Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wQRmwkDyIsTcKPOupmYWbYKtWdI.roa
File: wQRmwkDyIsTcKPOupmYWbYKtWdI.roa (raw, json)
Hash identifier: MOYhRe69qc0sKeIcYngc9oV+OchUq3DrnUnBkvHH24s=
Subject key identifier: C1:04:66:C2:40:F2:22:C4:DC:28:F3:AE:A6:66:16:6D:82:AD:59:D2
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 108DBC83
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wQRmwkDyIsTcKPOupmYWbYKtWdI.roa
Signing time: Sat 01 Jan 2022 10:02:11 +0000
ROA not before: Sat 01 Jan 2022 10:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50941
IP address blocks: 185.172.51.0/24 maxlen: 24
185.172.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277724291 (0x108dbc83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 10:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c10466c240f222c4dc28f3aea666166d82ad59d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:a3:18:e1:77:ce:08:c9:b1:4b:f3:fe:d9:
fd:d4:c5:e1:9a:65:b9:d6:1b:33:d2:6f:91:3a:e9:
ca:82:bf:bc:a5:0e:97:d2:b0:4c:87:ad:60:14:54:
48:b5:4c:0f:93:52:8d:0e:ab:4d:00:05:de:2e:d8:
ae:2a:c6:b2:b3:e5:32:ce:7c:27:84:88:98:ab:5b:
28:f7:72:87:c6:96:be:0d:9b:1b:9b:63:18:18:34:
53:d3:09:65:ca:00:6a:4c:63:4c:97:7d:c8:2e:d0:
16:8e:57:e5:b7:4d:c9:ed:d1:ae:75:60:f3:a5:f6:
e9:2b:92:0b:ce:51:5a:bb:65:cf:5d:c9:e3:46:de:
be:c1:58:7f:a9:3a:cc:eb:41:4d:21:8e:ed:bc:33:
63:78:bd:6f:fb:67:29:ee:a9:f1:08:29:f5:61:9c:
14:f4:ed:d6:7f:01:f8:7c:19:f2:39:ba:e5:df:92:
e7:f7:00:ec:52:24:46:1f:46:af:33:f0:5c:b6:58:
c3:c8:2c:1c:72:b1:3a:10:6d:5f:96:b0:1b:b7:ef:
45:ae:c0:cd:f9:e3:87:90:c0:37:9c:7d:a3:57:2f:
fc:3b:fc:e5:01:f2:26:47:a4:e2:68:d1:ef:99:61:
a0:45:c3:8b:5d:e1:da:e0:9c:d0:c3:b4:0c:61:19:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:04:66:C2:40:F2:22:C4:DC:28:F3:AE:A6:66:16:6D:82:AD:59:D2
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wQRmwkDyIsTcKPOupmYWbYKtWdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.50.0/23
Signature Algorithm: sha256WithRSAEncryption
09:5d:e8:eb:3e:43:d1:85:83:c0:66:a1:20:97:9d:7a:5a:cf:
a4:b3:d6:fa:7b:dd:16:57:a1:09:ce:a7:b7:41:f0:ce:37:6f:
f7:c4:6a:29:4e:d9:34:7c:13:95:e5:52:01:5a:3e:9b:9c:2b:
f6:f9:1b:e8:67:5e:5b:88:d8:80:09:f2:bc:0e:36:d4:ef:28:
98:40:de:fa:8f:b1:d6:0a:ba:23:b4:e9:44:dd:d7:b4:8a:9b:
ce:38:74:08:4f:e1:16:51:e3:64:7d:1c:2a:75:fb:29:30:66:
77:b8:ad:cf:44:03:ba:41:da:7f:77:e4:fa:e3:35:4e:20:65:
2e:87:11:d4:e0:e3:33:26:ee:f4:c3:7f:00:9b:30:52:19:e3:
4b:e1:59:7c:9d:a5:d8:bd:3a:bb:06:ed:b6:c2:11:15:95:39:
45:85:e1:d6:2f:b7:ae:10:47:90:ca:be:bb:f0:8f:c1:72:04:
a6:e3:28:54:f5:2d:7a:06:83:86:8b:a4:2b:85:b8:9f:4c:b6:
5a:4f:45:c2:99:3a:0f:d9:d4:ee:7c:c0:ce:ba:d8:28:ed:79:
1f:36:dd:88:34:fb:89:2f:c0:ed:ac:69:aa:e4:b6:7f:82:01:
1e:c7:e8:3e:fc:d5:2b:7d:89:54:a9:c9:61:3d:94:cc:ab:ad:
64:d6:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org