Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/Ut5I_FuGM8srQW3LM_dqsIdYwlc.roa
File: Ut5I_FuGM8srQW3LM_dqsIdYwlc.roa (raw, json)
Hash identifier: UeSj6Nn2LEuGUpmlY8Qt+ZuUcGNMZwMS9Tfd5/PKPW0=
Subject key identifier: 52:DE:48:FC:5B:86:33:CB:2B:41:6D:CB:33:F7:6A:B0:87:58:C2:57
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 20CF1267
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/Ut5I_FuGM8srQW3LM_dqsIdYwlc.roa
Signing time: Thu 28 Apr 2022 11:04:31 +0000
ROA not before: Thu 28 Apr 2022 11:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 141.6.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550441575 (0x20cf1267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Apr 28 11:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52de48fc5b8633cb2b416dcb33f76ab08758c257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:f7:13:fa:73:e3:a4:14:50:e1:13:23:fc:
8f:a3:63:1c:8a:3e:cc:7e:c1:fc:8f:23:7c:e9:1b:
98:37:7e:db:d1:ff:0f:f0:6a:92:10:36:1a:db:f9:
b1:65:47:f9:55:73:03:50:74:60:db:d9:72:93:22:
6f:ff:5f:ae:8a:60:94:08:86:40:0b:0b:37:a9:41:
89:d2:10:a3:67:59:83:63:32:3e:36:c0:20:3f:37:
2e:bf:72:35:e8:33:bb:56:12:84:02:48:71:00:e5:
9e:8d:e7:a1:21:43:64:22:45:1c:f8:b6:d5:1a:e5:
eb:2a:94:b1:78:22:61:d9:67:37:19:ae:81:fd:d3:
bf:fd:7e:86:29:67:58:e3:13:7d:49:21:8d:79:fa:
e6:3e:ba:f0:51:1a:51:b3:a4:28:07:1b:c6:f5:9f:
72:90:ee:c6:45:1b:fb:e4:c8:7c:bb:93:33:77:64:
02:00:2a:78:57:70:80:47:2d:60:70:b7:48:9c:fd:
13:4d:85:9e:71:ca:e2:5e:63:bb:2d:ba:7b:9c:e0:
bc:98:8a:ce:82:b7:89:15:26:85:40:b6:fb:ef:b2:
23:7e:f9:7c:42:10:c1:8d:25:36:98:74:4d:8f:84:
68:e4:bb:9a:7c:94:c5:40:2e:53:3e:54:eb:ab:7a:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DE:48:FC:5B:86:33:CB:2B:41:6D:CB:33:F7:6A:B0:87:58:C2:57
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/Ut5I_FuGM8srQW3LM_dqsIdYwlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:b6:fb:e7:a0:41:48:e1:49:9c:55:ba:8f:78:a5:e1:33:f8:
9d:0d:43:cf:84:42:1e:4a:65:28:5f:a3:db:9f:8e:5a:4a:09:
b0:58:39:64:3d:1f:87:0c:3b:e4:e4:ef:e3:d4:e4:67:e6:86:
35:27:a5:bf:e8:8c:e0:38:e0:62:46:4a:7f:8d:e6:63:3d:33:
b9:80:0b:a1:40:41:9b:91:eb:d0:bb:35:91:c0:47:e7:d3:41:
df:f9:80:84:39:db:af:4d:98:55:25:c8:f9:ac:49:a2:5c:44:
1a:92:86:05:5e:4a:3a:dd:b6:e0:95:14:a8:f7:80:74:c3:54:
92:84:e2:40:39:de:70:e8:41:d6:94:d4:94:83:6d:9c:c4:e8:
25:23:f4:94:28:6e:8c:5e:0b:b9:80:d7:f8:35:82:43:8c:23:
3f:72:17:78:d2:6d:f3:df:50:cd:a2:49:93:10:b0:a6:e1:18:
b8:c5:2c:f0:28:eb:a9:21:8e:fc:71:42:ed:74:23:b8:10:4e:
89:3a:d1:d1:1c:c5:24:7b:be:ea:0d:a6:57:54:2b:64:51:d0:
40:fc:3e:5e:e4:c7:7c:61:d9:15:7a:77:94:c7:45:b1:e0:5a:
58:b8:45:24:1f:b7:af:8d:dd:27:89:00:0d:3f:f4:ed:df:6b:
5b:98:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:40 2024 by rpki-client on console-fra.rpki-client.org