Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/RPVf8mDFlyR1ptn6pWyFWibbtIo.roa
File: RPVf8mDFlyR1ptn6pWyFWibbtIo.roa (raw, json)
Hash identifier: 5dgLmzs8cujI62VfwEZCfSXEZHB4azrpYqbukCuPgSM=
Subject key identifier: 44:F5:5F:F2:60:C5:97:24:75:A6:D9:FA:A5:6C:85:5A:26:DB:B4:8A
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 7A2511
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/RPVf8mDFlyR1ptn6pWyFWibbtIo.roa
Signing time: Thu 24 Mar 2022 08:03:51 +0000
ROA not before: Thu 24 Mar 2022 08:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200441
IP address blocks: 185.76.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8004881 (0x7a2511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Mar 24 08:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44f55ff260c5972475a6d9faa56c855a26dbb48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:7d:55:e4:3d:be:2b:4f:b3:e3:5a:f5:0d:
26:b8:08:ed:cb:ae:4d:05:c6:ef:43:6a:a7:e5:2d:
1c:cb:e5:94:ef:e2:c3:72:e5:62:75:a0:a7:e5:55:
b3:3f:18:09:bc:4c:6e:7b:33:d5:30:4a:c6:b4:a9:
67:07:d6:ed:c6:d0:f3:4c:53:39:d9:53:7c:f7:87:
40:85:08:93:56:85:e4:02:48:9f:a1:ec:c9:c4:dc:
f0:b6:fe:a6:ae:d3:3b:fa:07:c3:50:eb:16:83:ac:
7e:0c:32:63:19:cc:49:90:32:ef:6f:f7:16:6e:02:
a9:ec:1b:3a:bc:b5:61:ff:4d:64:47:90:a0:ef:c3:
f3:ef:74:07:2d:ba:11:ee:7f:b3:35:30:8a:54:6e:
6b:08:df:fa:19:3b:0b:37:00:37:45:1a:0b:fd:19:
4d:0b:cf:8b:4c:45:96:c9:06:94:18:e0:44:a4:cc:
ae:1c:d2:68:c9:cb:cd:00:5b:74:b1:91:e1:1f:d5:
ff:9b:16:67:85:05:68:41:61:5c:50:3c:50:41:34:
a8:0d:79:23:d8:27:ba:15:47:f3:bf:89:ec:82:5a:
f6:25:c8:2e:52:a9:0e:03:bd:b1:66:b1:c2:56:16:
4f:7d:25:32:3c:d4:ef:37:5c:3d:cb:9c:d9:0c:3e:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F5:5F:F2:60:C5:97:24:75:A6:D9:FA:A5:6C:85:5A:26:DB:B4:8A
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/RPVf8mDFlyR1ptn6pWyFWibbtIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7d:bd:b9:71:07:21:53:f5:a0:72:5e:3d:a1:04:88:cb:26:
f5:3c:eb:6f:9b:87:8e:c5:27:bb:7a:76:12:51:5f:ad:1e:35:
08:79:e7:44:89:fe:78:b8:c8:b5:80:d0:21:ee:71:4b:77:0b:
61:32:44:f5:ff:38:bb:30:e1:d5:a5:1a:72:30:34:e0:91:1e:
79:b7:fb:18:86:f9:bf:c0:eb:63:c1:e3:53:da:e7:dc:02:8d:
53:73:33:32:3f:b8:70:c7:bc:61:59:8d:31:ae:69:71:d7:bb:
8d:2c:97:18:8a:7a:ed:36:ea:c7:46:12:94:f3:42:cf:53:e4:
68:bd:a5:1d:1e:74:e8:17:a3:b3:80:4d:73:45:e3:44:06:73:
35:20:f9:a5:c8:92:9a:c8:8a:17:de:2d:6b:a3:de:50:01:d5:
31:88:77:f3:73:d2:8d:32:24:33:fb:dd:6b:62:84:91:66:3d:
8b:60:3c:16:9b:44:31:cd:0c:a1:5c:38:64:bb:5f:d5:f7:4b:
00:5b:71:c4:6d:f2:27:9c:d7:b0:1a:48:09:19:2b:e1:80:81:
80:6c:f9:2f:c0:db:9b:d7:24:2d:a2:7d:09:7d:d3:d2:bb:28:
8d:df:c3:6e:bf:64:5b:95:08:05:a8:65:c6:55:4f:db:7d:c8:
24:5a:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:53 2024 by rpki-client on console-ams.rpki-client.org