Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/U92s07ds_8zwzDwsPuT1o7fKs_8.roa
File: U92s07ds_8zwzDwsPuT1o7fKs_8.roa (raw, json)
Hash identifier: 0uy7WXXWuqqRodhXyn0b6BfnVyuTQZYYYpVIHCVhOwQ=
Subject key identifier: 53:DD:AC:D3:B7:6C:FF:CC:F0:CC:3C:2C:3E:E4:F5:A3:B7:CA:B3:FF
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018531EFA1010E67C5D345E0B32BFA6BD146
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/U92s07ds_8zwzDwsPuT1o7fKs_8.roa
Signing time: Tue 20 Dec 2022 23:47:45 +0000
ROA not before: Tue 20 Dec 2022 23:47:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 80.246.225.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:ef:a1:01:0e:67:c5:d3:45:e0:b3:2b:fa:6b:d1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Dec 20 23:47:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53ddacd3b76cffccf0cc3c2c3ee4f5a3b7cab3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:89:a1:21:7c:f9:26:26:09:32:5b:7d:fa:
e1:e4:db:64:8e:47:36:a1:e1:91:bc:00:6b:67:8a:
5e:7e:ce:2e:ed:47:10:65:56:ef:dd:ce:8f:e3:97:
dc:b3:f4:f8:b4:52:fb:e0:3a:dc:2d:b2:07:fe:ed:
f7:15:ed:86:c8:c9:98:ce:b8:e1:13:63:44:ec:65:
b1:12:a1:19:74:fc:cc:2a:d3:e2:ea:cd:e1:a7:b7:
34:4b:a6:fd:02:fc:06:93:e3:25:8e:0f:79:63:43:
e7:d4:27:db:27:7f:42:95:cc:38:f3:92:c5:61:3c:
e0:c1:ac:32:9d:61:50:bb:8d:77:e6:9c:42:19:17:
13:28:4a:a4:62:e4:89:aa:28:15:b0:84:26:0e:b5:
e8:d1:57:ab:02:b3:5b:03:af:3d:de:88:03:c1:fe:
77:fb:f2:c8:04:98:54:a5:a4:b7:99:ec:15:46:99:
34:b4:5d:45:24:ce:80:bd:e0:73:79:71:5f:b2:53:
cc:09:5f:00:c3:d4:b9:43:ae:0d:b1:5b:81:9b:6c:
2a:67:5c:13:7e:e4:8a:36:54:cf:f3:ea:78:8f:7e:
0b:1b:10:8d:1f:5b:52:3e:75:a0:a9:b6:fe:52:e7:
0b:f6:54:f8:02:cf:21:58:04:93:b5:ce:ee:aa:0e:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DD:AC:D3:B7:6C:FF:CC:F0:CC:3C:2C:3E:E4:F5:A3:B7:CA:B3:FF
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/U92s07ds_8zwzDwsPuT1o7fKs_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.225.0/24
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dc:1d:8f:a6:ef:4c:de:46:0d:da:b5:9e:84:eb:b7:d3:81:
9c:dc:3b:82:84:bb:89:61:44:b0:60:76:00:eb:94:e9:c2:82:
b7:d8:d4:14:4f:14:ad:f0:92:13:2a:70:d6:31:76:63:94:ab:
a1:c2:41:24:10:24:4e:d1:dd:84:a0:39:bc:32:38:1d:54:5b:
2d:8f:8d:00:b7:3b:cd:cf:52:55:87:5a:ae:67:b9:25:8b:ac:
b6:e0:8e:ca:bf:bf:68:e5:fd:a5:71:fe:92:c6:f6:f0:3c:2b:
57:29:d8:a9:8b:63:d3:09:ad:2a:04:cc:cb:7f:3d:cd:24:5c:
12:25:e4:86:de:97:3c:f0:60:f9:2c:41:b1:f6:b9:6e:b2:4e:
d2:c2:c1:b1:7d:c3:5a:04:aa:d3:e4:ee:b6:6a:49:a1:db:e3:
ad:7a:38:66:e9:1e:9d:17:68:11:f4:78:97:9a:f9:a2:07:b0:
64:0a:d5:8f:51:d0:da:69:38:f9:e2:28:be:64:8f:79:e9:99:
cf:f0:b1:d7:d8:86:82:cb:b8:75:c3:8c:19:db:02:30:c9:a3:
cd:d9:1b:8a:24:f6:ff:e2:83:27:17:8a:fd:4b:5f:9f:57:91:
07:38:c4:6d:a0:8d:0c:61:00:cb:0a:8a:65:ed:ca:76:6d:2c:
c9:e4:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org