Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/2-E0MWotDCWSbL6g5Z1Z9BDRCz0.roa
File: 2-E0MWotDCWSbL6g5Z1Z9BDRCz0.roa (raw, json)
Hash identifier: WtaZD5jopF+/fVzz3I18Bg8uuwoYpzCBLL7G6ePBRvY=
Subject key identifier: DB:E1:34:31:6A:2D:0C:25:92:6C:BE:A0:E5:9D:59:F4:10:D1:0B:3D
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 0183A413353AD67A61D965983C834637A0B7
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/2-E0MWotDCWSbL6g5Z1Z9BDRCz0.roa
Signing time: Tue 04 Oct 2022 17:37:45 +0000
ROA not before: Tue 04 Oct 2022 17:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24631
IP address blocks: 185.171.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:13:35:3a:d6:7a:61:d9:65:98:3c:83:46:37:a0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Oct 4 17:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbe134316a2d0c25926cbea0e59d59f410d10b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:98:a0:c5:de:36:f6:3e:b3:5c:a3:91:39:41:
80:b5:46:1e:65:53:cf:51:a5:92:44:5a:cd:56:7a:
82:81:d6:31:08:35:d4:91:a0:d7:7a:16:3e:8c:34:
13:5a:4e:9c:f6:85:3e:8b:d2:a3:db:1d:e2:06:28:
54:be:a5:63:94:2b:14:3d:87:5b:b8:26:76:a6:bd:
9a:ca:fb:99:24:bd:ca:bc:cf:51:dc:92:66:87:5c:
ca:ee:b3:cc:10:b4:aa:6e:9f:09:68:f0:28:f4:f0:
73:10:7e:f6:38:e7:29:29:9d:b1:78:20:ee:b0:bf:
d5:d3:45:66:53:f4:ee:ff:56:e7:3b:36:6f:ed:33:
e9:d6:5d:c6:5b:f1:e8:ec:7a:9b:8a:3d:24:24:f9:
bb:82:e1:2a:66:61:37:29:0e:7b:5c:68:5c:56:20:
03:ec:bb:90:56:c8:8d:4c:96:98:a5:35:cb:7f:ac:
8b:0f:f1:83:44:f0:30:6d:8b:90:a2:22:93:56:f7:
6a:3f:71:76:e5:6c:fb:68:f3:e7:5c:2d:c2:fc:bd:
0c:ba:5b:76:ce:c3:a6:fc:85:cd:1d:79:d1:5b:6e:
ed:9a:31:7a:6f:3a:7c:a7:23:5a:aa:5b:57:e5:a2:
38:5f:2a:41:43:17:21:dc:9a:ce:de:87:28:b6:53:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:34:31:6A:2D:0C:25:92:6C:BE:A0:E5:9D:59:F4:10:D1:0B:3D
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/2-E0MWotDCWSbL6g5Z1Z9BDRCz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.53.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2a:23:e4:4b:ab:5f:aa:dd:0b:1a:ec:4c:7d:bc:2e:90:62:
ab:c6:27:18:ff:50:ee:cb:7c:79:98:67:60:88:72:8d:c5:10:
78:cd:9d:0e:33:6b:71:d8:00:e5:d9:6a:ed:08:8e:5e:81:21:
97:ff:05:36:59:61:a3:e8:25:8f:c7:25:e3:49:e5:51:83:10:
07:b0:de:cd:ef:d8:e8:7b:3b:62:f4:d9:83:8e:f9:d2:88:de:
5c:0f:fc:f2:58:c2:e0:a0:49:e9:8e:05:b3:a6:f8:18:80:7b:
ba:47:b6:ed:f7:66:9f:80:86:d5:35:0e:25:ee:9f:8e:c6:14:
8a:7b:e6:dd:63:1d:59:e9:ae:91:a6:24:e6:76:c5:fc:b1:ef:
fd:4f:23:db:5a:01:12:80:a8:64:5f:48:97:44:ae:d5:56:a2:
6c:47:f7:a3:da:47:26:69:52:16:8e:21:70:98:45:63:6b:e7:
c4:45:6a:6d:db:48:f5:b4:9d:9a:03:90:61:49:f4:8e:43:38:
78:f0:ed:7c:6d:ba:7d:22:6b:56:51:09:6f:4d:78:c9:54:b3:
40:20:12:c8:55:16:ef:58:f8:72:14:f2:c7:49:2d:43:43:7e:
1b:d6:a4:15:b7:ef:b6:48:2c:84:5f:74:55:f9:34:28:da:55:
53:ae:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org