Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/DSKYJzSsLbh_i_RUwhnmevd4h-4.roa
File: DSKYJzSsLbh_i_RUwhnmevd4h-4.roa (raw, json)
Hash identifier: nDpr0SAC9bXsWz+imdpu1g93h2O0lm25ccv1FuUFnLU=
Subject key identifier: 0D:22:98:27:34:AC:2D:B8:7F:8B:F4:54:C2:19:E6:7A:F7:78:87:EE
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 0A642570
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/DSKYJzSsLbh_i_RUwhnmevd4h-4.roa
Signing time: Sat 01 Jan 2022 14:58:11 +0000
ROA not before: Sat 01 Jan 2022 14:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200517
IP address blocks: 51.4.0.0/16 maxlen: 16
51.4.0.0/15 maxlen: 15
51.18.0.0/16 maxlen: 16
51.5.0.0/16 maxlen: 16
51.8.0.0/16 maxlen: 16
2a01:4180::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174335344 (0xa642570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Jan 1 14:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d22982734ac2db87f8bf454c219e67af77887ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:43:29:fc:29:d3:0e:2f:51:0c:8f:d3:3d:
04:09:2e:e2:f2:24:7d:cc:b9:2f:29:56:05:21:b8:
6f:a4:de:39:82:30:5e:4a:17:6c:6a:7d:5e:90:d2:
60:9b:27:5a:f0:42:84:c5:3a:59:e4:24:ab:10:ac:
48:d3:f0:cb:f8:99:ab:67:84:e6:7a:b1:ca:f4:b6:
95:7d:fa:78:20:af:34:57:25:2e:26:2f:5a:04:0d:
b5:30:c8:5a:fb:ca:e7:ab:0b:12:7c:1c:78:20:25:
66:a4:f0:63:8a:a8:87:26:0a:6c:89:5f:ec:0e:a6:
2f:96:2d:9b:ec:5f:c0:bb:1d:75:98:97:84:a7:c0:
39:05:ea:ae:35:cd:db:c0:64:a4:63:38:f7:b6:c9:
7f:9c:2a:b1:48:66:42:04:45:e2:f7:e6:58:50:1d:
8c:e9:dc:4e:fa:1f:71:c9:a1:33:5d:91:59:25:2c:
1c:b2:0f:27:bb:b1:a4:03:25:c4:cd:ea:0d:9a:97:
84:c6:bd:fb:d6:da:31:33:35:00:3f:f0:76:19:19:
9c:a5:8d:4f:9e:aa:04:6e:bc:75:f1:20:4d:fb:16:
34:6c:a1:0e:66:9b:d5:9d:44:c9:fa:6c:f5:0f:b9:
b6:d6:16:b4:8d:20:cb:f3:77:08:4c:2b:c0:49:15:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:98:27:34:AC:2D:B8:7F:8B:F4:54:C2:19:E6:7A:F7:78:87:EE
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/DSKYJzSsLbh_i_RUwhnmevd4h-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.4.0.0/15
51.8.0.0/16
51.18.0.0/16
IPv6:
2a01:4180::/33
Signature Algorithm: sha256WithRSAEncryption
73:d1:a9:7b:0a:b3:bc:a2:62:e8:96:b0:d2:58:89:fd:de:2d:
0d:2c:e8:a8:6a:c0:c7:52:18:b8:43:81:91:6e:38:b2:60:e0:
df:53:51:cd:f1:fa:9b:15:74:84:d0:a5:01:13:2b:fa:cc:e8:
36:4d:9c:51:09:c0:9c:d7:bb:46:a7:9b:97:a8:b8:a3:fb:a2:
0d:46:2b:6d:d4:c8:0d:12:8f:8e:8e:1c:54:d7:46:43:5c:a3:
bc:61:50:92:ea:0a:32:76:8d:10:cd:c7:5d:80:61:ab:f3:ac:
a6:ec:f3:65:8c:0d:4a:27:71:d8:de:42:a0:76:9e:31:ec:55:
9c:6d:b6:e5:e5:fa:cf:ad:70:c3:3e:ba:c6:0b:e0:a1:df:ba:
70:3b:06:4b:11:b5:15:b3:bd:5f:63:16:6a:ec:36:e7:56:6c:
e4:64:f2:cf:04:b1:fa:17:83:1d:d4:d6:92:ed:20:e6:67:3e:
21:a0:08:04:6f:7e:da:d2:99:e3:a0:9b:f7:18:5b:70:0a:f6:
fc:86:17:c0:0b:3e:57:7f:5f:38:50:ae:c1:77:f2:6d:8e:1e:
bf:74:5f:98:77:48:c3:07:1e:92:2f:47:aa:59:72:b8:e3:07:
46:3f:e3:79:e1:ca:88:98:bc:c6:ac:15:b8:e9:4b:e8:56:cf:
7e:79:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:00 2024 by rpki-client on console-ams.rpki-client.org