Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UFExYTB-RVqlLqPURKDapWap0Bs.roa
File: UFExYTB-RVqlLqPURKDapWap0Bs.roa (raw, json)
Hash identifier: pM2+Yj4irUsK9T3pztnrQZR65lsH9wGCX8/m8JcyRQI=
Subject key identifier: 50:51:31:61:30:7E:45:5A:A5:2E:A3:D4:44:A0:DA:A5:66:A9:D0:1B
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09136B4E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UFExYTB-RVqlLqPURKDapWap0Bs.roa
Signing time: Sat 01 Jan 2022 16:00:35 +0000
ROA not before: Sat 01 Jan 2022 16:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64249
IP address blocks: 5.182.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152267598 (0x9136b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50513161307e455aa52ea3d444a0daa566a9d01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:b4:68:d9:7e:55:a0:90:7b:4c:c9:17:bd:
f8:25:30:ee:c1:94:57:76:0b:c7:02:86:d3:78:a8:
06:ed:55:91:e9:50:e5:a8:3f:21:7f:45:72:61:21:
3f:47:f3:28:47:2e:a5:9b:b6:ae:e6:3d:04:2d:7a:
1c:99:f3:38:d8:7a:d3:8c:fb:63:f7:7c:b3:1b:d2:
06:8d:5d:c2:60:06:e1:04:98:7e:5b:50:6a:80:c4:
20:61:8c:35:8e:e2:a7:87:cb:a5:86:be:e4:36:22:
99:8d:e9:36:68:b8:26:31:d3:84:c5:d8:3a:cf:2d:
f5:21:7a:8d:a7:f5:48:3c:47:e5:ab:a5:e9:b2:e2:
25:68:d9:22:2f:0f:fc:1b:bc:b1:b6:09:15:75:81:
e7:8a:80:46:4b:3a:96:b7:57:15:45:ef:cc:09:f9:
19:31:f8:f0:3f:e6:8e:27:f4:17:c8:62:bf:8a:0c:
af:56:02:16:51:df:cb:93:92:ab:49:e6:14:a4:3c:
43:87:47:3b:46:64:c5:12:a2:60:bf:cc:cf:f9:f3:
c3:0b:c0:44:82:cb:e4:c9:5f:8b:61:ba:3f:a6:ed:
49:cc:5a:a1:39:03:47:a8:31:91:dd:19:58:b2:34:
eb:df:b4:83:63:2b:f2:9f:2c:96:f3:59:b3:b3:92:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:51:31:61:30:7E:45:5A:A5:2E:A3:D4:44:A0:DA:A5:66:A9:D0:1B
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UFExYTB-RVqlLqPURKDapWap0Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.51.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b2:84:d8:52:86:8e:2d:90:bc:64:55:35:6e:40:73:19:ec:
fa:73:17:8c:ec:fb:1d:ff:ae:5c:50:6d:65:f4:50:d4:ec:51:
b0:f9:25:d5:5e:05:12:32:75:08:76:41:37:85:11:34:1e:6e:
b9:e8:38:63:0e:cf:9b:45:a2:12:6f:0e:5f:40:47:0f:b9:a5:
87:a0:75:ad:e1:23:bb:1b:f8:f7:a3:26:36:52:03:00:8a:2d:
af:48:99:0b:cf:65:cb:62:a3:03:5a:e2:4a:ad:28:78:ab:31:
56:b2:cc:c6:43:35:38:6e:f5:99:6c:64:e6:63:de:a9:f7:e2:
c3:6c:1d:b8:9e:2a:c7:00:dc:ca:0f:38:fe:1b:4f:f5:64:c6:
cf:4e:49:8e:8b:59:d2:ea:f8:8a:7d:35:c4:9f:3b:90:ba:e9:
fe:92:d2:3e:b9:72:69:f0:16:13:45:b9:43:08:d9:18:23:38:
be:f3:c3:9d:3c:e9:4a:16:69:7a:2b:12:e6:a6:c1:ee:c9:2a:
79:f4:65:a2:4a:27:de:9a:77:7e:96:7b:d0:5a:26:58:dc:73:
b4:4c:cf:f1:04:dc:69:fb:4e:df:c6:c0:20:4b:fe:51:eb:fe:
46:1c:43:af:d9:86:7b:a4:19:31:07:43:e5:83:bf:b8:fe:a3:
5e:ad:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org