Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/SYzm9gEnBM2ushrHVHLB66hskck.roa
File: SYzm9gEnBM2ushrHVHLB66hskck.roa (raw, json)
Hash identifier: ifO8PmapztJqoEtSzYBuW1ijiV5/AVwasYr411uKVQQ=
Subject key identifier: 49:8C:E6:F6:01:27:04:CD:AE:B2:1A:C7:54:72:C1:EB:A8:6C:91:C9
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 0F1D6B
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/SYzm9gEnBM2ushrHVHLB66hskck.roa
Signing time: Sun 30 Jan 2022 13:27:33 +0000
ROA not before: Sun 30 Jan 2022 13:27:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.21.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990571 (0xf1d6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jan 30 13:27:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=498ce6f6012704cdaeb21ac75472c1eba86c91c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:45:bf:fa:cb:3a:ad:0e:be:6c:de:f9:ed:
6d:37:b7:73:0b:a3:fa:bd:10:04:b9:43:f9:21:50:
9c:bc:12:6b:62:ea:67:1c:3e:40:8e:b4:c4:8a:7b:
bd:fa:b6:7d:8e:f4:d3:0d:1d:66:e7:9f:52:e2:a1:
07:37:35:42:6e:b4:e9:b3:f4:b4:58:a3:e1:79:00:
03:e4:9e:c9:85:de:e4:a7:54:ee:9f:88:f0:cc:0f:
df:be:c4:0c:48:df:61:e1:e0:25:d8:61:7b:1a:4b:
f1:5e:63:31:7d:5b:f6:a3:56:48:98:fd:b5:ba:3b:
52:a3:d8:d3:76:8d:4e:36:cc:fb:36:9d:36:18:4c:
62:d0:e0:73:58:18:5f:51:fa:b8:45:c9:d9:c8:a9:
4b:38:76:fd:a4:8a:54:54:46:48:9b:ea:b1:6c:32:
7c:4c:de:f7:18:fd:38:b8:a4:97:78:92:4e:39:cb:
c0:2f:a2:45:f9:a2:40:25:2b:6b:61:27:a3:7c:d7:
a2:93:af:d0:18:e0:67:10:16:63:49:85:40:26:d7:
30:bc:e9:a1:ad:16:6b:ed:e8:e3:4f:22:cd:7e:9b:
4f:c1:79:48:5c:31:df:49:17:a2:d8:78:5d:8f:d0:
e1:af:e2:2d:2a:b6:81:6d:2a:63:9e:95:a5:45:0e:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:E6:F6:01:27:04:CD:AE:B2:1A:C7:54:72:C1:EB:A8:6C:91:C9
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/SYzm9gEnBM2ushrHVHLB66hskck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.50.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e3:c5:f8:24:a2:e8:bd:dd:7e:05:f5:f1:bf:6f:8f:c5:fb:
3c:cc:bc:c0:a6:64:23:ae:98:c3:1e:03:19:b9:74:8a:cb:fd:
79:14:56:4e:ba:d8:05:b2:b7:d3:1b:2f:0a:eb:eb:90:5b:eb:
e9:6f:57:a9:27:1f:65:eb:ff:54:95:62:5f:14:cf:13:d6:87:
dd:4e:16:a6:ca:23:30:08:cf:75:a8:c3:07:38:3a:8f:86:0c:
20:ee:44:78:4b:e3:78:97:24:76:44:22:ec:bf:3b:57:9a:15:
58:f1:43:aa:9d:83:5e:4b:b3:16:fe:4d:3f:ec:3b:e2:5b:b8:
31:72:3f:e4:be:ea:ee:ba:13:96:9f:98:c9:f7:91:1e:11:13:
82:f4:50:7d:44:c5:3e:83:84:dc:48:76:fb:8d:fb:06:41:52:
77:bd:43:c7:e7:b5:1c:b8:2d:68:45:96:28:17:92:bb:44:ff:
a1:d7:a3:ab:7e:44:4e:5a:fe:08:a0:d3:d7:a2:02:ab:8c:ef:
51:e6:e1:03:7e:66:eb:3a:95:4b:a5:0c:fc:52:0a:0a:66:1c:
c7:af:74:b5:38:30:74:c9:df:8e:89:cb:a8:42:58:ca:b3:6c:
0a:69:03:c8:ab:28:46:0a:84:ac:36:23:02:b2:5d:22:cf:cf:
44:b3:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org