41:
13:bd:5c:52:87:d2:87:78:91:14:af:d1:11:a0:4f:
e2:ee:b1:a9:19:9c:c1:d4:41:64:86:b2:ba:cc:99:
0f:0a:49:1d:ef:58:07:57:02:6f:68:d8:07:b6:41:
db:4d:33:c0:8d:aa:b8:98:36:02:3f:e6:7d:f3:54:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:07:AE:36:7D:06:D9:6E:BC:D0:62:93:9E:CF:B0:A2:50:EA:F5:0F
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/cweuNn0G2W680GKTns-wolDq9Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.60.0/22
Signature Algorithm: sha256WithRSAEncryption
26:c9:4e:26:9e:c7:7b:57:2c:56:4f:69:c8:40:bd:8d:b5:10:
3a:f3:06:65:ca:d7:c7:57:39:98:cd:9c:22:25:36:30:bb:08:
79:f5:d8:37:74:39:6c:df:1a:a1:f6:f5:92:48:49:5e:34:17:
4b:31:f9:ad:c5:2e:73:51:c0:c5:01:cb:45:e2:e6:92:48:62:
3a:a1:96:43:5a:74:a7:b9:11:e1:73:35:f3:c5:db:61:82:a0:
6d:ac:44:5e:c2:93:8f:7f:5a:73:fe:6c:17:55:61:75:d4:6c:
fc:e6:a8:85:a1:38:54:66:70:3b:d9:66:06:83:40:4d:26:73:
17:e6:c4:f4:d7:e2:27:d2:3c:2d:3a:74:a5:40:5d:84:55:e3:
59:04:72:db:ad:63:2f:d3:8a:b5:46:18:70:a3:05:af:03:a5:
4a:02:c4:a4:2b:c8:de:8a:db:03:f0:f1:21:84:ee:68:59:a6:
8f:0c:b8:2a:02:ca:6f:a8:ca:45:50:96:09:5a:14:a7:34:fd:
d8:2e:5d:d5:b2:d4:67:69:8e:3d:12:2d:59:13:c1:83:26:30:
b8:f1:01:c6:fa:20:36:be:a4:70:ef:a1:90:45:21:8c:59:21:
6d:5a:15:26:4b:36:80:0c:35:71:34:e1:65:0d:bf:c1:d7:8a:
84:ac:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:17 2024 by rpki-client on console-fra.rpki-client.org