Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/hh9CpGeEZKADhaucXNzii--KEUA.roa
File: hh9CpGeEZKADhaucXNzii--KEUA.roa (raw, json)
Hash identifier: 8EkTDcxBH0tC2B1fLpMUNBzoN6PIO8B29pjTlImy4G0=
Subject key identifier: 86:1F:42:A4:67:84:64:A0:03:85:AB:9C:5C:DC:E2:8B:EF:8A:11:40
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 0182B056D34C8FD84E2DBA650E45B8B29F5C
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/hh9CpGeEZKADhaucXNzii--KEUA.roa
Signing time: Thu 18 Aug 2022 09:44:16 +0000
ROA not before: Thu 18 Aug 2022 09:44:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142111
IP address blocks: 185.39.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:56:d3:4c:8f:d8:4e:2d:ba:65:0e:45:b8:b2:9f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Aug 18 09:44:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=861f42a4678464a00385ab9c5cdce28bef8a1140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:fa:f5:15:fc:00:be:0f:10:19:d0:e8:bd:
9c:9a:8d:c1:2b:dc:52:60:59:0e:4a:3f:29:70:4d:
6e:3e:19:c1:62:ec:80:a8:ad:75:a3:3a:6f:7e:b2:
42:de:a8:55:ac:c0:e0:e6:06:5c:d4:4e:58:ef:06:
eb:61:0d:5c:5b:ee:3c:11:6d:bd:f3:6f:00:7c:c4:
be:57:11:e7:cd:f3:fe:f5:29:39:26:69:5d:90:29:
f5:20:f8:3b:3a:25:a8:d6:28:97:c0:cf:2b:c0:45:
b1:bb:75:13:1a:b6:94:59:72:5e:ff:35:e8:a7:53:
69:58:60:50:4d:eb:91:8f:ff:1b:63:74:ae:93:60:
85:62:4f:45:cf:93:90:29:6f:be:f4:96:d2:ef:d2:
e6:d7:f4:b3:ab:4e:38:e0:0e:1a:31:fd:b8:e4:4f:
2d:e3:bd:85:30:67:26:7c:ff:52:37:15:43:fa:17:
87:d9:f3:73:d9:f4:94:23:6f:19:ac:f2:13:c6:9b:
74:1c:af:66:c4:a6:46:6c:b9:4a:03:e5:7c:b4:21:
65:40:bd:cd:3d:d3:f6:d7:c7:1a:c4:96:bf:da:bb:
80:eb:86:5e:0e:29:9e:bf:54:ad:43:4f:2c:14:9d:
38:b3:56:e8:32:20:fd:1a:fe:9d:15:29:2b:50:7f:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1F:42:A4:67:84:64:A0:03:85:AB:9C:5C:DC:E2:8B:EF:8A:11:40
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/hh9CpGeEZKADhaucXNzii--KEUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3d:46:76:95:28:2d:8b:cf:69:54:6d:48:d5:99:be:9c:ee:
c2:bf:4c:8e:32:ba:de:0a:58:cc:2a:fd:5a:c0:49:81:13:9e:
63:9f:f1:df:00:63:55:b7:6e:7e:a1:de:34:82:6e:65:1c:9b:
5f:22:b8:c5:84:ef:19:45:a1:00:f5:1b:29:f7:58:34:7b:e5:
a0:40:a6:ee:a2:81:29:28:4f:4a:8a:30:bb:a5:14:ee:f1:ea:
52:8d:13:c0:87:db:5b:45:08:54:09:b1:a7:86:24:09:4a:91:
e3:cf:b9:b8:fb:71:7c:24:c8:a0:67:68:ab:a1:1e:aa:25:76:
a5:4e:4b:bc:1e:99:1c:28:20:42:18:c1:be:5c:72:32:9d:a3:
c4:fc:f1:0a:56:ad:20:66:b5:f2:12:40:a4:d0:58:34:05:53:
aa:e1:9f:d0:22:21:93:dd:15:00:b8:1e:f3:b5:7b:60:2e:6d:
f5:6a:42:91:ca:02:55:db:5b:d6:30:98:d4:a8:88:0e:8c:60:
bf:b1:fa:ce:d4:41:5f:21:0d:9b:ca:9d:47:7c:db:54:97:94:
8f:f6:13:de:6e:b6:85:e5:17:04:e6:3e:ea:81:0f:8a:0d:e6:
58:e5:f9:cd:36:53:c2:33:95:8a:08:ab:e2:b1:cc:4e:89:18:
b7:de:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org