Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UHdwBzJQudNISdz-jKZI8aufD-4.roa
File: UHdwBzJQudNISdz-jKZI8aufD-4.roa (raw, json)
Hash identifier: QlkgTcm+zeT+N0FkkT9thdqn0bGBNcgHa68YN+5F37U=
Subject key identifier: 50:77:70:07:32:50:B9:D3:48:49:DC:FE:8C:A6:48:F1:AB:9F:0F:EE
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0B4B4F42
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UHdwBzJQudNISdz-jKZI8aufD-4.roa
Signing time: Wed 16 Feb 2022 18:14:56 +0000
ROA not before: Wed 16 Feb 2022 18:14:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201079
IP address blocks: 91.194.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189484866 (0xb4b4f42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 16 18:14:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=507770073250b9d34849dcfe8ca648f1ab9f0fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:71:69:68:56:4d:de:19:8d:76:3a:ce:8e:
29:48:41:88:d5:96:7b:38:f7:16:b8:58:a8:04:b3:
7e:ae:1d:46:a7:6f:82:0d:52:c4:8a:a3:67:24:64:
74:f6:e9:3e:51:d8:14:a4:f6:98:ab:56:e3:b1:14:
9a:97:62:9a:52:b1:1d:a3:bf:52:d2:b4:d0:de:1e:
db:d9:27:63:59:c8:d5:ac:11:9d:a2:30:83:69:7a:
bd:3c:b5:ad:2d:ec:6e:fb:70:5b:9a:30:cb:8f:ab:
12:9e:ce:d8:af:ad:bf:5c:8c:07:3f:9a:f1:b2:63:
9a:2a:d7:cd:eb:5f:47:4e:c1:6e:87:1b:ca:c5:10:
19:09:c5:8f:77:a0:b9:b8:0b:86:f5:00:25:76:11:
2b:6c:ad:62:18:3b:95:5f:b9:4f:10:a7:3d:e2:8a:
08:f5:f8:14:4a:04:c1:44:e4:03:2b:3d:61:59:7c:
a6:78:b3:f7:bb:24:53:a9:54:7a:6d:84:09:2e:20:
69:40:cb:ea:ab:e7:77:2a:5d:9a:67:f5:a1:15:9d:
a0:cd:28:09:72:54:6f:6b:e9:87:d4:e3:91:5b:cb:
1b:86:69:11:6b:27:f9:41:3a:96:f4:02:6e:12:b6:
fb:c7:9f:a6:2a:09:4e:1c:b6:03:57:8e:52:e5:b6:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:77:70:07:32:50:B9:D3:48:49:DC:FE:8C:A6:48:F1:AB:9F:0F:EE
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UHdwBzJQudNISdz-jKZI8aufD-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.53.0/24
Signature Algorithm: sha256WithRSAEncryption
09:10:71:f7:8e:8c:ec:17:70:e0:b9:c4:c2:f5:fe:a6:23:89:
8a:5a:49:4e:a7:fc:01:63:0d:66:41:a1:a1:ff:f9:df:b3:c1:
84:82:c8:49:66:49:b3:a9:1a:bc:23:b0:ca:09:f1:33:ce:6f:
f5:2d:3d:93:5e:f6:f3:41:1d:da:77:9a:7e:7f:93:45:19:3c:
a2:c7:45:dd:e1:ed:77:e7:06:93:a9:a0:ca:70:74:3c:f2:c3:
83:eb:17:f2:fb:c6:d9:e4:74:52:8b:2e:ac:91:b6:26:7c:3e:
d0:71:9f:2c:bd:04:16:6a:7e:97:66:2d:28:19:6a:cb:dd:c6:
51:39:4b:d8:7b:18:10:04:e2:20:c9:ca:cc:d4:5d:c7:1b:c9:
0c:2a:55:6a:a8:5a:81:5e:8c:8b:38:08:a5:45:ae:f8:c4:55:
3b:87:a5:e0:60:5c:ed:91:03:7b:f9:03:78:07:2a:c6:57:a9:
fa:44:52:52:5e:38:91:f6:1b:69:a6:07:01:52:b9:2d:76:a2:
48:dd:bf:f2:8f:c5:7c:ff:d8:3a:6e:31:34:ab:0a:84:79:70:
65:05:8e:3f:23:92:53:21:ae:22:e4:fc:53:6f:38:d9:5f:27:
4c:44:dd:99:fd:5a:93:bf:9b:6f:3e:b0:3c:c5:70:e1:1f:bd:
0c:bf:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org