Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/UjuNu8iQbGwUXuxxMs7e77B7urg.roa
File: UjuNu8iQbGwUXuxxMs7e77B7urg.roa (raw, json)
Hash identifier: eF/cWrsOrvkwsM6TIaJb9nu4ds+IS7PbDa/vtSVaNhI=
Subject key identifier: 52:3B:8D:BB:C8:90:6C:6C:14:5E:EC:71:32:CE:DE:EF:B0:7B:BA:B8
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 02DC919D
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/UjuNu8iQbGwUXuxxMs7e77B7urg.roa
Signing time: Sat 01 Jan 2022 06:06:20 +0000
ROA not before: Sat 01 Jan 2022 06:06:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24577
IP address blocks: 176.120.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48009629 (0x2dc919d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Jan 1 06:06:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=523b8dbbc8906c6c145eec7132cedeefb07bbab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:7a:7f:e8:01:61:c5:50:09:54:57:cf:87:
09:d5:bf:7e:09:4b:b8:2f:85:54:6c:02:ca:9f:ab:
62:1b:01:55:95:50:c0:95:c5:b3:c9:19:c0:c4:e0:
fb:ea:c6:80:28:77:e1:b0:66:5b:a8:cb:ed:39:0c:
20:c3:40:98:2c:e9:09:b2:46:ae:6a:63:f9:28:c1:
30:e2:6c:81:22:00:e5:94:58:f1:d2:45:45:21:b6:
54:44:00:9c:8c:e7:5d:9c:bd:64:e7:26:63:94:7c:
4e:8e:48:40:67:8e:73:cb:b2:4a:97:7d:ec:45:de:
44:aa:d1:e5:af:d2:4f:6e:67:c0:d0:88:b6:82:d5:
22:9e:dd:e4:48:ae:4e:bd:eb:59:9c:f7:dc:a8:23:
1f:b1:d7:45:25:af:73:40:37:06:40:32:95:46:2e:
02:15:68:07:55:45:89:d4:10:05:b3:b8:83:42:26:
95:07:c7:99:73:a4:d5:41:08:99:19:22:f7:1f:3b:
be:84:ef:02:5e:4f:c8:4b:2e:29:ff:70:38:87:91:
3c:90:f4:cb:23:4c:f4:7a:43:db:b5:07:cc:da:56:
5f:ce:52:f5:f0:3d:92:32:f2:1d:c2:f3:e0:c5:1a:
39:44:fb:f1:17:1e:40:1a:29:77:a7:54:e0:0e:5a:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:8D:BB:C8:90:6C:6C:14:5E:EC:71:32:CE:DE:EF:B0:7B:BA:B8
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/UjuNu8iQbGwUXuxxMs7e77B7urg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.120.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:8e:0e:cc:d6:d4:19:cc:5b:e1:ab:60:6c:be:51:3a:77:78:
2b:dd:a3:ae:3d:52:24:60:81:3f:f7:1a:69:41:24:42:5e:d1:
b9:02:77:37:62:1d:32:13:28:93:7e:2d:4c:ef:0b:f0:97:aa:
86:25:4f:63:00:bc:47:2e:86:b1:1e:fe:ca:77:b1:4c:f4:36:
a1:9d:08:9e:2d:94:28:5c:e5:2e:9f:39:80:da:25:a9:cc:da:
d0:a6:3c:f4:ac:60:ba:9a:37:85:e3:90:15:76:38:77:96:9e:
97:23:a8:47:4c:63:00:df:4b:d5:a2:a4:a0:f0:7e:ce:8d:c5:
1a:46:da:89:22:c9:74:4a:b1:69:c7:1c:ff:da:ff:1a:c4:b5:
ea:ba:91:50:9c:c9:a6:3b:75:e9:46:1a:3c:a2:7a:0a:0a:38:
e8:7e:96:08:98:d3:b0:19:c9:0a:06:d5:48:7a:e7:b4:52:7b:
2b:98:b3:09:2c:84:a8:1b:bd:a0:ec:7f:2d:4e:fa:57:2e:c7:
bf:43:7b:a4:2c:74:6c:e4:ca:12:6d:da:8c:dd:bf:06:a8:d5:
0b:82:c2:af:c8:d2:57:83:ac:ea:b7:86:f3:61:34:57:ee:b9:
7c:84:8c:9b:bb:de:d5:4e:1b:6f:99:e4:14:7b:bd:0e:56:7c:
9a:65:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:27 2024 by rpki-client on console-ams.rpki-client.org