Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/SnMZeYt0ehxHX2YMIzAt2gp1OMc.roa
File: SnMZeYt0ehxHX2YMIzAt2gp1OMc.roa (raw, json)
Hash identifier: Oquf5jA96tw8FRmIfTWa9nMr3lvoJmGbM5HWnMrKLBM=
Subject key identifier: 4A:73:19:79:8B:74:7A:1C:47:5F:66:0C:23:30:2D:DA:0A:75:38:C7
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 0183C85023E24DC360B4D622B843A7475B32
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/SnMZeYt0ehxHX2YMIzAt2gp1OMc.roa
Signing time: Tue 11 Oct 2022 18:30:38 +0000
ROA not before: Tue 11 Oct 2022 18:30:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203416
IP address blocks: 194.50.250.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c8:50:23:e2:4d:c3:60:b4:d6:22:b8:43:a7:47:5b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Oct 11 18:30:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a7319798b747a1c475f660c23302dda0a7538c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:21:6c:4f:b0:9a:bd:9d:e5:11:fb:09:a6:
7b:0c:28:ce:68:96:3e:20:ad:95:b7:9b:60:09:63:
71:7e:b7:8a:d5:dc:7a:4d:5c:d6:46:2e:93:39:5a:
bc:ce:a0:7e:c2:e8:57:15:7c:23:a8:2f:74:4b:f4:
87:0f:13:c7:82:f1:82:d9:b5:13:5d:a7:41:3a:4d:
af:94:20:7a:9e:a6:2d:32:b6:e9:56:e4:0b:3a:12:
5e:d1:87:ba:d1:c6:77:24:4d:94:14:b0:1f:50:59:
5c:db:1a:34:bd:8d:28:e7:0f:17:60:5c:8c:23:22:
57:03:37:3e:56:63:9d:1e:eb:b7:5c:17:a2:af:32:
84:b3:6a:0b:8b:9a:1b:79:0b:6d:83:33:90:19:77:
ca:5d:c4:ef:d5:44:73:c5:29:8f:e0:ea:23:06:5d:
ab:48:a3:33:37:b5:cb:ad:d8:18:d3:8f:9f:f8:93:
c7:92:43:e2:9f:6d:24:c5:cc:8c:e1:07:33:93:12:
31:06:06:d6:af:be:f7:5b:96:ea:d7:8b:e7:ae:53:
5c:0c:6d:ec:ff:8d:0f:ab:39:7b:41:60:ab:c2:39:
cd:0c:e7:65:f4:6b:10:3f:df:0b:19:5d:8a:bf:7e:
95:a5:44:84:e3:5a:64:50:a3:13:09:59:fb:ab:f3:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:19:79:8B:74:7A:1C:47:5F:66:0C:23:30:2D:DA:0A:75:38:C7
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/SnMZeYt0ehxHX2YMIzAt2gp1OMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.250.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:76:db:cc:83:7a:f4:1a:68:a5:0b:be:0e:cc:92:cf:38:99:
c8:a6:b9:0a:56:a4:3f:c0:3d:21:8e:f8:f9:6b:63:cf:e2:a5:
19:8c:4b:2b:33:af:06:27:36:ca:86:41:4d:33:fb:89:e8:6f:
42:e3:ea:40:bd:46:bb:a0:f7:6c:0d:84:3b:22:73:71:6d:60:
4a:60:e6:e6:02:ed:a9:cf:01:46:07:fe:79:2d:8f:8c:73:d6:
47:b0:c7:06:99:f4:88:ef:c2:15:3e:22:e8:45:d6:91:05:ae:
d7:55:19:c0:bf:aa:6f:d1:80:f8:ad:44:4c:81:6a:92:e5:20:
c2:92:1b:c1:18:ca:60:12:11:45:ec:86:50:1c:f6:7b:e2:9d:
30:1d:4f:c9:cf:60:75:90:70:00:42:4d:dc:2f:dc:dc:bd:c0:
54:43:11:7f:6e:4e:42:fc:95:7a:35:6e:f4:f8:83:ab:79:db:
63:e2:39:3f:f1:c9:49:40:2c:db:51:42:6b:41:11:c7:73:13:
d9:d4:58:47:6c:b9:b6:15:80:4d:18:da:a3:04:6f:7a:5f:be:
48:db:1e:00:b8:c9:fb:19:ab:80:a9:9b:77:af:1f:71:83:83:
08:b4:29:74:42:ef:00:d2:75:8c:a6:46:92:f0:46:a9:a9:90:
bc:95:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org