Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/51DnxAZJ9m6OL8Bh4r7IB9AibcA.roa
File: 51DnxAZJ9m6OL8Bh4r7IB9AibcA.roa (raw, json)
Hash identifier: JUkiJwOu1e5UqI3GRJNINe75UeYaee+zeyxDXGp1P7A=
Subject key identifier: E7:50:E7:C4:06:49:F6:6E:8E:2F:C0:61:E2:BE:C8:07:D0:22:6D:C0
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0181D1AF3191873A7971FC0A77393F8F46AD
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/51DnxAZJ9m6OL8Bh4r7IB9AibcA.roa
Signing time: Wed 06 Jul 2022 04:05:28 +0000
ROA not before: Wed 06 Jul 2022 04:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 171.33.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d1:af:31:91:87:3a:79:71:fc:0a:77:39:3f:8f:46:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jul 6 04:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e750e7c40649f66e8e2fc061e2bec807d0226dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:4d:fa:f6:62:1c:e0:4f:db:61:e8:5e:3f:
58:61:bf:c7:f7:e5:18:59:ac:33:3c:b0:7c:3f:21:
25:30:e4:a2:e6:83:5b:08:59:d6:41:0a:c8:df:dd:
0a:88:ae:78:be:d3:0d:3e:8a:10:96:3d:f1:3f:92:
b3:05:45:9b:df:3a:fa:c1:51:50:46:b1:07:e6:13:
c4:73:e1:b6:c3:2e:24:3d:db:4e:43:27:1f:d0:d4:
7d:49:97:77:dd:79:b1:7e:c6:21:86:cc:8f:1e:c2:
5b:ce:a6:60:26:ef:b4:fe:1c:6d:44:43:f3:23:6e:
d0:c6:5b:6a:e9:26:ef:4e:4c:fb:9c:cc:b8:14:c2:
60:fe:55:7c:d3:4f:fd:6e:b3:2a:52:33:ce:5a:58:
9b:ba:95:74:51:0d:6b:38:08:49:00:0a:ca:82:e3:
ca:84:93:4d:70:fd:33:b6:9a:90:c9:98:9a:1c:e5:
cf:dc:64:b1:ad:7d:04:71:4e:e3:f1:e5:0c:7c:29:
0c:e6:2b:7d:03:4d:9c:08:e5:41:46:c3:5f:ab:b0:
93:6f:a0:23:3c:f4:97:d4:60:cf:7e:4f:a8:b1:b9:
ac:cd:b2:ad:e8:52:08:8c:4e:65:1d:2e:ce:d6:71:
e9:9b:d0:0c:ab:2f:b4:9a:a6:ff:30:cf:86:da:0f:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:E7:C4:06:49:F6:6E:8E:2F:C0:61:E2:BE:C8:07:D0:22:6D:C0
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/51DnxAZJ9m6OL8Bh4r7IB9AibcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.240.0/24
Signature Algorithm: sha256WithRSAEncryption
53:96:6b:40:82:10:45:25:d2:1a:72:3a:1e:0b:fa:30:30:76:
fd:4c:e5:32:b3:13:6f:31:3e:b0:10:4c:45:8f:19:ae:0c:7d:
af:b5:1f:37:5d:09:7d:d6:8e:94:68:ec:37:17:c6:d3:6b:23:
0b:e5:75:87:3b:27:31:47:72:fa:5f:7a:5b:c1:fc:35:26:15:
ac:b1:ed:b9:8a:a3:e5:7e:f3:fe:76:e1:06:d5:9b:a4:75:77:
18:e3:85:46:d0:32:3c:0f:04:c5:cf:01:04:18:b6:09:21:50:
cf:cc:a3:23:cc:28:f0:05:52:50:d4:2c:90:e5:83:94:30:60:
e9:c8:a9:6c:ea:79:01:6f:3a:41:10:ab:de:67:b5:2d:f6:98:
f2:ec:86:43:76:34:b1:4f:af:be:23:49:e4:54:86:58:74:e6:
50:3e:ee:ae:ac:cd:87:71:9f:67:7c:72:4a:0d:56:14:6f:58:
43:f0:e9:d3:ce:18:ec:8a:92:cd:65:0f:e9:58:eb:fa:cd:af:
1e:cd:4b:91:bc:a2:a2:13:4e:5d:40:0a:4d:03:de:c7:34:2d:
04:b0:3b:b5:52:ca:32:61:4e:0a:5f:bc:58:cd:18:c7:a6:39:
09:d3:08:8a:e6:31:1e:87:e2:26:d1:35:f2:38:79:d2:90:ce:
ba:40:a6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:59 2024 by rpki-client on console-ams.rpki-client.org