Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/UaAbagyjUK0pXorP_y199WHQo3o.roa
File: UaAbagyjUK0pXorP_y199WHQo3o.roa (raw, json)
Hash identifier: vU1neS6OCimvdet0FsV5+O4fI8E22FZQEpm3dLr1YOA=
Subject key identifier: 51:A0:1B:6A:0C:A3:50:AD:29:5E:8A:CF:FF:2D:7D:F5:61:D0:A3:7A
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 05FB529C
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/UaAbagyjUK0pXorP_y199WHQo3o.roa
Signing time: Sat 01 Jan 2022 02:56:42 +0000
ROA not before: Sat 01 Jan 2022 02:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2200
IP address blocks: 192.44.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100356764 (0x5fb529c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Jan 1 02:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51a01b6a0ca350ad295e8acfff2d7df561d0a37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:88:c7:a3:78:7f:97:08:c6:f6:8b:1a:30:
64:63:be:32:16:5b:28:76:20:16:89:81:4f:32:52:
55:80:5d:f5:ed:6a:72:bb:ba:fc:3c:3e:d7:a7:0e:
84:99:9a:25:ac:20:ea:1b:b1:3a:71:b4:53:84:f8:
f1:cf:bc:2a:ff:55:ee:3f:64:5d:db:cd:12:d9:56:
7d:fe:fa:f6:18:eb:e3:9a:39:e8:d2:d9:93:b5:f8:
d1:a9:87:37:35:fb:70:5c:cf:3e:47:92:21:35:27:
4b:41:20:80:be:88:91:2e:00:c1:30:72:6c:16:15:
f4:33:2b:53:db:67:22:b3:20:33:64:6c:c5:d3:fb:
ee:5e:f9:63:2e:e8:7b:37:a6:58:c0:e6:36:eb:65:
4e:50:2e:ad:5a:e8:7b:42:88:28:68:e1:f7:a4:b6:
0f:b8:b4:bd:4e:53:a3:67:34:d8:0f:54:f2:d9:26:
45:7b:3b:9a:ad:6f:87:09:3d:aa:40:e8:48:df:cf:
49:f9:97:99:64:aa:0e:c1:c7:d9:13:cf:b2:38:5f:
67:29:37:85:2f:c4:8c:0a:66:31:bc:8f:57:dd:f0:
3f:f3:c4:9c:68:5b:d0:95:fd:15:f3:da:6e:f6:00:
5a:7b:02:e4:ff:7f:56:de:09:9f:02:cb:ca:fc:08:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A0:1B:6A:0C:A3:50:AD:29:5E:8A:CF:FF:2D:7D:F5:61:D0:A3:7A
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/UaAbagyjUK0pXorP_y199WHQo3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.76.0/24
Signature Algorithm: sha256WithRSAEncryption
98:25:c6:fe:74:26:c0:06:ff:0b:08:f1:ab:a5:4f:a5:a9:35:
2d:51:82:c7:7f:a5:5e:1a:2c:34:12:1d:fd:f7:dd:c9:9b:84:
d4:0a:0c:09:cd:6d:4d:b7:f4:e2:98:fe:52:cf:d9:ee:90:28:
ea:80:e8:2a:2e:28:27:59:a6:d9:e4:3e:75:b4:99:5b:b7:4f:
f3:ac:eb:4c:8e:fd:98:5b:eb:d3:fc:72:4b:eb:f6:e7:e1:27:
4e:bc:76:75:64:f0:86:b0:52:56:de:80:78:07:3c:7f:9c:f4:
6a:86:c7:1c:fb:dd:e1:db:80:54:12:26:0c:16:c0:4c:1d:91:
e3:46:7f:02:dd:f8:59:a3:11:36:52:04:f4:2b:32:6e:94:88:
b0:b6:ef:48:9b:50:fc:7f:72:6e:3c:b0:cc:89:c9:0e:8a:40:
7d:10:f0:64:c1:7e:6d:aa:a5:9e:96:cd:df:bc:fc:c9:4a:36:
97:89:e2:26:86:95:47:2b:ce:47:13:e6:e1:8d:66:d4:87:bd:
a6:cc:94:43:7b:18:a4:c2:3f:3a:0e:81:5e:9d:20:50:db:32:
13:a6:10:e5:bd:cf:b6:b6:07:c2:c8:45:94:af:55:76:5b:b4:
31:f2:37:b1:1e:7c:e0:87:5c:9e:82:7c:40:18:6f:a1:e4:d6:
ce:47:c4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:19 2024 by rpki-client on console-fra.rpki-client.org