Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/UPojHsjAtYWkPjcmbIaf8YlYgEU.roa
File: UPojHsjAtYWkPjcmbIaf8YlYgEU.roa (raw, json)
Hash identifier: 4DiflbHMopbc8fMHkfs7VqSP6v5BdDAWIXzCUg9t+Ro=
Subject key identifier: 50:FA:23:1E:C8:C0:B5:85:A4:3E:37:26:6C:86:9F:F1:89:58:80:45
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 018456052C09170B336948E620AAB5354127
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/UPojHsjAtYWkPjcmbIaf8YlYgEU.roa
Signing time: Tue 08 Nov 2022 06:54:50 +0000
ROA not before: Tue 08 Nov 2022 06:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56729
IP address blocks: 93.189.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:05:2c:09:17:0b:33:69:48:e6:20:aa:b5:35:41:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Nov 8 06:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50fa231ec8c0b585a43e37266c869ff189588045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:e3:75:b0:20:87:ed:de:57:de:bf:60:cd:
d7:b0:67:4d:67:ea:55:d0:3c:2e:76:6c:16:25:51:
a3:47:6d:1c:13:53:12:7b:a4:b1:84:cd:07:06:d2:
e4:3b:6b:e7:c7:56:ef:28:6a:3e:35:63:0d:58:4b:
df:51:76:7e:ad:26:da:ab:ed:b6:96:63:7b:02:dd:
60:3d:85:3b:a8:b0:a4:57:5a:02:71:0b:21:2a:7a:
f2:7c:04:0a:30:8c:9d:ce:b0:43:1e:99:ad:20:f5:
a9:0e:09:57:38:6b:54:de:14:31:1d:e0:c0:4b:c4:
1a:c6:01:13:5c:0f:45:50:05:00:65:04:79:71:62:
42:c8:a9:c5:69:21:ce:cd:1c:94:09:e7:10:79:35:
c0:0c:48:f3:11:be:2f:1b:fb:b2:47:42:39:76:77:
fd:b1:b5:37:05:f5:92:cd:10:73:fe:10:8c:a4:01:
2b:22:ea:89:11:f4:86:fc:02:c0:f9:31:c2:60:90:
ca:0c:42:ff:fc:2c:86:09:9a:4f:d8:8e:94:3c:7c:
6d:8c:f2:76:c5:d7:fe:dd:ba:fc:77:aa:b9:05:73:
69:bd:c0:e7:87:6b:0a:e9:1a:0b:a3:3d:e6:fa:b0:
04:64:b3:c5:f9:ab:17:0a:15:e3:5d:46:02:21:0b:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FA:23:1E:C8:C0:B5:85:A4:3E:37:26:6C:86:9F:F1:89:58:80:45
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/UPojHsjAtYWkPjcmbIaf8YlYgEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.126.0/23
Signature Algorithm: sha256WithRSAEncryption
96:e5:fa:5e:1b:c0:66:c6:dc:3a:f6:b1:93:a7:be:d2:b7:2d:
77:e8:91:90:44:02:96:a5:71:a2:2c:cd:f6:53:97:24:38:c7:
b9:49:49:e3:b1:e7:cc:fa:78:ba:75:dc:d7:51:f9:ba:55:dc:
e5:25:fe:98:55:de:7a:6e:18:35:76:fb:1c:34:fd:15:2a:3e:
b3:7a:b8:9a:07:65:a3:99:30:0a:87:d5:c7:29:b8:a8:ff:fc:
38:4e:34:0d:9b:ed:63:fc:2d:d6:ab:d1:f9:78:e3:55:52:2f:
ae:dd:29:d7:12:93:2c:27:51:e5:1e:bf:5a:76:16:40:d3:fe:
28:f1:cb:01:fa:2a:94:0a:0c:fc:f8:37:8f:a5:6d:71:77:1a:
a1:b1:31:2a:71:62:6b:dd:28:e4:87:e2:de:30:c6:01:e5:ce:
16:59:11:48:cb:05:ee:ed:4b:36:b1:d6:31:35:b4:a4:f4:18:
c4:d6:14:b6:db:a1:44:d4:2e:7e:f8:c7:73:b3:11:6a:e6:8a:
24:50:5b:45:b8:78:94:2a:73:63:55:c0:c5:ea:72:61:6b:7e:
dc:6e:35:d9:43:1a:5b:61:aa:86:fb:31:83:c2:28:e2:5d:3f:
bb:53:fe:09:b9:e9:2b:5b:c4:f2:9f:5b:d6:87:9c:9a:44:15:
8a:aa:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:56 2024 by rpki-client on console-ams.rpki-client.org