Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/arm6mjO01rzztcpp_roPEBv3X0k.roa
File: arm6mjO01rzztcpp_roPEBv3X0k.roa (raw, json)
Hash identifier: 1r4eAnrC8w5SmhI2pvm8jYUMtzPYbpGy/VqYQTck4jw=
Subject key identifier: 6A:B9:BA:9A:33:B4:D6:BC:F3:B5:CA:69:FE:BA:0F:10:1B:F7:5F:49
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 0185FCB6F9CCD8099EDFCF751E7211327E63
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/arm6mjO01rzztcpp_roPEBv3X0k.roa
Signing time: Sun 29 Jan 2023 08:48:48 +0000
ROA not before: Sun 29 Jan 2023 08:48:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51375
IP address blocks: 84.235.102.0/24 maxlen: 24
84.235.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fc:b6:f9:cc:d8:09:9e:df:cf:75:1e:72:11:32:7e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Jan 29 08:48:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ab9ba9a33b4d6bcf3b5ca69feba0f101bf75f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:f8:d4:7a:79:88:c4:64:02:e5:83:c4:7e:
05:fb:4e:ca:b5:b6:4e:6c:f7:f3:a8:95:ce:34:58:
29:44:01:6b:2a:42:01:dd:6c:d6:1f:73:7b:a4:a7:
47:5d:67:aa:e9:b4:c5:9b:c0:0f:c3:ec:ac:2c:c7:
86:2e:22:41:ab:89:66:b8:ef:88:b0:27:10:83:b8:
d4:f4:d2:e8:43:71:6c:db:92:74:31:6c:c8:69:42:
3d:0d:4d:18:0f:d5:5e:47:56:21:06:b4:9b:54:a7:
73:32:7f:07:e6:db:90:23:7a:00:9b:0d:83:ad:a6:
99:e6:60:e5:ae:65:ad:af:73:38:38:a4:21:7c:fb:
d7:01:42:96:64:a3:5d:ad:6f:0b:f2:1d:59:fb:b0:
cb:d0:7d:57:df:89:bb:8c:df:da:ce:33:b6:78:c0:
ae:f5:e8:2b:50:e5:08:5b:0c:e4:12:41:2f:00:8c:
30:f6:b5:97:b0:4e:cd:0a:64:8f:45:ae:5f:7b:d2:
c7:62:f8:ac:5e:8d:4d:75:72:58:61:7c:bb:b9:19:
3a:27:50:ef:fa:c5:88:e3:4f:31:7f:ad:6f:53:fb:
7e:66:cb:e0:d2:4a:b8:a0:bc:03:67:de:ec:15:c6:
20:0e:3b:a4:99:77:42:a7:4b:1a:89:f4:da:0f:88:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B9:BA:9A:33:B4:D6:BC:F3:B5:CA:69:FE:BA:0F:10:1B:F7:5F:49
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/arm6mjO01rzztcpp_roPEBv3X0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.235.102.0/24
84.235.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a0:c7:fc:54:e9:2a:d1:d3:98:0a:21:54:c7:ac:0f:d7:96:
07:07:3d:eb:25:af:53:e9:99:2a:5d:32:a5:48:e4:e2:20:29:
56:3b:b0:e2:0d:bb:c0:08:69:c2:45:19:3b:a0:31:47:48:18:
19:35:36:8d:9f:61:41:f3:b6:ea:e8:e8:1d:f3:8f:d5:f0:df:
63:08:a9:dc:35:4f:47:2e:fd:de:5f:1a:2f:d5:3a:c1:3e:39:
17:64:d9:36:ee:a7:e7:a8:8a:9b:be:62:80:0c:30:ca:41:a4:
80:47:3e:6b:fb:9d:29:53:aa:05:8d:80:06:de:c4:e6:a0:29:
68:7c:3c:90:1b:14:dd:85:3c:2e:b7:51:78:52:2c:22:af:d7:
37:e4:e7:60:11:77:6f:10:e1:3e:ae:03:05:55:45:a5:54:dc:
ec:a6:b1:eb:d3:d9:9f:1e:39:5f:28:e2:9b:a9:71:73:b1:7c:
bf:d4:dd:5d:e2:38:1d:9e:1b:05:97:0c:e5:77:34:b0:db:c9:
1e:7f:13:5d:e2:5a:74:d7:f9:e0:ec:25:eb:d0:ec:a7:6c:d1:
e9:be:18:92:ff:b3:8b:86:33:50:e5:8e:33:a9:22:0e:54:e4:
a5:46:15:43:ff:88:e5:d9:1c:1a:df:39:bf:97:58:18:31:b6:
08:06:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:03 2025 by rpki-client