Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/UrJDy1PkmX66bL5HECuyeokSeTA.roa
File: UrJDy1PkmX66bL5HECuyeokSeTA.roa (raw, json)
Hash identifier: pUpDdawyi0EPDu+NUGZL21HPMSflAGWWWKh0w8fRowo=
Subject key identifier: 52:B2:43:CB:53:E4:99:7E:BA:6C:BE:47:10:2B:B2:7A:89:12:79:30
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0AC378C7
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/UrJDy1PkmX66bL5HECuyeokSeTA.roa
Signing time: Sat 01 Jan 2022 15:06:22 +0000
ROA not before: Sat 01 Jan 2022 15:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20546
IP address blocks: 213.221.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180582599 (0xac378c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Jan 1 15:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b243cb53e4997eba6cbe47102bb27a89127930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:50:f0:93:3e:fb:0c:aa:7a:e3:e9:60:bd:
f9:b9:92:87:cc:a3:4d:85:a6:8f:22:55:2c:da:28:
86:ce:29:29:0e:f3:95:ab:dd:81:27:c2:59:aa:c9:
21:6f:cc:57:8c:8a:45:72:26:cc:1f:b7:12:a1:fa:
3f:7c:69:48:ff:da:16:9e:39:2c:90:7b:0b:ea:3c:
2e:49:1e:49:f8:01:ad:7a:42:76:99:af:46:5c:ff:
c5:79:9c:9a:3d:33:bc:2d:bd:e7:25:2b:a7:e9:0b:
aa:36:6d:22:3c:9d:9c:0e:d4:ff:27:8a:32:14:d5:
3a:64:30:67:17:5a:e9:0c:ad:c5:3b:24:75:e9:32:
51:3c:6e:47:e2:fb:af:55:80:91:fe:21:92:b8:cf:
90:b3:44:20:df:8e:92:d0:ee:07:2e:a2:5c:d6:4d:
45:57:75:d8:ff:a4:c2:cb:f3:f8:dc:6d:bd:d6:c5:
af:78:0b:09:e7:d4:e2:5a:aa:67:8e:e3:ce:ea:ca:
a5:ec:52:d9:f3:13:d2:d1:53:c8:79:36:b0:42:6d:
c5:3b:6f:ee:90:34:fb:9a:00:c4:48:a0:1d:35:21:
84:04:5f:3d:c2:d8:d1:8a:44:18:e9:44:71:7c:28:
e1:a6:00:ee:64:54:bc:7a:25:01:0e:4c:cf:7a:ab:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:43:CB:53:E4:99:7E:BA:6C:BE:47:10:2B:B2:7A:89:12:79:30
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/UrJDy1PkmX66bL5HECuyeokSeTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.221.128.0/19
Signature Algorithm: sha256WithRSAEncryption
82:95:83:8d:08:a3:fa:4a:ae:ca:a2:27:51:eb:a0:a8:2b:82:
68:c1:1d:d6:e0:0a:d1:e3:89:24:95:b5:64:7d:46:69:a3:92:
39:9b:6a:12:f1:34:72:7f:c3:d0:3b:8a:51:b4:f9:4c:c9:ff:
01:d0:0a:c1:b4:c3:71:a7:4b:f3:ef:6f:2f:d6:f8:ba:f5:07:
99:42:8c:85:18:0c:7a:a8:46:45:f1:79:86:87:6d:83:56:ab:
59:8d:3a:24:14:8e:5d:f7:34:df:5c:41:b5:5d:8f:1f:a5:05:
18:01:75:e1:cb:9d:0a:6f:87:0d:7a:97:2f:d5:54:41:f8:5c:
16:c1:e4:36:e0:1d:ed:9b:94:41:6b:20:a7:f9:a3:11:ae:9f:
35:7c:29:f2:35:73:ba:c5:ee:dc:ad:a1:c7:9d:d3:22:9b:82:
f2:1f:c2:97:45:c1:40:de:f1:1a:74:3b:18:71:fa:f2:ee:e6:
03:87:54:4b:d3:81:4e:e5:ac:cc:74:f4:9a:57:fb:cb:6f:ab:
84:7d:fc:41:a0:01:66:3e:ca:eb:dd:6b:6d:15:cc:d4:ce:9b:
53:32:5d:79:bc:97:dc:9e:24:82:03:f8:b1:52:d2:63:5a:4d:
0e:53:20:8c:d4:af:1c:32:98:84:4a:28:a0:f4:5f:3d:40:65:
b1:67:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:09 2024 by rpki-client on console-ams.rpki-client.org