Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/M611JrurNRTkadtwWDF1fK7n7Wc.roa
File: M611JrurNRTkadtwWDF1fK7n7Wc.roa (raw, json)
Hash identifier: rYz7axy8VAbUbenutEcRH3vURmqwUwwFT6cF73CYpbw=
Subject key identifier: 33:AD:75:26:BB:AB:35:14:E4:69:DB:70:58:31:75:7C:AE:E7:ED:67
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 0581CF63
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/M611JrurNRTkadtwWDF1fK7n7Wc.roa
Signing time: Sat 01 Jan 2022 01:51:41 +0000
ROA not before: Sat 01 Jan 2022 01:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12874
IP address blocks: 185.43.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92393315 (0x581cf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Jan 1 01:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33ad7526bbab3514e469db705831757caee7ed67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:09:f0:57:cd:8f:ce:ba:67:16:08:61:76:
e6:47:3b:8f:68:cb:dd:ef:8c:9d:a8:f3:a3:79:5a:
e0:36:f9:33:77:ae:11:28:18:c4:26:7e:5f:60:7e:
33:f9:7b:b5:bf:0b:29:3b:52:e5:09:bc:57:0c:12:
2c:a5:8f:36:9c:69:8e:48:45:c9:6d:96:ed:d2:2b:
9d:e0:04:ae:58:5e:cb:c8:2e:ba:23:15:83:51:3b:
78:8a:af:99:f9:ff:80:36:e0:e2:8b:8a:64:69:62:
43:44:31:af:1e:48:20:1d:18:9b:8c:6f:73:91:85:
6d:f3:ba:ce:24:0c:78:cf:0b:b1:12:82:3b:71:97:
e3:a0:49:91:50:ef:d1:71:fd:ae:45:f5:06:c1:08:
4f:6c:bd:fe:d6:b9:a6:ac:9c:1e:a5:d3:e6:b2:5e:
15:39:34:08:ae:88:23:bc:91:0e:ba:30:7a:ee:41:
ff:b8:30:e4:b0:64:06:04:f8:7c:25:ef:53:9e:96:
15:9e:bd:0a:3e:a0:7c:f9:3a:6f:77:e4:56:52:52:
64:e2:fb:45:37:5d:78:e0:03:67:4e:2b:31:18:6e:
fb:7a:44:04:a8:c7:d7:85:ac:44:e8:7a:45:17:f4:
53:61:3f:bd:8b:e7:b1:45:3f:12:3d:5e:3b:85:64:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:75:26:BB:AB:35:14:E4:69:DB:70:58:31:75:7C:AE:E7:ED:67
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/M611JrurNRTkadtwWDF1fK7n7Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e4:c0:2a:28:e8:b8:b7:ec:00:57:25:ae:44:7b:1e:ad:dd:
53:af:b0:70:c8:aa:29:14:5e:60:f7:4d:af:ec:d8:74:f6:31:
c3:75:dc:69:90:e1:3b:53:7c:c2:b9:fb:60:5c:f7:3d:cb:af:
8b:8b:0f:dd:c5:a7:72:84:6f:fd:72:88:54:ec:0d:48:be:42:
24:9f:d7:f2:7c:86:3f:e7:ff:5a:51:39:df:a0:ce:df:8c:fc:
03:0d:b7:c3:50:0e:b8:98:0e:85:fa:b9:17:6a:ff:f8:4c:04:
31:da:25:f6:14:30:5a:4a:9c:e7:af:f4:39:be:6b:84:83:04:
3c:34:26:ee:6f:a6:b5:4b:89:56:e1:1e:0b:17:a5:58:6a:6f:
d0:5c:de:c9:53:4c:e6:92:b7:66:e5:81:a3:c0:fe:0c:eb:be:
05:24:f5:e4:f7:4e:76:d4:42:7b:24:a7:7f:6f:7e:dc:55:61:
14:b6:53:7a:5a:8c:b9:eb:8f:32:28:94:c1:b7:5a:b9:10:b3:
25:9d:af:65:f1:95:02:50:3b:71:7d:29:53:47:f7:18:b8:05:
2b:db:d4:b7:7a:6d:c1:7e:a4:a8:99:8e:43:83:24:59:37:8c:
d5:65:ce:78:a7:77:84:52:e4:3c:ce:8f:72:1f:b6:8e:1e:c9:
64:92:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org