Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/Mn0mTwssiBSxdKR9GeXEKCsYsOI.roa
File: Mn0mTwssiBSxdKR9GeXEKCsYsOI.roa (raw, json)
Hash identifier: Z2rmEEmW5kN4xor/3jjbqhGoPuhxLvoHkXHBpmmLlSA=
Subject key identifier: 32:7D:26:4F:0B:2C:88:14:B1:74:A4:7D:19:E5:C4:28:2B:18:B0:E2
Certificate issuer: /CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Certificate serial: 05010481
Authority key identifier: 1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/Mn0mTwssiBSxdKR9GeXEKCsYsOI.roa
Signing time: Sat 01 Jan 2022 15:59:16 +0000
ROA not before: Sat 01 Jan 2022 15:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.1.61.0/24 maxlen: 32
2001:7f8:9d::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83952769 (0x5010481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab4e00c0d92cb501bbb223acf039e27091db4e
Validity
Not Before: Jan 1 15:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=327d264f0b2c8814b174a47d19e5c4282b18b0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:7c:58:11:5f:0e:4f:96:f8:e9:b8:df:25:
50:b3:f7:4d:a2:78:63:8c:7a:b8:6c:2f:34:fc:72:
07:fe:c8:21:6b:8d:71:e2:22:bd:33:d1:04:eb:99:
0f:09:e0:b4:2c:fc:94:17:21:76:6f:c7:68:62:71:
22:63:07:e3:45:23:8d:66:bc:4e:33:72:d0:68:00:
33:85:96:17:21:2c:74:32:ab:7b:41:45:86:e3:1f:
45:2c:3d:1f:a3:50:fe:05:2b:15:9b:91:a0:8c:01:
4c:2b:7e:2e:24:58:1c:ca:6e:d0:52:c3:fb:c4:66:
c0:bf:56:cb:b5:1f:31:5f:a7:79:0d:d8:c3:8b:23:
15:bf:1e:3c:db:9e:cc:8c:cf:82:c9:26:c3:92:83:
8d:52:d0:c5:dc:36:11:8e:26:d9:95:da:b8:d3:cb:
58:83:69:08:e5:61:26:d0:1e:28:a6:15:60:f9:c2:
2d:de:a2:ed:0c:f9:c5:23:1b:c6:4f:ad:5e:e4:2d:
2c:74:8c:d4:d7:d9:e4:5b:7b:19:4f:f5:cc:83:85:
97:2e:b5:e2:aa:9d:05:4b:e4:21:89:d4:50:96:d7:
1a:45:e2:61:03:cb:e9:76:45:a7:42:63:26:65:4a:
bb:7d:41:0e:43:ad:c4:6f:24:c4:2c:3c:7a:25:4e:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:26:4F:0B:2C:88:14:B1:74:A4:7D:19:E5:C4:28:2B:18:B0:E2
X509v3 Authority Key Identifier:
keyid:1E:AB:4E:00:C0:D9:2C:B5:01:BB:B2:23:AC:F0:39:E2:70:91:DB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqtOAMDZLLUBu7IjrPA54nCR204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/Mn0mTwssiBSxdKR9GeXEKCsYsOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a9a6ba-d748-40c7-8503-19ba84d84af0/1/HqtOAMDZLLUBu7IjrPA54nCR204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.61.0/24
IPv6:
2001:7f8:9d::/48
Signature Algorithm: sha256WithRSAEncryption
47:66:7a:4b:63:a1:08:e2:9a:d3:c3:1b:60:5b:c5:e3:08:5c:
5b:ad:11:78:4e:67:3b:29:82:cb:56:4a:15:f5:b3:74:5c:a1:
41:32:25:f2:b8:56:89:e0:19:ac:56:d2:7c:8c:8c:f1:a1:6a:
3f:f2:77:f3:47:6a:e2:f7:56:ba:b5:fd:08:49:3f:30:3c:87:
a4:2b:08:9a:ea:d8:77:bf:60:c6:c8:23:b7:8e:35:6a:e5:d3:
71:56:de:7a:df:18:bd:5a:0b:82:bf:da:17:e0:14:c1:7a:ed:
09:08:7d:05:19:1b:25:78:23:8b:fd:43:f9:bd:7b:7d:3e:bf:
c0:a9:8b:44:96:8a:54:da:c0:f2:d9:68:26:d6:56:c7:dd:08:
64:7e:86:36:6b:58:eb:60:57:97:c3:5d:c8:99:fe:17:2f:bd:
5a:63:cf:69:f4:53:f2:ac:f7:ae:cd:5c:5c:ad:f4:3e:2b:75:
39:1f:7a:ab:dc:23:c8:61:ee:30:dd:4d:c5:91:95:11:ee:fd:
15:06:77:d0:91:bd:01:c6:6a:85:d0:c3:31:73:be:24:8e:b4:
12:34:e9:76:27:92:13:6c:ac:0f:2d:de:b1:1b:ba:74:c4:27:
68:90:4e:3d:73:50:d6:3c:0c:18:79:0f:78:95:8a:f9:92:e0:
7c:78:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:27 2024 by rpki-client on console-fra.rpki-client.org