Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/UOrZNupwAt1qx8qHN0PHl6kTisw.roa
File: UOrZNupwAt1qx8qHN0PHl6kTisw.roa (raw, json)
Hash identifier: qmi8jQaIsgUhfN2+Z1sRvhxc3ertcIdD5fsS2QQ8rE4=
Subject key identifier: 50:EA:D9:36:EA:70:02:DD:6A:C7:CA:87:37:43:C7:97:A9:13:8A:CC
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 04E4E43B
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/UOrZNupwAt1qx8qHN0PHl6kTisw.roa
Signing time: Sat 01 Jan 2022 02:55:23 +0000
ROA not before: Sat 01 Jan 2022 02:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40793
IP address blocks: 144.2.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82109499 (0x4e4e43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 1 02:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50ead936ea7002dd6ac7ca873743c797a9138acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:b4:cb:b1:a9:c0:15:f0:0e:05:47:0f:84:
88:80:92:69:1c:12:66:42:ac:9e:d0:10:9f:ab:8c:
bf:06:32:8b:b2:e2:ee:dd:13:0f:c6:a3:8c:79:f4:
f9:8c:d1:3a:55:d1:31:93:fb:20:c2:eb:8f:ef:e5:
3e:9f:be:33:8a:c5:45:e4:b4:81:5f:eb:59:a9:03:
f0:c4:6c:be:d8:13:e9:81:4d:8b:24:70:c6:12:f2:
59:6c:c6:cc:44:96:fc:f9:76:ab:1b:a3:c5:4c:44:
98:66:da:2d:f4:df:c5:f7:8e:fe:97:a4:57:8b:de:
e2:16:b2:42:e0:d2:e3:19:73:11:3a:f5:49:51:91:
76:4c:ca:5f:14:ad:db:30:40:cb:c8:08:9d:0d:ec:
c1:19:70:93:75:f5:39:5a:2e:75:d0:89:c5:eb:5c:
4f:38:71:a2:10:25:69:b9:fd:82:32:26:09:75:0c:
cb:d7:da:b8:26:ec:71:ed:00:31:d5:ca:2e:6e:b0:
fd:20:1d:a3:67:d2:0b:4e:b3:36:3f:9d:ee:e9:c9:
29:fb:b0:d2:2d:e3:c3:0d:c5:a1:04:d5:aa:b9:fa:
81:08:23:28:25:cd:78:45:57:1e:41:d1:90:7b:42:
3f:cb:ec:fa:d2:b5:75:de:ab:dd:5e:b5:14:f5:f7:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:D9:36:EA:70:02:DD:6A:C7:CA:87:37:43:C7:97:A9:13:8A:CC
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/UOrZNupwAt1qx8qHN0PHl6kTisw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.19.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7a:c5:17:ea:c0:ef:c9:f4:78:e8:12:11:5e:b4:80:2e:22:
b5:44:ef:4b:e0:5d:7d:db:4d:5a:2d:a9:44:39:b0:73:db:39:
a2:21:ab:13:6a:52:bd:3a:12:7c:44:3f:53:72:b7:1a:1b:dd:
6e:ec:10:fa:81:d5:59:6a:c5:d1:9a:33:71:7d:3b:a7:5f:e0:
b8:3d:b5:36:4c:e6:b8:c3:9a:79:18:1a:49:86:c9:51:3c:44:
18:f6:2a:a7:56:49:1d:bc:b1:3c:d9:72:c8:d6:f4:63:f2:66:
17:bf:ac:60:44:fa:a6:0a:7a:71:fa:77:12:f9:f2:59:a5:3f:
4a:a4:99:5e:31:11:2c:07:1b:8c:1c:41:28:d0:a8:df:4e:0a:
6b:8b:fa:fe:1a:9d:52:ae:27:1f:f3:d6:92:e8:1f:51:9e:87:
98:2d:8c:79:80:cc:78:3e:3a:c5:70:3c:a9:49:bc:61:56:92:
bb:46:8b:58:2a:08:7a:4d:b1:b2:3d:35:d0:2b:d7:b1:aa:88:
7e:bf:80:97:ae:e2:df:22:df:87:86:a2:08:61:ed:7c:ec:f7:
24:f7:12:f2:4a:c3:f4:43:a1:b4:9f:d7:ad:c1:99:37:59:a9:
02:96:4f:ec:39:e3:66:ab:1d:a1:c6:e3:8c:6a:0d:4b:b4:bc:
d3:2d:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org