Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-AwLXMSOdqf0cMNKG56E7tpriKc.roa
File: 1-AwLXMSOdqf0cMNKG56E7tpriKc.roa (raw, json)
Hash identifier: aNtSG2qYuCPL+GbheBKwbhB+m22r2L9gtcvQZVdBHmQ=
Subject key identifier: F8:0C:0B:5C:C4:8E:76:A7:F4:70:C3:4A:1B:9E:84:EE:DA:6B:88:A7
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16D35B64
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-AwLXMSOdqf0cMNKG56E7tpriKc.roa
Signing time: Sat 01 Jan 2022 12:01:31 +0000
ROA not before: Sat 01 Jan 2022 12:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51430
IP address blocks: 141.101.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382950244 (0x16d35b64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f80c0b5cc48e76a7f470c34a1b9e84eeda6b88a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:5f:91:45:a4:b8:24:7c:69:e9:f0:85:44:
55:74:7c:fc:79:a1:44:88:7a:3e:de:f6:18:c7:06:
95:f0:c6:06:ed:13:cd:c1:cd:95:23:66:8c:39:79:
00:74:ca:3a:cd:a1:54:4f:78:51:32:8c:46:69:40:
14:4a:9f:ab:ac:53:ca:bf:11:fb:cb:64:5d:ca:9e:
33:ca:a8:4d:a0:86:89:87:cf:dc:6f:19:51:7b:3b:
c1:a3:7f:47:23:82:67:62:db:ac:53:9b:a7:aa:50:
73:02:7c:1b:f4:1c:c3:66:33:60:38:f1:b1:a7:62:
4c:c0:41:48:6b:d9:c9:f9:cb:ea:97:66:05:06:26:
f6:cf:4b:93:08:37:20:00:6f:a4:4d:8a:cb:bd:dd:
99:38:06:77:c4:b3:38:50:2f:d2:1e:20:db:49:bd:
15:7d:c4:3e:7f:c6:cd:ff:23:29:46:53:cd:61:63:
c9:1e:a1:4a:88:a4:bf:11:7d:e4:55:88:13:2d:3c:
16:0b:58:0b:91:4f:f0:16:dd:72:3e:cf:81:9f:d8:
f8:5f:4f:69:15:9a:ad:5a:30:ca:20:26:28:cd:59:
54:f6:f7:ba:90:65:63:b3:b9:36:59:7b:42:5c:73:
89:c7:7a:d8:74:e2:7d:47:93:fd:89:9d:85:4c:22:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0C:0B:5C:C4:8E:76:A7:F4:70:C3:4A:1B:9E:84:EE:DA:6B:88:A7
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/1-AwLXMSOdqf0cMNKG56E7tpriKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.144.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f6:53:08:8f:d4:85:35:a4:d4:11:2e:96:f9:61:32:d9:bf:
4c:a2:61:2e:68:ec:15:a4:70:33:10:de:a9:ad:d9:08:18:2a:
f2:a0:f6:a5:48:70:3f:26:57:7a:8b:e2:a1:e1:2c:44:b1:c5:
89:9f:82:f3:eb:b3:28:f2:e4:55:69:8f:f6:a4:00:97:fc:89:
90:35:7d:c4:27:fc:0e:fe:c8:34:cd:ed:8c:74:c5:c2:79:74:
66:29:30:22:f8:e2:6e:bf:0a:c3:0d:fc:da:93:4d:bd:c1:0d:
bc:83:53:4b:89:07:5a:68:08:88:5d:a4:60:50:bd:ce:ba:fc:
29:72:50:a9:c4:cd:5d:8a:e9:b1:b0:12:a2:b4:e9:62:79:ff:
b7:d3:12:ae:94:1b:ca:9e:61:ad:72:91:b4:83:dd:a2:7f:aa:
7c:5b:40:57:cf:71:76:12:bc:6a:bd:1f:51:bf:00:c4:fc:46:
41:26:d7:28:49:85:2e:c2:1b:90:08:bf:36:c2:0a:a3:66:8e:
71:a3:dc:26:4b:e7:ca:e8:52:f0:10:82:20:54:6e:c5:f9:54:
2d:03:ba:90:be:f8:b2:b3:19:55:d4:73:a6:21:73:a4:01:f6:
7e:ac:a1:21:07:44:df:f9:3b:33:ed:bd:7d:fb:53:70:ea:7a:
f8:dc:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org