Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uPqHjYpxb74COnUXiMCKy9sWWAo.roa
File: uPqHjYpxb74COnUXiMCKy9sWWAo.roa (raw, json)
Hash identifier: VQ8goyU/9IX56EFCOucDlEMfk5ScKeWKDnaqXoqwX+k=
Subject key identifier: B8:FA:87:8D:8A:71:6F:BE:02:3A:75:17:88:C0:8A:CB:DB:16:58:0A
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B654B19
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uPqHjYpxb74COnUXiMCKy9sWWAo.roa
Signing time: Thu 27 Jan 2022 09:20:23 +0000
ROA not before: Thu 27 Jan 2022 09:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12912
IP address blocks: 85.202.56.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728058649 (0x2b654b19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 27 09:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8fa878d8a716fbe023a751788c08acbdb16580a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:f6:94:9b:b4:dd:fb:36:65:95:52:ee:7c:
67:e9:c0:b8:b0:52:42:12:1a:a3:50:15:c6:61:91:
35:eb:53:1c:64:2c:7f:0e:e5:8c:a9:fe:d3:6b:03:
25:c1:10:b2:e8:25:69:df:c4:c1:f5:8f:e8:38:7d:
9e:16:95:46:da:a1:69:f9:5d:c5:bd:5e:e0:70:f1:
67:a0:c6:28:ae:fe:99:4b:9e:ba:a4:f2:2b:26:e3:
a9:22:d9:aa:58:ed:2b:29:72:23:39:23:38:77:69:
c7:28:67:80:89:3a:e5:9a:4d:37:79:a5:c9:1f:23:
15:45:b4:ca:ef:7d:45:37:b4:42:f7:7f:25:a7:88:
a2:8f:e4:e3:f1:67:7f:9d:6d:f6:c2:cd:30:18:22:
76:79:b5:09:53:3e:1d:de:65:85:6e:8e:fb:64:77:
4f:9d:8a:eb:72:d6:1a:44:37:d9:27:a6:44:d4:7e:
26:2c:49:84:7b:00:5e:21:70:37:d0:26:c2:9f:53:
43:c4:98:1a:a2:82:a8:89:36:47:99:58:f6:62:e1:
d1:72:a0:08:bd:de:cb:ef:98:fe:54:31:7f:17:3a:
42:b8:48:62:36:bc:88:25:7e:29:2f:6b:60:32:c1:
76:56:72:c3:d2:82:06:a3:ca:bb:0b:62:6a:e8:bc:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FA:87:8D:8A:71:6F:BE:02:3A:75:17:88:C0:8A:CB:DB:16:58:0A
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uPqHjYpxb74COnUXiMCKy9sWWAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.56.0/23
Signature Algorithm: sha256WithRSAEncryption
36:36:aa:ad:16:8c:06:ba:0b:c9:63:b0:f5:08:52:af:2c:5d:
f6:df:57:56:a7:8f:ab:b1:28:e5:d9:a8:25:26:a5:1b:e6:64:
de:23:a3:94:36:a8:eb:b5:1b:0f:3b:e1:37:74:4b:f9:ad:96:
25:be:15:3b:09:0c:b6:dd:aa:00:f4:14:6a:94:a5:fa:8f:77:
ce:0d:71:6f:88:31:5a:33:98:93:1c:af:a7:ab:57:18:32:91:
e3:84:dd:c9:3e:96:8e:63:89:2f:52:b8:0e:e4:dd:1e:81:19:
28:a5:92:2e:6b:06:36:21:05:4b:4a:e6:3f:2b:f2:c4:9a:a9:
1a:44:e6:ba:76:8f:1b:92:90:05:12:b1:ac:f2:76:ca:17:94:
5b:c6:1e:98:f6:7e:7d:47:f7:4b:06:a1:e6:f2:f9:f1:85:a6:
a7:0c:95:ef:8b:75:09:4d:18:99:48:8a:ec:2d:33:02:60:31:
39:bf:a6:d0:0b:dd:b1:35:3b:76:f5:25:84:84:a5:9e:7f:09:
53:42:c1:5d:e3:a8:d1:86:e3:37:ff:62:18:d0:0a:d7:2c:f3:
88:82:06:b2:80:0e:da:5b:3e:73:d6:46:07:27:74:19:e3:36:
c4:38:4e:5c:8e:17:22:a4:1b:04:f6:b5:41:70:b3:b7:f7:09:
de:78:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org