Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/UFovGbLFH_beivz2SKWzhNotWvw.roa
File: UFovGbLFH_beivz2SKWzhNotWvw.roa (raw, json)
Hash identifier: L1KgNmXnFqYhl0PnthKiG6go1TOeCE/jZN9iBVSA//s=
Subject key identifier: 50:5A:2F:19:B2:C5:1F:F6:DE:8A:FC:F6:48:A5:B3:84:DA:2D:5A:FC
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 0F7C7DE2
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/UFovGbLFH_beivz2SKWzhNotWvw.roa
Signing time: Sat 01 Jan 2022 02:52:09 +0000
ROA not before: Sat 01 Jan 2022 02:52:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 553
IP address blocks: 141.19.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259816930 (0xf7c7de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Jan 1 02:52:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=505a2f19b2c51ff6de8afcf648a5b384da2d5afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:a0:79:33:d2:f9:76:9c:3f:8b:72:52:74:
a8:52:5b:53:fa:77:b7:5b:d2:2d:eb:a5:1c:50:3d:
da:d8:9a:57:5f:9f:19:78:4d:e5:1b:92:fb:96:d6:
fe:3f:27:97:39:56:b6:bb:d7:c3:6d:05:dc:45:d0:
8d:92:16:69:bf:c7:a9:1f:c6:e5:18:57:92:00:75:
da:a1:69:b5:d8:fd:8a:c5:1c:1b:87:22:65:83:a6:
09:53:24:0d:56:ef:4b:c6:7b:01:d5:d4:14:c0:65:
d0:e2:de:b7:46:d3:46:97:e7:ce:d3:9e:99:25:24:
c4:76:58:6c:0a:42:ac:ce:12:48:70:2f:d0:b8:46:
8b:16:60:65:d5:56:e2:3b:ca:4c:ff:f9:cf:e6:87:
ec:1d:38:42:7c:e0:8f:0f:ea:1f:a3:00:05:3b:ab:
df:a3:76:d2:06:6c:b3:43:a5:09:66:a3:df:d7:51:
41:10:f5:11:4b:88:03:11:ba:f7:b6:52:75:2a:2b:
06:96:b5:d8:09:df:34:e8:82:c7:df:69:4d:90:33:
f7:a2:ce:84:b1:33:24:72:d8:63:e9:1b:9a:82:42:
53:ef:29:ba:d9:42:3d:13:8f:ea:6c:24:eb:8b:44:
ab:59:d2:ed:08:5c:dc:1b:22:6c:b0:90:f0:4d:ca:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:2F:19:B2:C5:1F:F6:DE:8A:FC:F6:48:A5:B3:84:DA:2D:5A:FC
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/UFovGbLFH_beivz2SKWzhNotWvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:78:44:3c:42:d4:ce:68:f9:6a:f0:41:c7:3b:e0:6a:30:78:
db:59:02:82:d6:1f:d4:0f:ad:59:49:6f:5a:3f:8b:2f:a1:53:
1f:37:6e:e9:a7:03:fa:ad:0b:45:c6:09:ab:37:87:19:d8:98:
a5:97:52:97:b5:62:74:c2:de:41:91:ef:bb:c6:15:b1:6a:b4:
3c:88:39:fb:f7:a7:e4:f0:00:7a:72:20:f5:92:5c:89:1c:4b:
85:e4:40:25:52:05:24:50:c8:c0:88:cb:a4:6d:8f:13:f8:74:
5a:ab:79:e5:7d:5e:e1:dc:88:42:d0:de:9a:33:1d:6f:1e:14:
2a:eb:71:e3:c6:52:c6:9c:10:a3:59:eb:67:8b:31:be:36:0b:
0c:28:d0:ac:a4:51:1c:b2:02:97:14:53:cb:a7:77:2f:39:40:
b4:fa:ac:93:e4:a6:62:87:dc:fc:79:1d:9d:72:9b:bb:00:d8:
87:7f:b5:3c:a8:db:13:a0:90:1f:81:94:a0:c4:79:2c:38:1e:
3c:cf:7d:8f:30:32:ec:01:5b:58:e5:40:42:87:1d:da:e0:46:
da:5b:cc:f9:a9:47:78:7d:1a:37:9e:65:09:a5:31:76:c4:e7:
5d:4e:4d:90:cd:07:74:5b:d7:a4:44:12:74:07:df:08:64:41:
77:e7:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org