Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Gx1NmpVmj1b4Crlanszco8iCpOU.roa
File: Gx1NmpVmj1b4Crlanszco8iCpOU.roa (raw, json)
Hash identifier: CJzPxrS4mD+anBsWwm1SChpSD8SihOLp8p7jOtrHnGY=
Subject key identifier: 1B:1D:4D:9A:95:66:8F:56:F8:0A:B9:5A:9E:CC:DC:A3:C8:82:A4:E5
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 673EA8
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Gx1NmpVmj1b4Crlanszco8iCpOU.roa
Signing time: Wed 23 Mar 2022 15:56:48 +0000
ROA not before: Wed 23 Mar 2022 15:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28761
IP address blocks: 185.76.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6766248 (0x673ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Mar 23 15:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b1d4d9a95668f56f80ab95a9eccdca3c882a4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:6b:4f:0c:8a:fa:9d:c1:5e:33:04:5e:fd:
34:8f:23:78:6f:8d:36:24:c1:a4:b6:8b:92:c6:fe:
1d:bc:39:32:b8:0a:1f:7d:36:db:9e:f7:d3:4b:bb:
1f:f6:b5:31:fc:08:34:03:af:99:c5:f6:74:19:2e:
1c:2c:77:48:ce:f5:65:a6:ea:12:79:d6:a4:45:fb:
b8:cf:4b:96:f6:96:a7:d7:e3:34:14:6e:2d:ba:66:
b4:3e:f9:fd:96:2e:a9:8a:28:9a:f7:dc:83:de:3b:
a4:11:55:f2:4b:ad:3d:50:f3:a6:74:8a:01:1d:e5:
7f:fd:6a:14:1a:b3:6e:93:c2:ec:1c:44:a6:4f:8a:
26:dc:cd:1f:c4:e4:eb:16:04:7d:81:ac:f8:02:57:
ad:6f:aa:dd:67:24:9d:19:cc:be:83:38:a6:c1:45:
8c:a9:9c:b4:73:32:87:75:62:a8:f9:eb:e0:72:53:
fa:b2:d3:6f:37:61:cc:2a:cc:e1:05:b0:61:a3:a7:
62:af:d5:05:0f:32:f5:8d:ca:2c:3d:71:14:a7:74:
29:46:20:f7:9f:b8:b0:21:2a:d8:1d:86:90:b6:b2:
76:6e:6d:d3:20:7f:46:50:e0:45:4c:ca:ce:e4:87:
58:84:54:d8:4d:b8:91:ab:69:4b:b3:35:9f:ab:6a:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1D:4D:9A:95:66:8F:56:F8:0A:B9:5A:9E:CC:DC:A3:C8:82:A4:E5
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Gx1NmpVmj1b4Crlanszco8iCpOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:cb:17:6d:b6:1a:ce:ea:77:d0:6d:bf:6f:a3:0a:fb:3a:15:
45:7f:58:af:bb:66:62:0a:74:e5:19:a9:48:cb:7d:d9:b0:19:
67:ca:97:09:c0:6b:ed:ae:63:68:33:01:e2:02:4e:1e:10:28:
df:96:11:02:94:d2:c3:62:fc:6c:94:53:3c:28:b2:8c:c9:0a:
0f:98:11:91:b2:0c:a9:d9:fc:9d:c8:98:32:00:8b:ce:92:cd:
15:3d:07:db:dc:ba:8e:7f:96:9d:52:45:8e:39:68:44:f3:e1:
2d:35:f9:d7:55:f8:d1:ba:a0:a2:c4:3c:63:1f:2a:5b:0d:f3:
b0:9d:e3:96:e2:60:cf:81:31:ae:eb:e5:63:e9:0a:3e:9a:57:
60:87:69:17:07:9f:06:8f:70:e1:e2:ed:d1:3e:97:39:71:a7:
a0:ed:f5:60:65:ac:db:dc:89:db:50:c3:65:1c:4a:34:51:ac:
47:0f:66:8e:04:08:a1:b1:95:a5:f3:ac:8c:ca:05:ee:6d:0b:
50:b2:bf:7a:6f:ed:c1:98:72:5f:e1:b8:5b:2e:1d:c2:a9:47:
ac:1c:c8:f9:c3:fa:3f:b1:dc:42:ed:ea:7f:c2:e6:46:ee:54:
35:9e:2e:7e:4a:47:9f:3a:c5:0d:ff:b0:3e:66:84:62:8a:cf:
a2:f0:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org