Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/OOEO9wtkIpwyykrjfk64wT5xs94.roa
File: OOEO9wtkIpwyykrjfk64wT5xs94.roa (raw, json)
Hash identifier: po201Ht4yy6gxP72l0cBbdHboCp/Aw/iiwNnusCLttg=
Subject key identifier: 38:E1:0E:F7:0B:64:22:9C:32:CA:4A:E3:7E:4E:B8:C1:3E:71:B3:DE
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 01AD0C0D
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/OOEO9wtkIpwyykrjfk64wT5xs94.roa
Signing time: Sat 01 Jan 2022 15:03:37 +0000
ROA not before: Sat 01 Jan 2022 15:03:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32787
IP address blocks: 185.51.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28118029 (0x1ad0c0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Jan 1 15:03:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38e10ef70b64229c32ca4ae37e4eb8c13e71b3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:36:7f:77:ca:07:37:9e:f3:f7:7d:b7:74:
93:2b:83:f0:12:48:cc:86:bc:13:f5:cb:27:41:ba:
e5:16:35:5b:03:86:40:df:64:37:09:2b:81:a9:78:
6c:d7:04:f3:08:82:8c:d7:9e:22:94:03:bd:01:ad:
c3:9f:90:36:c1:c3:21:2e:dc:0a:77:fe:65:ff:21:
6a:33:b7:c3:33:85:75:a8:6c:08:4c:5e:9a:13:f2:
f7:db:e6:1d:9a:88:df:40:10:8d:a4:13:15:f3:68:
33:42:91:ae:d0:7b:f0:63:31:05:92:93:99:bb:f2:
86:76:b9:c7:d3:d0:38:a6:cd:ee:17:13:fa:94:b4:
01:88:48:a9:c7:e0:92:8e:9f:cd:00:6d:0f:15:12:
09:3a:c8:ff:c8:88:14:6e:b2:27:15:b1:57:50:46:
cb:c2:62:84:82:64:85:fe:26:e7:0f:5d:df:44:2a:
1f:57:83:d4:fc:61:78:f9:d7:eb:99:b3:d8:80:de:
12:15:c6:18:86:06:f3:bc:8b:58:9c:32:59:fc:0e:
c6:29:2f:14:a8:e6:df:02:1a:df:99:02:8b:bc:e9:
ba:f8:3a:45:35:cd:0d:1f:84:cd:c9:6b:2e:ca:b7:
6c:da:f2:7d:fe:e0:5e:b9:1f:52:77:96:e5:70:73:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:0E:F7:0B:64:22:9C:32:CA:4A:E3:7E:4E:B8:C1:3E:71:B3:DE
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/OOEO9wtkIpwyykrjfk64wT5xs94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.123.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6d:bf:2e:a7:31:a7:bb:2a:9b:04:f1:6c:7c:54:b1:3d:54:
8c:c0:82:bc:ab:32:6c:1c:20:95:b4:ee:8f:49:6c:73:c4:a1:
b3:04:b0:6c:29:37:40:3b:28:43:57:b2:37:b6:10:8a:f6:fc:
6a:f6:42:3e:8e:08:b7:0c:13:89:3a:1f:4a:6e:22:d1:a6:5a:
0b:bd:67:33:2f:57:91:86:bb:07:af:58:07:39:9a:19:95:12:
09:47:77:7e:81:64:fb:f2:c5:8b:26:78:86:e0:e5:76:14:ed:
8e:c3:a0:3f:37:5e:42:4b:6a:47:4f:1f:fe:04:4f:26:fa:a1:
26:75:89:11:16:3b:e5:54:34:ca:12:c1:0d:dd:d2:06:ac:02:
cc:e4:6e:11:2f:b5:c8:c3:29:74:a6:9f:71:f8:55:88:b7:8a:
31:87:9c:50:bc:32:fd:f7:da:c7:04:9e:53:fa:16:52:79:2e:
c0:11:ed:16:67:d3:04:49:c4:46:cb:ed:0e:97:39:2d:a3:b5:
ae:20:52:40:e0:4c:ca:1a:52:bb:c4:17:66:22:6d:ad:fd:78:
00:b4:ac:4f:b6:3a:42:23:56:f9:7c:a0:1e:f6:20:6d:d6:b0:
f7:24:5a:09:10:22:66:c9:8f:e8:76:35:eb:e1:28:d9:64:62:
0e:02:30:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:09 2023 by rpki-client on console-fra.rpki-client.org