Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/U-wnE2Onazfpc6gnkgRqwYKN1VQ.roa
File: U-wnE2Onazfpc6gnkgRqwYKN1VQ.roa (raw, json)
Hash identifier: FWlh2TJLUh5BCp2ct/iQ5hpFF/p9xZG/1Ak8K0vqMEI=
Subject key identifier: 53:EC:27:13:63:A7:6B:37:E9:73:A8:27:92:04:6A:C1:82:8D:D5:54
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 133665B3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/U-wnE2Onazfpc6gnkgRqwYKN1VQ.roa
Signing time: Sat 01 Jan 2022 04:03:04 +0000
ROA not before: Sat 01 Jan 2022 04:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140570
IP address blocks: 82.115.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322332083 (0x133665b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53ec271363a76b37e973a82792046ac1828dd554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:51:48:f9:fc:0e:a8:58:9a:16:86:f0:82:
48:28:e6:0a:49:ec:58:b6:77:c8:39:1f:7e:61:d4:
ed:de:e5:a0:ff:ab:c7:de:a9:3d:26:3d:cb:2c:43:
81:83:ef:24:95:1d:37:1e:b2:8f:25:2e:ed:70:43:
95:af:96:3e:70:e3:8a:57:54:6e:4a:ac:05:5b:87:
24:43:e1:e6:af:a0:c7:f1:bb:f6:5f:7a:c9:94:ad:
73:65:f0:e5:61:dd:88:15:ab:15:c4:78:d3:43:6d:
5a:6f:d3:6f:6a:fe:84:18:10:50:f4:e1:f2:75:42:
f6:23:4e:3f:f0:9e:b3:ab:2c:c9:fa:f8:39:c3:ca:
d4:70:fa:2c:ff:e1:0d:4b:f7:ae:56:a0:df:17:d0:
38:d6:d4:6a:cf:b7:37:02:5b:ef:7c:1b:4c:f2:e4:
4a:0b:4b:60:80:ea:ed:e4:93:20:b8:98:b1:55:e2:
d7:e9:8c:d8:99:fe:25:ea:c2:16:8c:8a:f5:76:36:
fd:4e:2c:fa:59:cb:54:f9:85:83:06:17:5e:c7:01:
d3:96:fc:3b:ce:7f:4a:de:07:8f:32:2d:a8:6e:80:
38:04:42:93:92:c8:31:2a:6f:e5:e3:16:4e:2d:7f:
bc:e9:ad:ca:5b:38:c2:dd:78:32:71:09:f5:7f:7e:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EC:27:13:63:A7:6B:37:E9:73:A8:27:92:04:6A:C1:82:8D:D5:54
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/U-wnE2Onazfpc6gnkgRqwYKN1VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.17.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ef:c2:82:6b:68:be:f3:73:92:33:de:c7:d1:88:85:98:7c:
c9:ad:b1:99:88:3a:d0:02:0b:44:bf:a5:39:9b:d3:38:3a:bb:
a0:94:87:3d:f6:62:63:42:08:2c:25:d1:25:2f:d1:c1:1b:7d:
3f:18:41:c9:47:df:46:2b:db:73:6a:27:45:c5:86:08:0f:fa:
7e:85:a6:2a:4a:5c:f7:fc:aa:86:90:8a:6c:fe:1d:af:ef:19:
ae:ad:b5:89:5a:96:e1:1a:1b:1b:20:76:82:e8:7c:eb:40:38:
b5:cf:ab:69:d6:d1:db:a5:f3:9b:b1:b2:c6:cf:b3:dd:ed:50:
53:87:6b:0f:71:3c:df:9a:63:03:6a:70:96:0a:c3:ed:ff:b4:
4a:3e:2f:c5:97:92:36:38:7d:50:e7:22:35:36:56:ac:77:9d:
ff:8a:59:52:6e:f3:f4:86:d8:9c:eb:22:d2:f7:56:d6:4c:87:
2b:d5:d1:43:4d:06:80:c7:49:0b:c5:d0:8c:27:fb:3a:83:1d:
23:1f:cd:d0:d3:bc:6d:ac:bf:07:c9:42:d9:dd:21:d5:70:91:
ba:91:68:f5:a6:12:bb:eb:93:36:6f:5e:02:8d:3f:68:4a:d2:
f7:59:20:f3:92:2b:55:a6:82:36:41:4f:7c:e0:08:63:c2:95:
86:d1:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org