Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/UJTzRqk9LJ881l5KBkCvJItGuW4.roa
File: UJTzRqk9LJ881l5KBkCvJItGuW4.roa (raw, json)
Hash identifier: 6vycMPJohipA4s3uHTU9UV5cZtQHqcC5YA8AuR+79Og=
Subject key identifier: 50:94:F3:46:A9:3D:2C:9F:3C:D6:5E:4A:06:40:AF:24:8B:46:B9:6E
Certificate issuer: /CN=d617ad35ef270efb14271357f3a675e87566bf3a
Certificate serial: 0D1CF00B
Authority key identifier: D6:17:AD:35:EF:27:0E:FB:14:27:13:57:F3:A6:75:E8:75:66:BF:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hetNe8nDvsUJxNX86Z16HVmvzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/UJTzRqk9LJ881l5KBkCvJItGuW4.roa
Signing time: Sat 01 Jan 2022 04:51:18 +0000
ROA not before: Sat 01 Jan 2022 04:51:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47132
IP address blocks: 185.227.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220000267 (0xd1cf00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d617ad35ef270efb14271357f3a675e87566bf3a
Validity
Not Before: Jan 1 04:51:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5094f346a93d2c9f3cd65e4a0640af248b46b96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:0b:48:7a:96:75:24:72:ca:b4:1b:87:f8:
f3:75:ed:02:be:ab:48:a1:50:12:e4:3d:25:0f:8d:
ea:fc:26:51:00:b7:7a:d5:0f:d7:00:e1:32:8d:13:
88:18:45:52:98:5c:2e:a4:9c:f9:91:50:e1:24:f2:
ac:63:f6:7c:80:e6:65:45:d4:e5:8b:db:90:94:8b:
62:d6:92:79:8a:3d:67:73:4b:fe:dc:83:53:a8:e4:
e6:c9:ae:15:0f:52:ac:52:19:0a:a9:b9:2e:0c:14:
f5:ae:98:e6:1a:2d:d1:6b:65:42:39:31:4b:61:27:
e0:f9:01:7f:48:b6:d4:c2:cd:94:ba:28:83:c0:92:
68:ff:63:7f:28:de:02:1b:9c:bc:29:43:69:bf:de:
3e:78:e8:e5:e4:32:28:dd:4f:31:3d:1d:e9:75:ee:
07:b7:c5:e7:61:aa:5e:91:2c:2f:e9:b3:77:2d:98:
ce:75:50:fe:2c:7b:fb:21:c8:3c:45:fc:37:c5:87:
fa:7e:2b:bd:2d:11:a3:fa:4e:a1:68:ec:04:b5:2b:
af:72:ce:71:3b:d3:99:1f:43:f6:50:26:d8:dd:5e:
83:a3:7d:87:85:2f:70:48:15:fa:ca:ab:2e:a2:39:
b7:97:21:9e:c5:90:69:d2:3a:d1:2b:d5:0e:69:ee:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:94:F3:46:A9:3D:2C:9F:3C:D6:5E:4A:06:40:AF:24:8B:46:B9:6E
X509v3 Authority Key Identifier:
keyid:D6:17:AD:35:EF:27:0E:FB:14:27:13:57:F3:A6:75:E8:75:66:BF:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hetNe8nDvsUJxNX86Z16HVmvzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/UJTzRqk9LJ881l5KBkCvJItGuW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/1hetNe8nDvsUJxNX86Z16HVmvzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:16:dc:f2:78:db:06:d8:b0:41:e9:ab:8b:0b:1c:82:8b:0e:
65:9a:f0:90:18:fa:a3:c9:f2:cc:c9:f6:4d:32:e2:05:7b:c5:
3f:c9:32:f6:f4:39:55:1d:54:44:99:5e:4d:69:96:4e:e7:4b:
d2:b1:88:e3:55:45:c4:8a:44:d9:59:6f:79:b4:97:82:fb:6b:
10:36:0b:e6:fd:5a:41:b9:5e:88:32:6f:92:bc:e4:89:55:d6:
7c:1b:06:76:08:1e:f2:64:fe:76:a1:38:71:fa:e9:8d:ca:b8:
b3:d4:78:e2:de:e3:29:a3:9b:bd:78:b0:67:f8:31:aa:37:b9:
04:3c:0a:46:b1:6e:85:d2:8f:26:18:06:2f:62:d1:3d:81:da:
53:6a:92:0e:82:25:f6:9e:c3:9c:35:76:4d:d5:8f:35:5b:ac:
57:f8:9c:72:cb:ba:e0:6c:83:c2:ec:f5:a7:b4:f0:f8:b0:1e:
6b:57:e7:59:0a:f0:28:96:a7:ed:73:f6:cd:49:00:e0:7e:9f:
59:80:7c:f0:ac:38:9a:ed:9e:00:82:06:72:9b:14:b9:17:a0:
f9:ff:ac:ea:6a:7b:14:dd:43:a6:cf:5a:5f:d1:79:70:99:7a:
1b:f0:20:df:ed:99:cc:9e:e8:ed:37:7b:db:54:25:ee:99:ea:
f1:8d:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:31 2023 by rpki-client on console-ams.rpki-client.org