Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/UcF9EvefTybe9cwXq7B8902PDM4.roa
File: UcF9EvefTybe9cwXq7B8902PDM4.roa (raw, json)
Hash identifier: 55un2RCLpgz5543Bky+IAHFLpVhoiKS89ZrE49dZAm4=
Subject key identifier: 51:C1:7D:12:F7:9F:4F:26:DE:F5:CC:17:AB:B0:7C:F7:4D:8F:0C:CE
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 0B4FBE5C
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/UcF9EvefTybe9cwXq7B8902PDM4.roa
Signing time: Sat 01 Jan 2022 06:58:07 +0000
ROA not before: Sat 01 Jan 2022 06:58:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51964
IP address blocks: 195.151.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189775452 (0xb4fbe5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Jan 1 06:58:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51c17d12f79f4f26def5cc17abb07cf74d8f0cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:61:89:d2:ef:e6:cf:98:30:07:ab:31:0e:
69:8b:1a:1c:79:04:45:ef:9d:87:64:b5:ad:cf:a0:
93:6a:79:72:90:db:8d:2d:ff:a5:ac:f8:d3:f6:4d:
4a:cb:70:8f:93:6e:d3:eb:56:e3:c6:c3:a8:97:fb:
19:d2:56:ef:29:c8:bb:e8:7a:93:12:33:54:a3:19:
fd:0a:3d:24:47:ba:c1:23:ac:e5:2e:60:af:fb:c8:
db:cc:4f:a3:0b:da:33:f3:75:07:47:8b:37:26:55:
1b:73:19:46:05:3c:db:3b:15:b8:0a:51:35:6f:65:
77:40:cb:67:2d:1d:06:37:4f:13:4e:87:3e:c4:eb:
5c:26:ae:24:68:12:2c:49:d3:8e:2a:73:76:5c:90:
af:7b:d5:c8:b1:de:0e:a1:a6:78:84:0e:9a:45:af:
e0:43:25:86:24:46:15:e6:7a:2a:67:f7:7d:74:28:
ea:fb:c8:e8:54:4f:15:3a:dd:b8:bf:70:82:6a:d8:
6a:d9:52:8b:26:20:7e:0d:06:d2:6f:55:19:23:06:
cc:7b:43:88:91:eb:84:6f:dc:73:69:f7:a3:89:e7:
88:73:aa:1c:d6:45:da:fc:c7:6d:c3:d7:77:a3:78:
1a:24:59:22:61:27:52:28:fc:8d:48:0f:1d:54:51:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C1:7D:12:F7:9F:4F:26:DE:F5:CC:17:AB:B0:7C:F7:4D:8F:0C:CE
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/UcF9EvefTybe9cwXq7B8902PDM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.151.160.0/24
Signature Algorithm: sha256WithRSAEncryption
82:69:31:1a:01:25:b8:ea:3f:62:f6:8f:45:3c:f9:25:e9:2e:
cf:90:ca:a6:f6:ca:ed:65:a0:12:28:9a:cb:d9:45:14:18:b9:
5e:87:e0:21:eb:ad:46:48:44:52:f1:40:31:41:73:11:e1:d2:
c8:2e:7f:b7:bf:8f:76:c9:94:9d:ea:73:92:2d:7b:12:11:3a:
48:f9:e9:e0:25:41:35:f8:55:67:b2:72:90:5b:e7:de:87:ab:
53:d7:80:d7:11:df:da:60:28:77:95:c6:13:b6:7d:4b:93:88:
3b:ff:76:b3:c4:30:a1:8a:29:a1:f4:25:a1:79:50:b7:a0:e9:
b7:1a:cf:00:f5:3b:0a:d8:d0:53:55:53:67:db:d0:18:fe:ff:
21:dd:66:44:e8:81:d2:31:28:7e:c3:20:f4:2c:7b:e9:0d:06:
18:0b:85:da:32:f0:ff:fc:cd:15:23:35:e5:94:3c:65:25:ec:
e7:c8:f8:4d:51:05:d4:b2:aa:c0:4b:bb:cc:b1:dc:3d:ed:7c:
16:9f:3e:4c:9d:4c:c9:4e:e1:c8:e5:0b:a5:19:8b:d7:77:3d:
22:1b:40:69:c6:00:15:dd:4f:86:cf:56:4c:d0:55:8f:5f:51:
58:56:96:b3:63:b2:96:95:c6:ee:54:14:b8:da:71:36:1b:82:
4d:f8:90:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:51 2024 by rpki-client on console-fra.rpki-client.org