Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/UXShgrKaG0vhsS5HpEFfZTBC72c.roa
File: UXShgrKaG0vhsS5HpEFfZTBC72c.roa (raw, json)
Hash identifier: Ny+PrL8Csz/OKyE0GI1iCYQjwN0fwYmPiUczUKDcGwU=
Subject key identifier: 51:74:A1:82:B2:9A:1B:4B:E1:B1:2E:47:A4:41:5F:65:30:42:EF:67
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0A299BA1
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/UXShgrKaG0vhsS5HpEFfZTBC72c.roa
Signing time: Wed 23 Mar 2022 13:48:29 +0000
ROA not before: Wed 23 Mar 2022 13:48:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 185.132.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170498977 (0xa299ba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 23 13:48:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5174a182b29a1b4be1b12e47a4415f653042ef67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:bf:54:68:36:76:c1:ad:a1:15:e2:20:de:
f6:9c:2d:28:b0:77:e5:3c:e0:60:ea:b4:c0:d4:94:
85:6c:53:48:3c:01:15:ba:71:02:9a:1a:11:de:04:
87:d1:1c:ed:3e:5c:39:c5:56:73:77:7c:7f:bc:5e:
93:a9:12:fb:b2:82:42:5e:81:6a:9c:62:e9:3c:93:
ef:08:42:67:23:fb:b9:25:a3:e9:c0:20:62:c0:7d:
c4:63:59:54:7c:89:98:61:8f:36:b9:2f:28:32:0a:
6c:7e:7a:35:7a:71:02:6e:16:a3:14:fb:0d:54:d1:
73:04:8d:3c:e6:95:f3:47:41:7f:a4:32:ee:94:fa:
65:29:63:9e:87:28:7d:f7:e8:da:6b:ce:a6:d5:58:
f7:2e:9c:7c:73:21:d5:e3:94:14:b4:a5:bc:f1:59:
20:36:ba:b3:d1:07:f2:19:ab:bb:b3:98:dd:e7:ae:
36:32:6f:72:16:dd:8b:5d:35:16:99:e4:39:0d:31:
9e:d0:bf:65:ea:bc:4b:f1:d5:76:f2:a9:52:7d:9e:
52:95:b6:de:74:5b:f5:6e:47:67:3f:b8:06:ee:a2:
84:f3:a7:ba:5d:c5:e5:ef:8f:d7:3d:cd:d2:cc:45:
4d:5d:99:6d:4f:19:f8:95:9e:be:76:d2:a3:3a:0c:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:74:A1:82:B2:9A:1B:4B:E1:B1:2E:47:A4:41:5F:65:30:42:EF:67
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/UXShgrKaG0vhsS5HpEFfZTBC72c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1a:43:93:f1:26:b4:02:68:df:1c:1d:d8:73:84:99:9d:30:
8b:0f:3b:9d:75:78:67:c9:e4:77:33:4c:b8:7f:db:a7:ef:02:
e8:c0:91:a2:0d:81:9b:71:15:5a:57:a5:82:c5:a5:4e:f0:e4:
4e:64:19:f5:fb:b4:70:56:32:7b:25:c8:39:15:be:20:d3:3f:
42:5e:3f:3c:a7:63:03:28:44:5e:ac:ac:84:9c:d9:4d:f3:13:
f8:77:2c:04:57:65:8d:00:59:07:69:ae:3d:cf:8d:0a:f9:e6:
0d:8b:5c:f2:f6:11:aa:28:b1:5c:1f:fe:7a:a5:f2:96:49:92:
e9:41:91:98:e2:25:a4:16:b3:6a:b5:c7:fa:d3:c6:0f:53:ba:
5a:a2:e3:ae:18:f7:cd:c9:a3:8d:8b:d2:18:ab:70:57:67:86:
38:2a:5b:6e:ac:30:ba:58:31:bc:c9:48:46:ce:21:13:e4:72:
2d:42:19:63:c7:57:31:5b:67:7f:fb:e7:07:ed:d3:0b:aa:61:
83:49:17:ac:84:6c:74:7f:dc:91:5f:4b:05:5a:ab:38:79:61:
8e:ce:26:60:a1:94:df:cd:6f:43:4f:1b:ef:7b:33:cc:83:5a:
4a:50:ce:86:60:81:bc:65:b1:29:09:51:8e:3e:09:c3:2f:84:
ec:63:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org