Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/U--OCWIdowSqV4-0uRHlL2XoYU8.roa
File: U--OCWIdowSqV4-0uRHlL2XoYU8.roa (raw, json)
Hash identifier: 5MwGNWm5DYf4heKSbbhfj5ZRsk4l3ICUblNwD2hr8p0=
Subject key identifier: 53:EF:8E:09:62:1D:A3:04:AA:57:8F:B4:B9:11:E5:2F:65:E8:61:4F
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 121950BE
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/U--OCWIdowSqV4-0uRHlL2XoYU8.roa
Signing time: Thu 12 May 2022 12:37:02 +0000
ROA not before: Thu 12 May 2022 12:37:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3292
IP address blocks: 185.72.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303648958 (0x121950be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: May 12 12:37:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53ef8e09621da304aa578fb4b911e52f65e8614f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:c2:6f:5c:31:71:4e:82:aa:36:24:3d:1c:
45:8e:79:31:db:0d:92:7c:94:00:aa:e2:ef:cb:c9:
47:40:b2:b7:6d:da:cc:8c:2d:dd:f5:a4:5b:d7:55:
75:f6:43:1d:c4:55:3d:86:ea:23:28:36:1c:61:f9:
fd:92:a5:12:9a:76:13:dd:75:b2:cc:c4:55:15:d2:
a8:52:b3:e0:73:41:a8:27:f4:63:0f:01:0c:60:bf:
d7:02:d1:ff:07:cb:72:43:8b:6a:82:87:6a:35:4a:
2a:ae:11:61:1b:8a:47:70:02:9b:d3:41:f1:73:13:
1b:9c:01:a8:9c:23:95:77:58:57:f1:6b:5d:4d:95:
99:29:34:28:97:d5:4a:e9:df:c8:61:4e:9b:ec:0e:
ef:ce:43:53:be:17:b0:c5:5a:9d:d6:5d:50:05:3d:
f1:cf:d7:03:20:35:7a:bc:0d:2d:ce:b5:45:87:17:
c0:54:95:c6:be:09:48:9a:ef:21:26:65:40:c4:01:
6c:d8:cd:bf:12:fe:bf:e2:71:2d:1b:74:e9:b1:7b:
44:90:b2:d1:07:07:8d:ad:5b:cf:fe:96:20:ac:56:
0f:33:5e:aa:96:f5:75:e1:05:b8:32:58:7e:e8:da:
60:29:7c:77:0c:2e:47:67:df:0e:24:56:44:2c:db:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:8E:09:62:1D:A3:04:AA:57:8F:B4:B9:11:E5:2F:65:E8:61:4F
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/U--OCWIdowSqV4-0uRHlL2XoYU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:80:98:19:46:56:3b:b2:e8:73:89:e3:f1:ff:fa:28:25:10:
95:d9:c4:51:15:94:e1:66:33:f5:88:60:ed:98:4d:6d:fd:c2:
d5:02:33:5b:65:b0:6d:a0:54:a6:5e:4e:32:ba:0f:7d:8a:47:
11:04:69:d2:48:74:45:09:05:14:a6:9d:4c:c2:5d:74:05:dd:
ab:99:92:f6:48:ed:bf:f7:3d:7a:32:e7:6f:07:36:dc:2c:ae:
54:45:4d:4d:d4:7c:87:a0:51:c8:12:76:75:23:66:38:15:84:
12:d2:56:97:38:3b:5d:6d:93:29:5e:2c:6a:ca:d8:95:33:5e:
21:ad:29:c3:1f:78:4b:ff:8d:f8:04:cd:b0:07:0f:70:d2:3a:
41:93:00:b9:40:3e:9e:2e:1d:3d:e7:0b:b0:ca:b7:4e:e5:22:
e2:a7:1a:0a:3a:7d:cb:d4:ab:cd:1e:d5:2b:ac:d1:5b:59:1f:
68:a1:99:3a:ee:cb:09:b0:f7:d7:ae:22:e5:0b:09:e6:0b:14:
3b:3d:3f:8b:6f:20:ed:04:18:17:52:ae:c2:a9:79:ac:a4:61:
d3:85:ae:98:f1:56:f3:ea:7e:5f:46:a5:9f:ee:a7:d8:41:26:
bb:b8:61:d4:0d:85:5d:d7:c9:2e:b4:02:83:5c:b6:58:d6:f1:
b4:97:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:19 2024 by rpki-client on console-ams.rpki-client.org