Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/Z_gf1JCihSBk6Wdl-Wop1PCKJ3o.roa
File: Z_gf1JCihSBk6Wdl-Wop1PCKJ3o.roa (raw, json)
Hash identifier: n68RXkWo4PpznD3/4UOgApcRcNcCZujVIzdDbCXfb/A=
Subject key identifier: 67:F8:1F:D4:90:A2:85:20:64:E9:67:65:F9:6A:29:D4:F0:8A:27:7A
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 48A4AE
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/Z_gf1JCihSBk6Wdl-Wop1PCKJ3o.roa
Signing time: Wed 23 Feb 2022 11:16:53 +0000
ROA not before: Wed 23 Feb 2022 11:16:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62579
IP address blocks: 185.21.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4760750 (0x48a4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Feb 23 11:16:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67f81fd490a2852064e96765f96a29d4f08a277a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:a7:e2:17:4c:46:13:71:2e:3e:79:68:cd:
bd:1e:e7:da:53:98:e2:a0:82:5c:66:b7:de:29:86:
f3:60:2f:a6:30:e0:91:65:f3:ec:7f:d5:dd:7e:1b:
06:7f:85:4b:a2:5c:55:3c:20:9d:ca:9e:0c:15:03:
20:d3:5f:83:fd:4d:3e:ee:7e:e0:5d:61:fd:cd:37:
23:24:fe:60:13:46:a2:fc:75:fb:77:ef:4b:79:cd:
3d:39:68:c6:78:fc:46:74:28:9e:04:52:10:95:a8:
8d:1c:11:be:16:d4:68:f4:f8:15:d2:44:eb:aa:96:
d5:bf:d6:b4:7e:5c:3c:d2:21:13:95:d7:05:4e:90:
d8:56:f0:11:a8:bd:3d:79:21:b0:24:9e:69:17:a1:
a7:cc:29:05:9f:7c:ed:2e:5e:08:c9:c7:fd:78:e5:
83:8a:f0:f8:e1:17:67:6e:92:75:28:62:c2:37:27:
8b:48:9c:6b:cb:a4:01:aa:ea:e6:14:fd:ed:0f:e8:
e3:fe:32:46:90:46:4d:44:2c:98:f0:b6:d5:61:38:
aa:fe:dc:3e:5a:7b:d7:2a:53:9b:e3:53:1a:66:a1:
e9:01:6c:e0:3b:5e:48:61:a4:b0:cb:31:dd:65:9c:
97:46:01:4b:92:91:14:13:0c:13:c7:8c:a1:27:a1:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:1F:D4:90:A2:85:20:64:E9:67:65:F9:6A:29:D4:F0:8A:27:7A
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/Z_gf1JCihSBk6Wdl-Wop1PCKJ3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.50.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2b:c5:a0:1d:89:42:74:94:56:05:e0:cb:a1:1f:61:f0:95:
23:a7:b3:9b:31:fe:52:2b:8d:b5:c9:3e:fe:22:0b:af:bb:69:
e3:97:8f:9a:79:df:90:11:23:2a:1f:4c:1f:71:59:09:90:e8:
8e:17:6d:75:87:4e:c3:2c:55:06:ce:e8:dd:b1:18:38:31:fd:
d1:55:03:97:2f:1b:87:a4:6e:c3:b7:00:53:7b:66:91:82:9f:
6d:f9:26:7c:82:02:60:4e:78:07:99:4d:5e:df:cb:7d:ad:b6:
65:a7:37:99:a8:94:a4:8a:62:be:f4:6a:67:39:de:e7:a7:b0:
ba:93:12:22:55:bb:63:7f:4d:fa:d6:38:b3:5e:9f:ef:ef:82:
02:4a:f2:0d:fb:ad:c1:8f:d0:30:69:f6:b4:af:3e:d9:0e:93:
1b:cc:70:a5:50:6b:31:84:67:cf:3c:4a:b4:ce:59:73:71:11:
86:7f:de:fa:dd:0b:ae:21:9f:84:31:02:c1:6e:f9:aa:ae:af:
a7:d6:f2:a3:d2:c1:29:18:27:61:80:f5:e7:f8:c8:39:f4:e4:
b7:a8:d1:f3:64:06:bd:2f:50:49:4f:9a:aa:df:fc:19:4a:d4:
da:0c:e9:5d:58:e0:64:a4:77:e9:70:4b:67:13:35:1b:dc:0b:
f5:b0:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org