Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/ACSDLrilGlHVoSZf5450FR2nAHI.roa
File: ACSDLrilGlHVoSZf5450FR2nAHI.roa (raw, json)
Hash identifier: NRKtmf8kGqZ2de/a2pcpRJ/LKb1p7IuMzEQjeCY7cpk=
Subject key identifier: 00:24:83:2E:B8:A5:1A:51:D5:A1:26:5F:E7:8E:74:15:1D:A7:00:72
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 19127FC4
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/ACSDLrilGlHVoSZf5450FR2nAHI.roa
Signing time: Sat 01 Jan 2022 03:55:47 +0000
ROA not before: Sat 01 Jan 2022 03:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60509
IP address blocks: 84.247.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420642756 (0x19127fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 03:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0024832eb8a51a51d5a1265fe78e74151da70072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:3d:f8:5a:8e:3b:fc:ea:50:6a:d4:7c:26:
6b:d6:ce:86:61:f5:6a:ad:72:07:3f:ab:e4:e4:76:
d8:e2:e8:2c:03:78:b0:d2:b1:62:95:90:9f:24:7d:
cd:89:07:11:90:59:6c:f7:28:ca:da:44:d8:ec:76:
b5:32:a6:a0:ec:77:db:74:9e:ca:bb:da:e4:9c:ca:
4d:71:ab:3c:46:ea:8b:7f:b6:6e:c8:fb:d0:7e:fc:
b6:9a:ac:7e:f9:2b:33:4e:d8:05:f3:0e:6f:91:09:
3a:01:fc:04:88:f3:89:04:2b:31:46:44:7b:c2:0d:
7a:88:31:14:60:3a:62:38:d8:1d:2b:a9:48:ba:aa:
e3:f2:ed:44:db:33:f7:a7:7b:b5:0d:fd:27:ef:82:
b0:70:ff:c7:ab:3c:79:5b:e7:17:01:12:92:b6:dd:
bb:e3:2d:40:45:55:7a:65:6b:79:0f:25:36:5c:9c:
08:22:7f:e6:83:52:c8:13:27:c9:5a:e4:26:c2:c1:
16:41:e2:bf:5d:95:fb:92:59:4b:61:44:fb:fc:17:
8d:71:af:f1:09:bb:78:70:a3:fd:56:66:97:f9:ce:
5b:3f:0b:b9:de:77:1a:63:fc:9d:e0:44:56:92:76:
d1:91:77:cc:3e:3e:e7:8c:35:e4:f2:0d:57:1a:86:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:83:2E:B8:A5:1A:51:D5:A1:26:5F:E7:8E:74:15:1D:A7:00:72
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/ACSDLrilGlHVoSZf5450FR2nAHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
86:fc:72:e8:48:98:1c:54:83:72:b3:5c:00:8d:42:10:6c:2e:
51:19:9b:e9:25:92:4e:a3:a7:4d:72:fa:bb:5b:fe:0c:3b:8d:
f8:f9:f4:19:92:53:f6:68:e4:a9:89:2a:91:1d:80:a6:30:d4:
7e:65:4c:43:8e:7f:4b:20:f4:4e:07:86:fa:a4:48:43:ec:23:
6b:94:f4:7e:17:42:46:9f:94:2a:81:84:06:1c:57:94:29:82:
4f:a5:05:c4:80:96:81:5f:fe:0a:67:4b:54:b8:f2:c3:cc:e7:
fd:e6:28:11:a0:8e:15:71:d7:32:f8:29:a9:1d:3b:d2:73:95:
24:61:2d:f0:71:2f:3f:cf:c6:58:8e:2d:b4:c9:a8:b0:1b:9d:
e9:fc:84:6b:f7:f1:a4:0d:1e:74:37:f8:37:e0:31:3e:20:a3:
97:e6:c5:45:2c:33:f3:d9:c6:19:17:bc:24:c1:70:53:d3:2e:
db:12:88:5c:0f:79:70:47:96:c2:a4:74:e1:ea:2a:bb:9e:43:
bf:42:72:8e:ae:3b:39:1f:6c:4b:28:43:01:90:2e:37:be:2b:
cc:95:a6:80:bd:f4:6c:cc:c4:95:e5:43:76:f1:ee:68:0b:5a:
3b:6c:3c:97:60:92:2f:70:01:b2:6f:28:cf:cd:5d:ff:7f:1d:
be:b3:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org