Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/UIcMZpuWd6WdCA0vEExOSn6WB9o.roa
File: UIcMZpuWd6WdCA0vEExOSn6WB9o.roa (raw, json)
Hash identifier: IVi8oq2xaPOFCl+slDbBb2AFcwTOWS70wesMhgHTuBY=
Subject key identifier: 50:87:0C:66:9B:96:77:A5:9D:08:0D:2F:10:4C:4E:4A:7E:96:07:DA
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 04513F60
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/UIcMZpuWd6WdCA0vEExOSn6WB9o.roa
Signing time: Mon 07 Mar 2022 21:27:43 +0000
ROA not before: Mon 07 Mar 2022 21:27:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201334
IP address blocks: 85.91.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72433504 (0x4513f60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Mar 7 21:27:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50870c669b9677a59d080d2f104c4e4a7e9607da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:b8:86:74:3e:70:64:c6:2f:d0:09:91:37:
a5:93:97:74:99:8f:92:2f:52:c6:0c:ed:68:93:a3:
59:41:d9:e9:1b:0a:24:f5:26:bb:a9:43:ca:3a:fc:
6a:6d:2d:de:9c:a0:d2:c3:d6:da:5f:0b:77:5c:88:
45:d3:21:90:a3:c0:c2:d1:72:71:d5:d2:b7:62:3b:
9a:fc:00:80:45:2e:a2:ed:a1:36:46:44:82:f6:b5:
dd:24:05:a6:a2:20:f3:05:85:77:ab:45:bc:61:4a:
ec:86:8f:b3:e4:b3:18:62:48:9c:7b:b0:2a:28:41:
84:79:a1:6b:5c:d2:f0:85:eb:5a:88:25:05:3f:08:
40:bc:26:cc:a1:80:f9:70:57:25:66:40:bc:09:92:
0c:ff:83:19:a6:6c:77:5f:09:47:64:12:d6:00:e3:
4f:86:16:32:cb:77:e1:c6:fd:b0:d5:b8:f2:9b:78:
4c:69:cc:53:b5:c2:25:3d:12:1a:e1:c6:9e:0c:35:
c1:e5:c6:4d:dc:b6:07:e9:e7:4e:8f:91:79:32:80:
cc:8c:81:72:38:d3:65:c7:94:21:17:e1:c9:5d:20:
1c:ae:27:0b:e1:24:8c:4d:83:82:3f:46:b0:59:3e:
e1:ac:12:b0:93:38:50:db:ef:35:db:83:22:71:1f:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:0C:66:9B:96:77:A5:9D:08:0D:2F:10:4C:4E:4A:7E:96:07:DA
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/UIcMZpuWd6WdCA0vEExOSn6WB9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.91.116.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ed:bb:f8:3d:5a:38:0c:ff:f6:53:ff:8e:9b:75:03:1f:57:
3d:1a:8c:07:2a:93:29:53:94:7f:49:48:2b:4f:42:91:6a:34:
e0:5a:b8:52:61:83:f5:ca:b7:c2:fd:e3:57:7f:e2:ab:03:47:
16:c8:cd:33:f6:73:e6:d5:92:ff:fa:f3:11:a9:c0:e1:30:12:
8e:e1:14:d6:d1:0c:84:2e:3b:d2:7b:a1:b6:f4:07:d2:a5:f9:
c0:a0:65:7c:b0:bb:e2:11:6e:9c:b8:85:85:c0:de:ca:0a:62:
88:a5:32:1c:f6:3c:3d:97:2f:4b:5a:ed:5f:6a:22:bb:59:33:
3d:58:da:77:b7:fe:50:57:7e:17:bb:85:ef:b7:08:be:42:d3:
f5:13:9a:c9:ab:3d:ca:e5:ad:9d:a0:c4:8a:2c:a2:ed:cf:40:
f3:2c:37:a2:88:cf:98:6e:f1:d5:fc:9d:2b:0c:8c:28:8d:40:
ef:8c:db:08:d0:14:ba:f3:dc:14:2d:26:9b:41:e2:b8:7d:2a:
1d:db:b7:2a:d6:fd:09:9e:c8:b4:e3:6c:d7:b8:5d:82:bd:5a:
c9:be:5f:e1:0f:06:44:17:8b:bc:ef:69:30:da:b6:4e:58:9c:
f1:65:30:9e:61:5a:54:2f:aa:60:2a:17:ff:f4:61:02:f6:d2:
a3:f5:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org