Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/UcNPGTXV7DgCv9ZyOmEGwN9nZYs.roa
File: UcNPGTXV7DgCv9ZyOmEGwN9nZYs.roa (raw, json)
Hash identifier: R2YSpJTLiJqoUgfiO44WpTpIYqRiW5QHEpEWRAlWtX8=
Subject key identifier: 51:C3:4F:19:35:D5:EC:38:02:BF:D6:72:3A:61:06:C0:DF:67:65:8B
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 1982A752
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/UcNPGTXV7DgCv9ZyOmEGwN9nZYs.roa
Signing time: Sat 01 Jan 2022 03:54:45 +0000
ROA not before: Sat 01 Jan 2022 03:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 176.52.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427992914 (0x1982a752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 1 03:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51c34f1935d5ec3802bfd6723a6106c0df67658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:07:9d:c4:8a:97:e1:9f:a8:d6:93:b7:a5:
9e:a5:c2:2b:51:2e:a6:1b:75:32:95:8e:3a:37:3e:
41:4d:e9:05:89:39:c6:99:77:2d:42:47:b9:11:da:
fe:0a:9e:20:e9:6c:cb:fa:c8:87:fb:87:f7:88:43:
3b:42:5b:bd:c7:24:d6:0d:b2:df:cf:b4:da:37:bc:
fa:8a:8b:14:1e:98:a6:27:9d:2b:bf:1b:58:ca:0e:
9d:9c:5c:a5:f1:e8:84:fb:32:0b:bc:60:59:e9:41:
8f:1d:d6:5f:13:ed:cb:6f:41:ef:94:ae:55:45:ae:
e1:91:d3:70:e0:69:b8:00:f6:9c:be:1b:67:73:30:
4d:5a:4c:79:4b:f3:90:01:93:47:c7:58:b5:00:80:
17:d1:3f:ad:e5:d4:29:15:84:a0:a7:6d:6d:83:d5:
d9:55:1a:4d:5a:bb:ad:d2:97:f9:92:be:df:47:74:
86:9f:b9:f3:e0:6a:ba:ec:4b:b2:bf:f2:cc:47:ce:
a0:92:5b:b8:8f:b4:f4:18:0d:6e:77:24:dc:ac:ab:
41:6b:5d:33:43:24:40:a8:50:d0:12:6a:9c:64:52:
40:90:b8:ec:f1:5a:eb:ce:41:08:d2:41:c1:fc:a6:
8c:5c:80:9e:4c:6b:77:4e:f2:38:d1:da:5a:fa:5f:
bd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:4F:19:35:D5:EC:38:02:BF:D6:72:3A:61:06:C0:DF:67:65:8B
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/UcNPGTXV7DgCv9ZyOmEGwN9nZYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.187.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ed:16:65:0a:ff:2c:bb:83:34:fd:89:e8:4f:be:25:01:1b:
c6:14:34:53:61:c4:16:c5:57:62:1f:5c:34:c5:20:55:54:53:
08:a9:5a:30:64:7a:55:e5:dd:ec:8e:40:21:1a:fa:ae:b0:19:
7b:39:2f:28:5c:ef:de:bb:0b:68:43:4b:76:4f:bc:b9:84:7a:
e4:03:c9:3d:30:fd:4b:e5:7c:67:01:eb:85:44:a1:3a:1d:96:
49:cf:48:85:0b:1e:6b:36:d1:0d:e3:88:e2:42:ec:a3:07:38:
73:7f:d8:18:ba:4d:85:56:49:b6:77:ce:da:85:4f:e0:2b:a8:
02:0b:bd:8e:22:4d:53:d2:cd:da:6b:bf:b5:5e:d9:fd:4b:02:
db:ad:5b:0c:4c:1e:6d:7b:ea:9d:fe:eb:d5:1f:3c:0d:45:ca:
14:41:67:d1:e1:c2:ef:bd:c1:69:d8:85:89:b7:0d:8b:f8:a7:
3f:bf:48:c4:a5:f0:f4:17:eb:c6:bd:be:74:e3:c9:a0:8d:79:
60:5f:0c:80:c8:a9:ef:d2:77:ca:5e:45:1f:4b:73:86:79:38:
f3:a1:8a:b8:26:16:2b:a0:02:61:1b:b1:76:b7:fe:28:ab:f1:
d1:33:c8:8b:dd:8c:34:0b:57:29:de:20:11:69:59:21:c2:d7:
9b:80:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:14 2024 by rpki-client on console-ams.rpki-client.org