Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/8GcqLZxFtq9iPN7XPl9XXcEfAJs.roa
File: 8GcqLZxFtq9iPN7XPl9XXcEfAJs.roa (raw, json)
Hash identifier: NqkzySF2fSM7aBKjeGma2niVV1tDZ6ir9ma6/Qj5XEc=
Subject key identifier: F0:67:2A:2D:9C:45:B6:AF:62:3C:DE:D7:3E:5F:57:5D:C1:1F:00:9B
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 18CAD939
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/8GcqLZxFtq9iPN7XPl9XXcEfAJs.roa
Signing time: Sat 01 Jan 2022 02:59:08 +0000
ROA not before: Sat 01 Jan 2022 02:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8812
IP address blocks: 51.51.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415947065 (0x18cad939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 1 02:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0672a2d9c45b6af623cded73e5f575dc11f009b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:e1:29:e8:d2:2f:ad:77:ad:96:d7:1d:e9:
c1:6e:84:31:39:d1:d7:3e:62:ad:a9:ef:39:2a:ec:
17:b5:b1:24:a4:d2:bb:27:42:04:40:a2:c8:97:6d:
48:8b:fb:9a:4a:6f:ee:c5:64:a3:cb:b8:79:90:70:
35:4e:85:e8:94:ae:a8:ea:bc:b2:d7:c7:b4:a3:cf:
3b:d7:f7:d2:3e:df:5e:32:a1:a3:03:e4:62:56:ec:
33:89:65:fd:d1:54:47:eb:8a:64:00:54:6a:72:28:
c4:42:31:cd:a9:ee:12:5c:db:87:88:ff:ef:e3:7f:
0a:0e:f2:f0:b4:9a:87:2c:c9:83:fa:48:85:43:e3:
5a:bf:c7:fa:a9:19:dd:88:73:fd:f1:4a:6a:2d:2a:
1f:82:61:92:39:3a:a2:0e:17:7f:4e:ac:92:9c:52:
73:68:4a:31:d9:06:d5:39:df:c0:40:ec:c3:82:43:
b5:c0:a4:ad:af:65:6c:21:df:08:77:9c:3c:a5:de:
77:07:56:0c:ab:b7:a0:24:47:f7:4d:c4:a0:94:47:
e4:d2:cb:0a:16:4a:a9:c5:8d:2c:91:e7:8a:40:84:
08:d0:0c:be:9f:58:26:af:6b:53:54:1b:2a:aa:4b:
29:94:a6:ef:0a:8d:94:0a:19:6f:3c:10:96:95:55:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:67:2A:2D:9C:45:B6:AF:62:3C:DE:D7:3E:5F:57:5D:C1:1F:00:9B
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/8GcqLZxFtq9iPN7XPl9XXcEfAJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.51.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e2:c1:ea:f5:a2:4b:9f:4e:3a:bf:1f:e5:d5:57:26:3c:6a:
c4:0b:11:be:d1:3c:4e:5a:06:43:77:f6:cd:7e:47:46:5b:b0:
da:cc:84:24:74:1d:a4:0f:bb:4d:a3:d4:e6:ce:8e:a5:8b:fc:
78:55:18:6c:2f:b1:33:63:82:6d:8a:10:ed:fa:8d:51:ce:a3:
fc:cd:09:ef:8f:ba:ad:e5:1c:b3:43:86:e3:d8:19:c2:02:43:
e9:c0:01:0b:63:df:e6:ea:a9:87:23:7d:a8:5b:99:d7:e6:68:
d6:2c:68:8d:f5:29:31:9a:ae:e7:f1:6c:b2:b1:da:f7:07:27:
20:14:ee:27:3e:cd:46:5e:12:f4:5a:ca:d2:77:9a:4b:38:46:
62:c5:de:f5:78:2b:5e:7d:17:f8:da:0b:25:a4:cc:ad:af:fc:
bb:74:ba:e4:1d:9d:f4:c3:ca:29:06:d1:9c:ef:ce:e9:29:cf:
84:26:11:86:ea:04:cb:e6:70:51:82:c3:8e:fe:dd:7b:73:48:
4e:c2:ad:2b:0f:f3:38:c5:2c:cd:71:e1:e8:50:50:4b:e8:bb:
e3:90:f5:af:22:59:39:8b:aa:7d:91:86:be:fa:48:ba:13:2e:
42:b9:d2:58:a1:ed:f3:13:0b:df:97:16:f9:b4:51:f0:c5:5a:
e1:ed:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org