Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/UuwCTPjoK8UeMHcGq6WBh7jJFS8.roa
File: UuwCTPjoK8UeMHcGq6WBh7jJFS8.roa (raw, json)
Hash identifier: U7NF89ZxYw3Ck8DMGkIMRr0l59EkH6z8K4zPXzOD7ys=
Subject key identifier: 52:EC:02:4C:F8:E8:2B:C5:1E:30:77:06:AB:A5:81:87:B8:C9:15:2F
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: 011B70
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/UuwCTPjoK8UeMHcGq6WBh7jJFS8.roa
Signing time: Tue 29 Mar 2022 13:15:07 +0000
ROA not before: Tue 29 Mar 2022 13:15:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 66.22.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72560 (0x11b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Mar 29 13:15:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52ec024cf8e82bc51e307706aba58187b8c9152f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:e0:cf:10:a1:bc:a3:e2:62:e4:34:e3:aa:
25:8a:e8:f0:06:a9:48:23:1b:fd:d0:6f:e1:86:12:
05:39:49:5e:6d:5f:24:a2:30:1a:bd:60:8a:aa:03:
a3:5e:57:36:06:24:53:09:1e:50:0f:a4:5f:fb:84:
28:1a:79:1f:da:d9:28:4f:d2:d3:55:3a:4f:8f:70:
28:11:cb:46:34:d6:30:df:9a:ef:a6:cc:c4:1d:e8:
aa:84:94:02:92:c1:ca:31:e7:79:c5:a1:d7:85:e8:
20:1c:df:2d:aa:8c:79:ef:62:ba:f8:40:0e:29:93:
65:33:9d:d6:62:77:bd:bf:d1:2f:88:0c:66:05:0d:
fd:4b:c4:58:9d:ec:e4:d5:2a:18:75:5b:f5:98:29:
0d:b1:02:5d:36:aa:01:0c:c8:df:cd:eb:52:96:1e:
78:b8:32:ae:0a:8c:4c:15:cc:3e:bf:c3:0e:e1:02:
12:43:54:fb:cf:27:31:83:74:af:35:5d:77:11:d0:
c2:1b:c6:9d:67:d8:f7:0a:bb:94:9e:54:0a:f0:e9:
62:9b:b9:56:0e:61:2a:16:4b:0e:9b:81:a1:d4:d0:
48:c4:68:8e:99:68:4b:40:4e:cc:c8:99:a8:bb:f6:
8b:4d:78:c3:39:94:79:88:ca:e8:c1:d0:f1:f0:16:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:02:4C:F8:E8:2B:C5:1E:30:77:06:AB:A5:81:87:B8:C9:15:2F
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/UuwCTPjoK8UeMHcGq6WBh7jJFS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.244.0/24
Signature Algorithm: sha256WithRSAEncryption
64:19:6e:75:e2:7d:39:8c:57:68:b5:0e:1c:73:b4:50:77:94:
54:73:37:a7:ba:80:a3:7c:71:01:f6:22:0b:31:50:21:15:2e:
fd:c6:bd:3d:16:d7:4b:e4:8d:c1:56:1f:74:b7:a9:c6:6e:2f:
0a:bd:ad:e6:4f:a9:b6:a5:db:b3:d9:9a:5f:83:9b:5d:d0:fc:
3d:e5:2e:86:7b:52:9f:fd:f2:02:29:5e:2c:fb:d2:55:89:52:
32:95:12:a3:c9:eb:f3:81:a3:77:2c:2d:ee:b7:9e:95:a1:4b:
63:99:e3:3e:93:1a:2b:50:92:7a:f0:a1:fa:c7:4d:73:2c:49:
17:c7:83:cd:e8:15:63:41:a5:69:6f:77:36:38:05:50:e6:e5:
dd:2c:9b:4c:25:2d:ef:1d:2e:99:1f:c9:ee:a1:24:57:4e:68:
1d:2a:00:3c:08:1f:c9:00:7b:81:7b:9c:81:e6:99:fb:e2:fa:
89:07:03:4a:28:81:0b:2a:f6:16:a6:3b:02:71:e5:d3:95:25:
b0:92:0d:88:71:f0:b7:9c:02:68:fe:fa:3e:45:10:09:f8:ee:
20:95:8b:ea:39:36:42:48:92:50:16:ec:b1:b3:f9:49:f7:a7:
cb:a5:72:f2:ba:bd:30:6e:b9:1b:20:a0:22:62:6a:8c:5f:d8:
11:87:2f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org