Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/S6O7ZPD64aVEIwd_n9dfGoQR2IE.roa
File: S6O7ZPD64aVEIwd_n9dfGoQR2IE.roa (raw, json)
Hash identifier: IMW3uHRM3Mt64bTgG59OMmtN3Ad4n2HzX79v+OPv17Q=
Subject key identifier: 4B:A3:BB:64:F0:FA:E1:A5:44:23:07:7F:9F:D7:5F:1A:84:11:D8:81
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 09FE4BBE
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/S6O7ZPD64aVEIwd_n9dfGoQR2IE.roa
Signing time: Sat 01 Jan 2022 03:52:33 +0000
ROA not before: Sat 01 Jan 2022 03:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212492
IP address blocks: 185.61.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167660478 (0x9fe4bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Jan 1 03:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ba3bb64f0fae1a54423077f9fd75f1a8411d881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:d3:8e:0a:1d:1b:c9:7d:83:54:f0:95:f5:
59:50:15:be:8c:41:27:d2:87:d5:a0:29:72:53:2d:
e2:f8:1a:23:c8:0f:71:e2:2e:e0:48:4c:2a:46:e8:
51:d3:76:2e:c8:75:8a:34:67:01:70:e6:aa:aa:91:
b6:2b:3f:43:99:f5:5e:79:4c:40:43:36:9a:1d:3e:
91:65:3e:54:19:24:4e:8b:45:8f:d5:bb:d0:6a:c9:
ff:23:eb:f5:d6:55:5e:99:ed:76:62:a3:90:b1:e5:
fd:84:c6:cf:fc:92:7e:a3:98:5c:0f:f6:f1:bb:5f:
e1:b8:c9:c3:49:ec:5d:0b:e7:bb:40:01:ed:3c:cd:
be:e4:d2:0d:c9:64:82:09:bd:94:b1:ff:9b:c9:89:
cd:ee:9c:3c:7b:77:b2:00:f5:07:31:61:3b:72:b1:
71:d7:ff:d2:ec:ac:86:50:38:da:af:c2:99:22:9b:
1f:32:67:27:37:d8:bf:cc:87:ef:3a:71:d6:1b:40:
45:77:14:68:97:76:a7:27:ec:61:39:54:85:bb:3c:
55:ee:d2:10:6d:a1:da:31:bc:c1:f7:4b:94:ac:ce:
57:e2:34:06:4c:ef:0b:d6:c5:23:fa:6d:c3:3d:73:
ad:0c:f4:76:b3:3e:f3:c7:08:26:f6:2d:dc:02:eb:
bc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A3:BB:64:F0:FA:E1:A5:44:23:07:7F:9F:D7:5F:1A:84:11:D8:81
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/S6O7ZPD64aVEIwd_n9dfGoQR2IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4a:96:37:32:42:2e:24:d4:d5:46:6a:ca:c8:8c:a8:84:28:
2e:83:a4:86:57:2c:8f:94:35:68:6b:1d:f3:2f:f1:63:0c:af:
d7:83:16:0a:00:f5:27:9c:4c:e2:43:3b:e6:e8:35:b1:11:fa:
67:06:f3:15:86:32:05:f9:26:56:bf:df:34:13:75:13:b1:3f:
40:24:3d:b4:76:25:61:76:ff:32:f4:e7:ff:08:4e:50:f5:88:
ae:86:b6:8d:e6:2c:f6:85:ea:70:90:7a:52:70:5d:80:e8:16:
91:94:6f:ae:56:84:bd:07:71:32:dc:06:ff:9b:7f:65:48:87:
11:a4:d3:14:1b:35:db:89:59:8c:50:b0:e8:5d:f2:eb:b6:92:
12:e0:c2:dd:80:5e:35:a2:90:29:09:7f:70:80:5c:22:51:fe:
83:f6:38:15:9f:b7:b0:67:23:1a:22:49:26:0d:23:18:68:45:
57:ec:99:17:3f:49:bc:8a:d5:42:e5:0f:c6:e1:96:3e:bb:97:
ec:0e:3f:71:03:69:26:52:87:e1:3f:59:ad:78:43:56:12:18:
57:dc:b8:54:32:29:22:3f:c3:dd:f0:3c:b0:b3:da:62:c9:a4:
6b:dc:01:03:ab:93:59:1c:94:b1:7c:04:f2:2e:2e:13:01:ba:
d6:65:ec:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:12 2025 by rpki-client