Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/juEeAwPLdpSDT8ChGS73lqwO2S0.roa
File: juEeAwPLdpSDT8ChGS73lqwO2S0.roa (raw, json)
Hash identifier: tYKBg+b+zSvnan3ifVOUdC1A4rIcFGV12FgS2RwyCsQ=
Subject key identifier: 8E:E1:1E:03:03:CB:76:94:83:4F:C0:A1:19:2E:F7:96:AC:0E:D9:2D
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 01D45F
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/juEeAwPLdpSDT8ChGS73lqwO2S0.roa
Signing time: Tue 25 Jan 2022 00:05:04 +0000
ROA not before: Tue 25 Jan 2022 00:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.21.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119903 (0x1d45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jan 25 00:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ee11e0303cb7694834fc0a1192ef796ac0ed92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:b9:20:dc:41:2b:12:88:8b:c9:ab:d6:e8:
9c:70:20:ac:a7:e0:ba:19:71:5b:9b:1e:12:f9:b8:
4d:0a:b0:08:53:96:c0:37:4c:91:82:c1:66:48:a4:
18:cf:c5:3d:d2:d9:8e:5e:82:36:e5:63:e9:89:0e:
36:7c:c2:6d:40:f0:a6:19:6b:cf:35:43:5a:07:fc:
c8:dc:68:63:24:61:4b:c4:b4:5c:a7:1e:ee:25:ae:
b5:13:8d:2f:f4:bb:71:d7:dd:b9:52:ea:c7:30:1c:
cf:3d:f6:6c:f0:9a:17:ad:62:3a:22:8f:4f:0d:9f:
87:90:39:35:04:e7:e4:32:3d:67:02:e3:53:b5:8c:
18:f5:ff:14:40:07:32:d3:ca:86:bb:64:ce:b8:cf:
da:d8:49:bb:a6:71:dc:09:59:bd:d4:85:bb:f1:50:
d2:97:29:ae:53:85:e3:7b:89:fa:55:36:75:32:41:
8b:34:e8:2b:ae:4f:34:8c:92:e2:2a:2e:d0:0c:a2:
c4:c5:b3:e5:f8:d2:cd:62:e7:ea:23:ef:74:92:8d:
ba:83:93:79:af:e9:f7:e7:c5:5d:c6:35:11:8e:d8:
4a:3c:4c:2d:5b:66:86:11:f1:c7:f7:b3:b1:fb:94:
ee:c5:02:f2:39:58:a0:b7:6f:57:4b:72:c6:5f:2e:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:1E:03:03:CB:76:94:83:4F:C0:A1:19:2E:F7:96:AC:0E:D9:2D
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/juEeAwPLdpSDT8ChGS73lqwO2S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.50.0/24
Signature Algorithm: sha256WithRSAEncryption
45:9a:8b:5b:fa:fd:71:e8:17:b7:1f:88:0e:e2:e8:86:93:19:
7e:c7:8c:14:fe:a9:e7:04:fc:df:8a:b3:88:1b:9c:af:fc:96:
dc:0c:a3:50:01:3a:c3:54:39:d5:c5:7b:45:c0:7c:4e:7d:46:
b7:2a:76:d3:91:07:ce:b2:dc:f1:69:35:3e:ca:0b:ba:0c:85:
54:1e:03:94:55:36:fd:dc:62:0e:51:fb:d1:d4:39:53:93:19:
7c:95:80:ec:81:aa:dd:42:50:b5:74:97:e8:44:90:35:6d:95:
66:4e:5b:88:ae:5f:35:bc:7d:0f:98:fd:4a:8d:6d:c1:9a:b7:
9d:2b:6c:7f:5f:2c:70:f0:92:16:cd:0d:f3:05:df:ed:7c:a6:
d2:9c:b2:f0:08:8e:81:cb:34:bf:95:60:ea:d7:57:e0:68:e1:
f3:fb:6e:46:48:25:a5:1a:30:e1:b6:53:6d:cf:a0:6e:af:b6:
53:83:f0:97:dc:45:d0:80:7a:fb:70:21:24:2a:19:e5:32:bb:
50:73:72:16:c3:e7:5e:14:26:2a:35:0e:3c:8f:db:de:f5:73:
c7:1e:2c:a0:d0:2f:7f:bd:f2:33:c9:ce:ed:e0:6c:df:64:e9:
5a:b6:eb:a0:d6:6c:d6:05:c9:88:80:62:d9:d3:5c:fa:e2:4f:
09:b7:af:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:40 2024 by rpki-client on console-ams.rpki-client.org