Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/2Upe4UU6sjt7UgRTqFWfnkmsgkA.roa
File: 2Upe4UU6sjt7UgRTqFWfnkmsgkA.roa (raw, json)
Hash identifier: nsNL/+wp/ushDdYhlTxiONtvlo4490sLCE60Pvbf+B4=
Subject key identifier: D9:4A:5E:E1:45:3A:B2:3B:7B:52:04:53:A8:55:9F:9E:49:AC:82:40
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09273F62
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/2Upe4UU6sjt7UgRTqFWfnkmsgkA.roa
Signing time: Sat 01 Jan 2022 16:00:49 +0000
ROA not before: Sat 01 Jan 2022 16:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209183
IP address blocks: 2.56.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153567074 (0x9273f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d94a5ee1453ab23b7b520453a8559f9e49ac8240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:b3:a8:6d:52:6d:93:75:fd:80:30:e7:40:
0f:26:ec:7e:4e:b8:31:bf:71:20:9b:a9:ab:7c:f3:
b1:a0:8b:79:3f:5f:a6:7f:43:e7:bf:74:8f:cd:9c:
72:ef:67:d2:8d:48:ea:42:3d:eb:58:b4:ce:13:26:
37:2f:af:5d:bc:85:5c:ad:cc:03:89:f8:75:99:40:
0c:a2:99:1e:df:c8:dc:36:7f:c4:0f:fa:86:0f:ec:
75:40:1b:a2:da:ac:4d:c7:b7:3c:e6:78:59:a8:67:
50:1a:64:46:1a:10:3c:af:05:9b:51:9f:92:35:a9:
04:2d:26:28:41:34:48:cb:ec:7a:60:19:e7:54:43:
93:96:97:de:41:df:d3:e9:73:d5:6e:04:f4:32:ca:
7d:98:9f:ec:b2:f4:3c:d4:34:e0:89:82:f7:ff:80:
98:d2:e4:00:c1:67:51:91:4f:b5:c5:fc:7e:0d:e1:
25:aa:4e:97:3c:37:dc:3e:8f:2e:19:2d:67:ff:64:
4b:d7:fd:e1:7b:97:2c:7b:cd:ae:b5:ac:13:f3:e4:
8b:ae:d6:3e:c0:d4:a6:05:15:da:80:59:98:47:74:
af:f8:31:a9:cb:a0:cb:f6:84:3f:ce:c6:0c:91:36:
2c:fe:59:77:df:60:90:7c:6b:dd:d9:0c:0b:51:c9:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4A:5E:E1:45:3A:B2:3B:7B:52:04:53:A8:55:9F:9E:49:AC:82:40
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/2Upe4UU6sjt7UgRTqFWfnkmsgkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/24
Signature Algorithm: sha256WithRSAEncryption
48:61:e3:e9:cd:79:0c:5f:5f:87:a8:fa:63:6c:f1:84:4b:a2:
de:e9:c9:bb:ba:c7:45:04:3e:e8:df:d1:a8:65:92:ce:a4:4d:
ff:01:84:50:3b:ca:af:19:98:ae:2a:5f:8c:5e:9a:ad:c4:d0:
46:81:df:95:e3:cb:26:89:60:7d:93:fe:e8:7d:80:e0:2c:e8:
e3:75:a6:06:e5:3a:1b:63:fa:57:8a:74:2f:b2:7a:dd:e3:d3:
12:47:fe:b6:c2:b0:3c:5c:2c:88:50:e6:dc:ca:50:13:3f:b3:
72:71:51:9a:c8:24:d6:15:1c:3e:00:66:3b:24:6e:3f:74:b0:
69:cd:74:28:58:03:e3:22:9f:02:9c:1b:dc:4a:42:70:fb:38:
63:b1:41:f4:21:f6:d0:d8:a6:4f:c2:17:19:7e:76:b7:24:2c:
ed:1f:86:a0:e5:00:20:55:f4:13:66:be:f8:be:d0:5f:93:28:
a5:26:07:0c:8b:48:79:b9:01:4f:9b:d2:da:0c:79:9f:86:0b:
1f:7d:d5:e0:5d:72:09:7f:2c:9f:5d:8c:e0:75:7f:e9:ab:39:
85:cd:9a:04:a7:6f:60:41:40:29:55:09:a3:56:0c:e3:15:46:
1a:da:21:7c:cf:8b:cb:7b:04:22:6c:f2:19:0a:c0:2a:a2:9c:
39:c2:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org