Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/UJdvg5Uki5R25YIeCBQrUcOYnxo.roa
File: UJdvg5Uki5R25YIeCBQrUcOYnxo.roa (raw, json)
Hash identifier: i3G5YXiE9lJUoN/LgiUAIwugKbikhcqjSg5fqonxWuY=
Subject key identifier: 50:97:6F:83:95:24:8B:94:76:E5:82:1E:08:14:2B:51:C3:98:9F:1A
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 037620F4
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/UJdvg5Uki5R25YIeCBQrUcOYnxo.roa
Signing time: Thu 27 Jan 2022 13:47:04 +0000
ROA not before: Thu 27 Jan 2022 13:47:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10599
IP address blocks: 194.37.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58073332 (0x37620f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Jan 27 13:47:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50976f8395248b9476e5821e08142b51c3989f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:c2:4b:b3:d0:f4:09:18:40:9c:a0:41:19:
96:0a:81:94:02:96:35:67:89:de:dc:65:1a:74:52:
36:9b:5c:1a:84:78:bf:44:c9:7c:b4:ec:d6:49:d4:
5e:85:80:38:54:e7:49:00:8c:3d:b3:39:d7:cc:08:
ea:85:89:ca:4d:b8:e3:c2:89:99:de:69:85:89:8b:
9b:ba:8a:96:e1:18:cf:dd:e2:91:e3:4f:b9:bb:0e:
92:a5:5e:6b:b8:dd:19:06:90:79:37:7a:7c:ea:d7:
d2:63:2f:ba:b7:91:ac:8c:ef:4a:05:db:12:ff:0c:
d5:40:ad:8e:34:a1:5c:64:b0:40:44:2b:1c:6a:73:
d3:f4:a3:90:73:3d:c0:b4:55:b0:d2:e3:5f:8a:75:
db:50:3c:ff:41:25:68:8b:c3:d9:84:fd:10:fc:d8:
ac:2c:ef:0d:9d:8a:e6:b9:92:fe:d3:0b:be:04:58:
77:b3:7d:da:e2:f3:6d:ab:96:8c:ae:f1:be:a1:43:
4a:49:94:8c:66:60:06:c7:db:c7:f7:5c:5b:5e:f2:
d9:9d:3a:8b:7a:18:2e:11:eb:22:b9:6d:05:83:e4:
e1:40:00:e9:46:13:d3:3a:46:6b:f4:39:68:33:69:
4c:00:70:95:e5:66:93:e0:73:80:f2:fb:6d:69:92:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:97:6F:83:95:24:8B:94:76:E5:82:1E:08:14:2B:51:C3:98:9F:1A
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/UJdvg5Uki5R25YIeCBQrUcOYnxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2d:f6:c5:db:9f:16:a0:de:b7:fe:56:28:8d:69:34:cb:43:
4d:22:a4:c8:3d:a7:c6:02:07:36:83:a0:f6:b1:a4:10:e4:bf:
5f:99:cd:33:95:3e:cf:7a:20:89:db:3a:fe:a0:9d:a0:8c:4b:
b4:6f:0f:42:bd:bc:ae:5a:63:f1:ff:16:70:1b:61:d9:e0:03:
6c:36:fc:56:6f:f1:aa:1e:37:d8:91:88:70:a6:e4:68:c0:dd:
33:1a:7c:e3:e4:63:5d:b8:42:e5:10:4c:f6:4e:97:4a:de:c0:
a3:4d:1a:23:07:58:0b:9d:75:da:c2:4b:66:a7:22:83:88:06:
f2:2d:1c:24:2c:df:ee:a1:b1:9a:94:24:27:26:28:08:2e:8d:
00:e0:ec:0d:fa:e9:c1:a7:ca:62:23:f6:7f:bd:3b:99:d2:3e:
9e:c4:36:73:36:59:d6:eb:85:e4:75:17:2b:ca:9a:b6:c4:14:
99:a8:f0:16:8b:77:4f:e7:e7:71:05:ae:6c:97:a0:0c:79:93:
32:96:ad:08:95:0a:1b:4f:28:42:86:7d:6b:f0:66:f1:5f:1b:
d7:53:81:91:01:eb:a4:53:7b:0c:07:75:91:05:d0:34:16:4a:
c9:ac:a8:eb:d4:99:3a:99:41:78:36:3d:52:dd:d6:e5:6a:c3:
2c:dd:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:58 2024 by rpki-client on console-fra.rpki-client.org