Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/5UZKqSa9ww12YLpseMXR6tEllmE.roa
File: 5UZKqSa9ww12YLpseMXR6tEllmE.roa (raw, json)
Hash identifier: qFuIvwFCnPl6E07J28/nEmmJlGiiuWirboQVCWm2wd8=
Subject key identifier: E5:46:4A:A9:26:BD:C3:0D:76:60:BA:6C:78:C5:D1:EA:D1:25:96:61
Certificate issuer: /CN=ef591ea44ca854404aee22824b3d395edd3c4c0d
Certificate serial: 013198F8
Authority key identifier: EF:59:1E:A4:4C:A8:54:40:4A:EE:22:82:4B:3D:39:5E:DD:3C:4C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71kepEyoVEBK7iKCSz05Xt08TA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/5UZKqSa9ww12YLpseMXR6tEllmE.roa
Signing time: Sat 01 Jan 2022 09:00:02 +0000
ROA not before: Sat 01 Jan 2022 09:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 87.236.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20027640 (0x13198f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef591ea44ca854404aee22824b3d395edd3c4c0d
Validity
Not Before: Jan 1 09:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5464aa926bdc30d7660ba6c78c5d1ead1259661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:17:cb:e5:f2:dd:cd:1b:6b:64:e4:a8:67:
5b:59:fd:a8:b9:eb:c0:f6:c2:99:a0:56:4d:73:6b:
31:96:4d:2d:2b:67:01:f5:d0:0e:0b:5c:a0:69:75:
12:5f:d9:64:44:94:a0:ec:a8:7d:5c:59:10:ba:5a:
01:59:60:99:e8:7e:de:29:69:f3:ec:d6:08:85:6d:
6f:77:05:1b:1a:17:e7:1d:4b:a3:a3:f9:fd:6b:07:
47:e0:ff:d5:ee:ef:e3:e2:58:b3:5d:94:26:0e:47:
41:24:14:46:49:d3:8b:ed:58:e3:e3:b0:4a:f6:c4:
2e:c3:38:a4:60:39:68:68:f8:d1:ac:8b:43:71:5e:
93:8b:fd:07:39:5b:9f:84:42:7f:13:3e:11:6f:53:
1f:3e:6d:07:80:a7:b9:0b:14:31:91:fa:0d:56:7c:
3e:4a:15:87:e3:58:d6:70:73:32:33:3f:1b:72:84:
36:85:a9:83:48:1f:b6:38:75:71:da:3a:fa:c0:08:
1e:0a:a1:e3:15:fd:2a:4c:fe:86:70:66:00:7c:ec:
37:fa:28:59:fe:c7:5d:2a:2a:ce:8a:77:05:01:f6:
1d:03:e4:99:88:11:0c:6a:89:6a:80:75:4d:08:c2:
c2:20:bb:dd:31:35:59:02:84:84:4e:79:e0:fb:65:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:4A:A9:26:BD:C3:0D:76:60:BA:6C:78:C5:D1:EA:D1:25:96:61
X509v3 Authority Key Identifier:
keyid:EF:59:1E:A4:4C:A8:54:40:4A:EE:22:82:4B:3D:39:5E:DD:3C:4C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71kepEyoVEBK7iKCSz05Xt08TA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/5UZKqSa9ww12YLpseMXR6tEllmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/71kepEyoVEBK7iKCSz05Xt08TA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2c:ab:ec:16:df:0c:ed:45:98:23:44:5e:2e:06:1a:05:bc:
e7:ed:d1:5e:70:87:fe:35:97:4b:b1:5f:e0:fb:46:07:e0:12:
12:28:15:67:76:e0:44:be:7e:f5:eb:f1:cb:4f:85:81:28:c2:
db:5b:17:65:a8:73:0e:e2:75:92:e1:b6:e7:88:0f:8c:c0:d4:
da:2e:4b:87:16:55:d4:cc:c9:f7:2d:68:ca:71:87:35:0d:1e:
b6:f4:15:39:2f:86:9b:0c:2a:a9:45:ea:8e:cf:d0:a9:f1:e2:
ad:9e:68:85:ba:5c:ff:0d:8c:af:99:86:44:18:66:d7:a7:ba:
cd:0f:15:ef:ba:7e:72:1d:83:ee:7b:3b:e5:c6:eb:c1:91:73:
6b:00:c8:d3:5d:86:67:58:39:85:98:be:42:83:0a:7d:2e:60:
74:94:0c:3f:d1:c1:20:c6:5c:fe:42:81:a2:0e:71:de:f0:75:
b3:70:64:ad:af:ca:ee:71:6e:3a:e0:a2:24:1b:39:96:82:a6:
1b:95:75:33:af:e5:98:36:45:0d:ad:74:d4:69:b1:02:be:0a:
d5:6d:bf:7c:bf:80:98:35:80:a2:94:eb:6e:d4:8e:5f:e9:5d:
28:f6:47:8f:ba:e3:b9:46:07:b8:7a:a3:9a:0d:7d:6d:e7:20:
1e:3b:e4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-fra.rpki-client.org