Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/XxeK51x4hFsL4fIGDLALiP_3o1o.roa
File: XxeK51x4hFsL4fIGDLALiP_3o1o.roa (raw, json)
Hash identifier: aOFF4+i1CZgg84NYpRpIBenR1X4S8KFxCemhvGaU1/w=
Subject key identifier: 5F:17:8A:E7:5C:78:84:5B:0B:E1:F2:06:0C:B0:0B:88:FF:F7:A3:5A
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 03C27DF1
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/XxeK51x4hFsL4fIGDLALiP_3o1o.roa
Signing time: Sat 01 Jan 2022 14:05:08 +0000
ROA not before: Sat 01 Jan 2022 14:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212258
IP address blocks: 188.247.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63077873 (0x3c27df1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 14:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f178ae75c78845b0be1f2060cb00b88fff7a35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:cd:bc:00:83:e2:cd:89:2d:5b:7e:9a:62:
fc:ff:ff:ed:1e:bc:2f:03:91:6f:5c:11:b9:57:e7:
d5:4a:ba:f3:43:ed:62:95:86:ed:a8:43:f9:51:74:
39:88:a2:8e:86:c6:d7:25:e4:45:1a:14:94:55:be:
ac:06:9d:36:3d:1a:85:a0:87:49:cd:f3:6a:56:72:
8c:ff:80:cf:3a:84:1c:1a:e4:89:2c:ef:b5:ab:ff:
4f:2e:cf:c7:bb:8c:d3:95:d5:09:ba:0e:43:61:d4:
12:20:f9:a0:46:d1:ed:78:70:0d:4f:1f:87:53:7f:
21:65:b8:95:12:82:3d:78:7e:28:7b:44:60:a4:06:
e5:bd:66:1b:a4:e2:a1:e1:89:96:26:3c:6e:29:b9:
ab:0f:0f:17:6b:b3:42:fe:e6:61:c1:a7:f4:a4:10:
a5:ce:54:6c:d5:3a:7d:3a:4e:96:24:f4:b8:1e:b2:
2a:ca:6b:6c:4f:bb:5e:e7:52:53:05:89:6a:c7:8d:
ed:60:eb:b3:24:ab:9d:b8:b7:89:b5:a1:2d:7c:84:
c0:2d:cc:af:ab:b7:e6:92:31:f9:d9:ca:94:cc:ff:
0c:7f:94:db:68:eb:73:56:ec:45:11:21:5e:3f:1c:
23:99:23:b2:97:70:89:fe:d6:9d:f4:8e:82:c9:d2:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:17:8A:E7:5C:78:84:5B:0B:E1:F2:06:0C:B0:0B:88:FF:F7:A3:5A
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/XxeK51x4hFsL4fIGDLALiP_3o1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.236.0/24
Signature Algorithm: sha256WithRSAEncryption
59:32:a1:df:9a:ac:5b:aa:85:be:48:ba:75:e3:17:f5:94:42:
d9:3f:0b:84:26:a1:4e:69:5d:4c:db:06:a0:02:80:41:f7:5c:
9d:b5:fe:a3:4c:62:2d:fe:5a:d6:4d:25:43:41:42:6a:d4:f7:
3f:22:82:74:e0:4b:4d:ca:39:9e:ca:ee:66:8a:19:44:9c:88:
00:b8:8a:cd:7e:da:2f:ee:f1:56:65:03:d1:af:cc:dc:84:9d:
d2:cb:0f:9e:8e:a6:a4:e0:fc:d0:6c:3e:d8:6b:cf:61:7f:f8:
aa:c9:88:67:7f:48:f9:74:7d:3a:fa:57:8f:71:96:a6:62:6a:
e4:2d:70:4c:ea:d6:69:c1:10:e5:6f:29:8d:82:db:4c:fb:9a:
88:0d:21:bc:5f:a5:d2:f6:70:4e:56:f4:99:66:8e:13:c5:cb:
ae:29:70:65:6d:fd:32:ad:af:f3:2d:b2:cd:13:12:87:b7:9d:
fe:d6:a8:dc:8c:06:e0:35:57:a3:8d:a5:6b:d3:ce:c9:72:eb:
ff:a7:72:ab:99:2e:3a:e0:6f:e1:52:56:4d:09:56:bb:b0:1b:
8a:1a:11:5b:0f:79:ba:f8:20:f1:95:25:f4:ba:c2:02:0f:e9:
01:4e:e1:ac:bd:21:58:e8:13:a4:80:40:95:de:16:b0:b7:77:
0f:03:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:35 2024 by rpki-client on console-ams.rpki-client.org