Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/AcSKhI5ne8UV2WLWMLLkBYwt1MU.roa
File: AcSKhI5ne8UV2WLWMLLkBYwt1MU.roa (raw, json)
Hash identifier: MsokG2tmcLIIAgz1ENYoM6zM9EUveBhK+f+aa95jWws=
Subject key identifier: 01:C4:8A:84:8E:67:7B:C5:15:D9:62:D6:30:B2:E4:05:8C:2D:D4:C5
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 0181EC0D4C75A57AD9A831A00409B430D75D
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/AcSKhI5ne8UV2WLWMLLkBYwt1MU.roa
Signing time: Mon 11 Jul 2022 06:58:23 +0000
ROA not before: Mon 11 Jul 2022 06:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51500
IP address blocks: 185.17.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:0d:4c:75:a5:7a:d9:a8:31:a0:04:09:b4:30:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jul 11 06:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01c48a848e677bc515d962d630b2e4058c2dd4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:4a:26:1a:93:ec:90:4e:a0:6b:ac:4f:e6:
c1:6d:f3:e1:c5:38:8c:84:27:dc:df:5f:4c:29:73:
a5:68:0d:2b:ae:fc:97:75:96:f7:13:e9:15:06:de:
17:81:7a:60:6d:5d:08:0f:fd:c4:2b:70:ba:4f:02:
56:5b:df:79:29:c1:12:48:5d:7e:31:c8:7e:94:1e:
2a:8c:bf:68:a6:58:8a:9d:bc:74:f7:e3:b3:eb:2d:
eb:98:75:24:5a:09:27:97:a9:45:4f:25:c5:77:2d:
67:ef:81:85:c1:d6:a7:98:04:62:11:19:d9:4e:7f:
41:b5:ac:7a:28:02:63:6c:d2:53:c0:d1:ca:0d:4e:
1d:b6:17:a4:20:53:d9:73:de:b0:cb:67:ec:b2:05:
38:80:0e:03:b1:6e:04:b1:04:fd:5b:21:cd:fe:fc:
f3:c0:1a:10:42:c1:36:d6:99:aa:71:09:db:99:7e:
96:96:6b:63:b4:0a:fa:7c:fd:fc:54:b0:36:b7:2d:
5e:f7:5c:65:af:2e:99:5a:32:02:e3:f8:e1:6a:7c:
6c:48:27:a4:2b:3c:b3:55:86:f2:ea:37:8e:b2:eb:
66:50:da:25:71:9a:ca:21:b7:8f:ff:88:d1:26:e4:
44:84:4a:1e:4e:ce:79:06:fa:c8:63:1d:9d:0e:6d:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:8A:84:8E:67:7B:C5:15:D9:62:D6:30:B2:E4:05:8C:2D:D4:C5
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/AcSKhI5ne8UV2WLWMLLkBYwt1MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c5:5e:76:03:7f:83:17:9d:48:b6:d2:9c:7a:ac:31:e4:68:
95:bb:83:86:01:43:62:8d:e1:28:39:de:75:fe:b2:7f:92:25:
dd:d4:15:9b:4a:ff:11:bd:de:87:44:e3:af:6b:4a:2f:14:66:
40:57:6b:e8:eb:55:c7:4e:ed:2e:f5:75:6c:e7:1a:f4:20:65:
85:09:3a:47:7a:84:b7:c3:a1:ce:24:dd:86:82:00:61:b0:57:
8c:2f:7d:e0:3b:eb:10:89:63:89:c4:41:c5:b9:00:81:60:b5:
46:94:15:a9:d0:0a:de:ba:64:75:7d:50:c2:b8:89:c4:26:6d:
c6:4b:0b:c9:56:cb:8a:11:3d:29:ba:ff:a0:62:83:ba:f8:92:
e5:f4:09:8b:0f:dd:78:89:76:0c:4c:77:ba:6b:cc:5b:97:84:
4b:89:9a:e4:8d:47:38:a8:30:94:71:cb:97:65:83:18:80:83:
a5:8b:45:8c:aa:9f:76:7f:fb:1c:d5:9f:48:7d:90:a9:86:45:
a1:c6:98:50:e0:81:92:fe:00:b6:29:da:c0:dc:bd:27:e0:f2:
f9:47:49:87:53:d6:4d:73:fb:31:4a:36:fd:8f:74:f7:6d:18:
c6:dd:42:9f:23:bb:92:8b:90:24:f2:7b:d3:33:a1:30:39:94:
64:c0:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:55 2024 by rpki-client on console-ams.rpki-client.org