Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/Cstj7FswbCcGyyBVbZD1wFJrMkY.roa
File: Cstj7FswbCcGyyBVbZD1wFJrMkY.roa (raw, json)
Hash identifier: fDxlHNrPfbQ4vtiADtdKOD/XiFaYzUYbVALV0CzB4Qw=
Subject key identifier: 0A:CB:63:EC:5B:30:6C:27:06:CB:20:55:6D:90:F5:C0:52:6B:32:46
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 1BA0B5C3
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/Cstj7FswbCcGyyBVbZD1wFJrMkY.roa
Signing time: Sat 01 Jan 2022 08:53:53 +0000
ROA not before: Sat 01 Jan 2022 08:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31202
IP address blocks: 185.23.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463517123 (0x1ba0b5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Jan 1 08:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0acb63ec5b306c2706cb20556d90f5c0526b3246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:f2:2e:41:12:02:42:05:73:ac:d0:8b:01:
0b:cf:b8:e4:67:72:9f:2b:13:dc:ab:6b:cf:05:a2:
a2:c1:4a:6d:3f:7b:98:60:18:85:d4:2d:af:e6:19:
57:e9:1e:b8:95:35:51:9b:28:fb:99:f7:35:45:ab:
a8:b8:a4:9a:b6:41:e1:53:ce:dd:60:de:df:7b:08:
69:f1:fb:ad:bc:67:a9:f3:49:9f:47:57:32:fd:3e:
70:58:48:0a:91:2b:71:02:c7:1f:31:15:e2:77:a6:
c6:81:82:51:15:2d:16:a3:00:ff:7d:6c:be:51:5f:
d6:6f:81:07:44:92:5c:d6:03:55:3b:b1:67:42:40:
9e:12:a2:79:72:62:87:b0:52:46:93:3e:f9:94:81:
47:c7:4f:bf:6b:62:11:56:09:9e:bc:48:95:59:0c:
33:26:54:f9:86:75:8e:66:4b:d8:51:5a:86:14:5e:
a0:69:4c:e5:16:04:98:32:2c:f5:56:ba:ac:1b:a5:
92:0a:00:e3:bf:c2:5f:23:ad:5f:e0:fe:17:63:9f:
2e:f1:ab:8f:4b:fa:52:21:8b:8a:bd:d6:61:a1:d3:
2b:79:6a:2d:eb:1a:f7:73:b8:af:8e:61:ee:9e:6a:
ff:21:be:8c:ba:ac:b9:31:9f:d8:d0:c1:1a:03:59:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CB:63:EC:5B:30:6C:27:06:CB:20:55:6D:90:F5:C0:52:6B:32:46
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/Cstj7FswbCcGyyBVbZD1wFJrMkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9b:99:ad:5e:7b:d8:3e:0a:fb:4b:82:75:25:d3:c0:d5:d7:
eb:90:4e:a4:36:bf:12:62:dc:0f:40:0a:99:c0:8e:dd:85:ed:
dc:bf:d1:fe:1e:12:59:0d:34:4c:7b:76:78:78:a2:e2:3f:32:
9f:53:88:bf:7a:3a:d4:58:1c:af:c7:71:a8:c6:d9:42:c3:f2:
31:49:0e:08:bf:79:18:46:c6:29:d0:c8:31:3d:0e:a0:64:f6:
3e:2a:a9:d5:ec:84:65:9b:4e:15:65:bf:64:e2:ac:e8:12:f0:
81:98:47:87:e0:96:74:15:76:b5:6f:c9:4b:6a:ec:7f:44:ea:
99:1f:61:6b:84:58:bd:fb:05:7b:99:cb:94:fc:83:d4:e3:67:
f0:0c:0e:53:26:6f:c3:f2:dc:86:28:7e:99:09:8a:69:44:f1:
9d:a8:06:f8:66:88:cb:03:59:67:3e:c3:c8:72:51:6b:46:36:
16:c6:61:ec:f5:18:30:14:78:0e:c5:42:48:21:cf:58:c1:64:
8e:6f:d2:38:a4:e8:e0:f8:44:e2:b1:49:ab:f8:50:04:0c:41:
74:0d:b5:6f:d4:f3:ca:ef:6e:91:29:77:7a:13:27:af:46:72:
e9:66:2b:01:0f:68:ef:0d:d5:b4:b1:2b:df:00:c4:3e:5b:fa:
57:2a:5b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:52 2024 by rpki-client on console-ams.rpki-client.org