Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/Sqw9OJUHimbnHXzN9s8aZeHh754.roa
File: Sqw9OJUHimbnHXzN9s8aZeHh754.roa (raw, json)
Hash identifier: C61UTdftDybH2fWBAI00go8SKNbOK89zbs9LEStAG5c=
Subject key identifier: 4A:AC:3D:38:95:07:8A:66:E7:1D:7C:CD:F6:CF:1A:65:E1:E1:EF:9E
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 0182B056D2C9897C449FF61A0FDA13982D01
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/Sqw9OJUHimbnHXzN9s8aZeHh754.roa
Signing time: Thu 18 Aug 2022 09:44:16 +0000
ROA not before: Thu 18 Aug 2022 09:44:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 185.39.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:56:d2:c9:89:7c:44:9f:f6:1a:0f:da:13:98:2d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Aug 18 09:44:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4aac3d3895078a66e71d7ccdf6cf1a65e1e1ef9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:22:ea:59:69:0c:f0:8c:19:29:f5:4f:b3:
cd:0e:f6:da:14:2c:6a:12:b0:99:db:5c:89:1e:10:
8b:c5:f9:aa:5d:55:24:56:7d:10:6d:cf:05:44:b8:
58:c8:d9:ed:f4:1d:2a:83:c2:9f:52:f1:80:65:49:
62:a7:f4:2b:57:68:a1:dc:fc:0d:ec:c7:7e:3d:94:
75:22:d7:8b:d4:7a:b6:a6:23:7a:79:7c:6d:a8:4d:
3d:c7:39:dc:1f:7d:de:4f:50:9d:90:68:27:ff:c7:
76:f2:48:f3:c5:f2:d8:78:e7:40:e7:dc:e3:34:41:
a4:24:b9:24:ab:f1:80:77:57:27:51:b6:be:cd:26:
a3:36:2a:66:4c:70:ac:45:fa:35:8c:18:b3:7d:5e:
c7:68:93:71:68:46:4a:7f:45:28:f7:65:52:87:11:
7f:8d:92:67:f9:0e:c4:73:94:d1:8e:55:78:f1:33:
1e:b2:9f:4b:b8:71:b0:f6:80:b5:5e:e5:f1:c1:23:
86:3d:24:3b:98:79:99:ab:14:94:6a:8c:d2:45:31:
71:c3:de:b1:a3:50:11:79:0d:05:02:ed:c4:7f:71:
41:3d:0e:eb:a8:0e:f2:d6:3f:0a:7b:49:e7:bc:b5:
12:73:9b:85:5b:28:36:35:90:73:38:bc:2c:7a:25:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AC:3D:38:95:07:8A:66:E7:1D:7C:CD:F6:CF:1A:65:E1:E1:EF:9E
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/Sqw9OJUHimbnHXzN9s8aZeHh754.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:17:4e:d2:a0:9a:b5:b6:39:1b:39:3e:b8:f7:a5:74:70:9e:
ba:2a:60:16:64:ae:8a:97:38:1f:6d:86:de:90:86:20:45:64:
2c:e0:1f:b3:2c:60:f6:42:13:61:35:aa:ed:9c:ec:f8:17:74:
44:9b:a1:93:90:0b:dc:73:f6:6b:61:b9:1e:9b:02:58:83:15:
dd:d3:2e:2e:f2:c7:87:57:aa:f7:cf:60:0c:ad:1a:96:a3:9a:
83:df:55:c8:6c:b4:b3:a0:c7:1e:a0:77:14:d9:da:22:c0:60:
d2:b1:25:c2:fa:d9:f4:ba:d7:2d:be:68:b8:a8:89:ee:9a:87:
46:5e:ec:af:a4:57:84:a9:bf:df:a5:78:04:e3:c4:0a:39:ab:
0a:c8:7d:76:82:35:71:a4:85:b8:99:e1:96:17:00:eb:a5:bd:
5e:09:99:76:bc:15:fb:75:6d:c6:fb:a6:5d:64:a0:93:28:ac:
78:0e:f3:29:e4:9e:91:1e:63:0e:11:d7:aa:9b:27:5e:7b:27:
44:91:b9:15:8d:a6:fa:24:9c:b1:13:88:0c:3a:3c:16:39:28:
87:f5:c2:b7:4e:20:48:4d:4a:e4:af:2e:1f:a8:36:60:6d:6d:
9f:b6:85:2f:c5:73:ed:9e:08:3b:34:fd:05:4a:70:a8:3f:89:
9e:14:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org