Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/Hs3mpDqS6CZ3iMxYzoXv7T5WVoE.roa
File: Hs3mpDqS6CZ3iMxYzoXv7T5WVoE.roa (raw, json)
Hash identifier: Feydg58BM0/jQbPFTCIE2AxC+qkF5OHrUKmjJQVJJ9Y=
Subject key identifier: 1E:CD:E6:A4:3A:92:E8:26:77:88:CC:58:CE:85:EF:ED:3E:56:56:81
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 01AE9320
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/Hs3mpDqS6CZ3iMxYzoXv7T5WVoE.roa
Signing time: Sat 01 Jan 2022 15:03:39 +0000
ROA not before: Sat 01 Jan 2022 15:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55002
IP address blocks: 185.51.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28218144 (0x1ae9320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Jan 1 15:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ecde6a43a92e8267788cc58ce85efed3e565681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:b8:19:8c:3f:be:6b:1d:9f:e2:2d:c4:d6:
64:7a:be:b6:64:88:ca:5a:ef:80:ea:7e:0c:dd:67:
5a:56:f1:32:14:8a:a7:3e:57:cc:27:ea:25:f0:0b:
f5:ae:0e:d9:e3:d1:0e:cb:c6:4d:33:0b:85:c9:86:
c2:9a:a6:8e:7e:d3:af:17:a8:15:1f:13:85:b4:5e:
d8:1d:3d:ef:05:08:4e:0b:66:5d:ab:6b:cc:96:14:
a1:07:ad:04:2b:96:2e:96:24:0d:a8:ba:14:5d:8c:
94:b2:0a:13:ab:57:a2:30:8f:eb:3a:8c:72:9a:00:
3d:49:36:3a:fc:60:24:aa:ae:9c:06:49:31:3c:ce:
f1:9c:9f:d1:21:16:7a:97:94:86:71:0d:07:27:d3:
d7:bc:11:62:ec:46:33:63:fd:84:b3:6f:4b:e2:b1:
7a:91:1c:51:22:6c:2b:f4:19:27:41:99:91:26:f7:
4d:80:30:84:88:69:46:27:38:73:9c:6d:f1:f1:23:
7b:1d:ba:a8:2d:5b:e7:1d:2e:05:b9:36:58:31:87:
b7:63:58:df:c8:8a:55:f6:fe:2b:1a:cf:24:c8:9d:
b1:fd:a3:02:dc:fc:ac:67:c5:28:1e:e3:fb:7b:fb:
09:ec:a6:0f:cf:35:9c:f7:95:a3:61:75:19:47:fb:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:E6:A4:3A:92:E8:26:77:88:CC:58:CE:85:EF:ED:3E:56:56:81
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/Hs3mpDqS6CZ3iMxYzoXv7T5WVoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.123.0/24
Signature Algorithm: sha256WithRSAEncryption
24:52:7e:7c:23:34:82:92:e3:04:8e:b0:0a:73:71:bc:de:05:
f3:f9:0a:42:c3:86:20:38:27:7a:bc:37:d6:99:bd:7b:01:d8:
d1:89:0e:f5:b2:f1:03:ed:d5:68:2b:84:f4:98:ad:a3:b7:5c:
d7:3a:a3:4d:c5:d9:4a:61:be:25:62:fe:ba:89:c8:1f:98:aa:
83:88:dd:02:6c:ca:52:4a:d3:e2:66:d6:77:91:9d:99:48:43:
43:75:f3:55:b8:e3:6e:1f:bd:8b:36:0a:23:27:14:e6:25:ad:
34:45:20:50:5c:18:b6:8c:b4:3b:72:db:75:18:9c:64:3f:9b:
ec:89:2f:d1:fb:84:72:f7:b5:f8:9a:7b:41:ad:f9:a2:1a:00:
46:be:bc:0e:65:d1:9e:e4:9f:90:73:39:ef:49:68:a2:98:f7:
eb:1b:74:70:73:17:93:02:68:5f:b2:a1:a4:e2:01:58:47:42:
ab:81:bd:f9:61:eb:05:66:bf:70:e3:9e:2a:d1:b6:57:c1:f1:
e8:a1:04:9d:f7:10:e0:4a:0c:aa:7d:c9:c5:df:4d:4b:80:50:
e0:50:b8:5b:f4:76:cb:35:c6:56:df:3e:19:bc:c4:2c:4d:d5:
4f:52:9b:57:07:14:2f:37:cd:f9:08:2b:7f:7d:9b:e1:e0:e9:
27:aa:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:07 2024 by rpki-client on console-fra.rpki-client.org