Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Uld8E24OYth6uu2i5lEi7Qeb7dI.roa
File: Uld8E24OYth6uu2i5lEi7Qeb7dI.roa (raw, json)
Hash identifier: NJPUKHqEhJbW5WrBdluIlXo7GVHJTPaJgu6wVyPNn+E=
Subject key identifier: 52:57:7C:13:6E:0E:62:D8:7A:BA:ED:A2:E6:51:22:ED:07:9B:ED:D2
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 175D2878
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Uld8E24OYth6uu2i5lEi7Qeb7dI.roa
Signing time: Sat 01 Jan 2022 04:56:22 +0000
ROA not before: Sat 01 Jan 2022 04:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201426
IP address blocks: 195.184.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391981176 (0x175d2878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 1 04:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52577c136e0e62d87abaeda2e65122ed079bedd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:44:10:45:d6:1f:c7:64:49:bc:45:9f:aa:2c:
f2:15:1a:c6:a8:c6:a2:14:9e:20:cd:c3:0b:70:d8:
e6:ab:c5:68:49:b9:4f:8f:69:1b:d6:42:4d:43:4c:
9f:c6:3a:ca:07:38:15:d9:c1:06:3b:65:4e:65:51:
09:71:fb:d7:21:99:08:32:73:76:8e:1b:62:18:9a:
25:64:9e:94:81:a5:bd:48:7f:cd:87:98:5a:a0:d4:
fb:d1:7c:bc:1b:9c:f5:ce:4f:9c:2e:bc:10:98:ae:
bb:6e:a5:bb:e2:5d:5d:ea:4d:a9:53:1a:65:72:dd:
45:1b:70:99:0a:11:f9:e4:93:f4:57:87:77:dc:33:
f9:83:97:0f:89:ac:c5:1c:2f:63:98:a8:1e:aa:9a:
88:65:09:19:c2:f9:94:51:7e:f7:75:dc:24:e0:6d:
01:f2:0d:09:c0:59:8d:50:4d:f1:5f:58:87:0d:b9:
29:e1:30:cf:e3:77:f2:3d:1d:0b:3d:62:f9:02:de:
19:fa:55:62:8c:65:91:75:cb:91:c0:4d:27:e4:63:
d7:d8:f3:32:61:5b:d9:74:38:28:bb:5d:0a:00:ef:
a8:c9:47:e4:f0:f3:46:7c:5e:6f:5b:ba:b7:72:73:
2a:ca:37:7f:9f:95:57:7b:9e:85:41:9c:da:87:bb:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:57:7C:13:6E:0E:62:D8:7A:BA:ED:A2:E6:51:22:ED:07:9B:ED:D2
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/Uld8E24OYth6uu2i5lEi7Qeb7dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.73.0/24
Signature Algorithm: sha256WithRSAEncryption
37:24:91:4a:00:d6:b0:3d:2e:62:2f:9c:57:38:8a:ac:8d:7c:
c1:1e:39:5e:28:13:46:04:72:55:27:d5:83:da:a6:36:de:bc:
b4:27:ca:2a:b5:92:8e:f5:a7:2b:49:2f:89:10:5a:bb:7b:98:
3d:10:7d:ce:3c:a3:59:d9:88:ca:c9:03:01:2e:55:70:e1:58:
24:dd:f5:c0:b1:7c:88:34:d0:23:c6:ea:7a:5f:28:2d:c8:9e:
a6:88:90:82:90:7d:d3:73:11:08:52:76:99:d7:7a:09:91:da:
52:50:84:57:2f:5f:4b:05:78:51:4d:21:16:ee:6c:90:4c:1d:
57:14:46:52:57:b7:51:73:79:cc:5b:b9:a3:c3:06:74:fa:ce:
f4:d9:96:2a:7f:57:86:6f:ed:29:cf:83:9f:c2:fe:e2:25:8c:
6a:4d:a9:31:93:3a:c2:fa:ae:3f:9e:6f:cc:13:a6:8c:3d:47:
de:f8:56:3e:ea:fa:4f:94:24:37:e9:9c:a1:c1:90:59:ac:a0:
ee:1b:eb:68:54:a8:11:34:0a:d7:99:55:e5:6e:de:8a:0c:50:
9e:59:1e:21:19:ec:71:6b:56:b3:87:b4:af:a2:31:e9:00:d6:
f0:61:6e:93:18:a6:59:55:0a:70:b9:85:ff:28:c9:8c:7b:c1:
cc:23:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org