Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/UfpRMcFiVh2H6Eh6-LTqTtMxzpQ.roa
File: UfpRMcFiVh2H6Eh6-LTqTtMxzpQ.roa (raw, json)
Hash identifier: dmFUXqNpHbq13JtWu1wzlwgBo6Jf65Yebu+O27NQ4Zo=
Subject key identifier: 51:FA:51:31:C1:62:56:1D:87:E8:48:7A:F8:B4:EA:4E:D3:31:CE:94
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01853B4C0154FF67F984AC9A15B2D548E2A3
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/UfpRMcFiVh2H6Eh6-LTqTtMxzpQ.roa
Signing time: Thu 22 Dec 2022 19:25:14 +0000
ROA not before: Thu 22 Dec 2022 19:25:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 121.127.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3b:4c:01:54:ff:67:f9:84:ac:9a:15:b2:d5:48:e2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Dec 22 19:25:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51fa5131c162561d87e8487af8b4ea4ed331ce94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:44:bd:f3:d0:f3:e9:53:e4:c6:9d:40:36:
7d:1f:d9:73:b2:43:0d:e0:4c:c9:6d:45:da:bf:08:
e4:e7:78:a8:6a:67:10:11:2c:b9:af:83:3c:d9:17:
05:f7:43:25:1d:a4:43:31:a5:cc:8e:c2:ca:78:b1:
d5:f2:d8:a9:89:66:e5:19:a8:38:08:25:3f:18:6c:
ff:5b:c9:2c:a9:76:2a:d8:db:c6:aa:80:e2:a9:10:
52:8c:ba:be:97:46:4e:f7:47:b7:12:a3:7d:51:fe:
75:9f:ce:50:b0:80:9a:3e:4e:e7:07:36:fc:a4:99:
db:9a:70:05:08:56:e1:a2:ec:9a:a1:c6:29:2b:04:
28:a2:3a:32:e5:b5:5a:df:ae:fb:49:a4:9e:cc:a6:
16:2e:9f:73:a7:75:ea:23:51:83:1c:03:85:61:12:
d3:60:57:47:c8:75:33:ce:3d:8e:2d:57:0c:5f:c3:
62:b6:0e:24:30:97:9a:7d:5e:dd:41:55:3c:90:c9:
83:59:2d:1f:c5:04:ce:41:28:58:02:9e:fb:77:b1:
aa:bf:9f:34:45:e0:55:67:26:13:72:1e:54:6b:c0:
7b:15:4e:9b:8e:d0:e6:26:82:18:10:7a:b9:2c:ff:
7a:6a:cb:f1:63:84:1d:85:9d:ed:c9:6b:24:48:80:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FA:51:31:C1:62:56:1D:87:E8:48:7A:F8:B4:EA:4E:D3:31:CE:94
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/UfpRMcFiVh2H6Eh6-LTqTtMxzpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.127.56.0/21
Signature Algorithm: sha256WithRSAEncryption
42:c0:c0:2a:e9:c2:db:10:e1:84:fd:9a:9c:bf:87:28:77:04:
72:c3:9f:fe:cb:bf:c4:b0:27:e7:7e:31:1a:e8:83:99:1d:90:
55:5f:42:02:38:09:b9:32:f2:14:c3:2a:15:03:a8:57:71:e0:
60:e0:d0:88:3d:83:d6:44:96:ff:f8:7c:07:73:03:fc:98:f5:
28:43:fb:6b:24:7e:a5:fb:83:57:d2:33:16:bf:e1:47:d9:42:
99:a6:e5:70:e8:3c:c4:b3:b3:56:b4:8d:e6:79:bb:d2:9b:e5:
17:f5:cf:b5:b4:e1:36:9c:f2:6c:07:d2:a1:b7:bc:56:ca:e9:
38:0b:b7:b1:9d:96:f6:1a:54:05:40:92:ad:af:fe:80:a1:f1:
13:8f:35:1e:a1:ce:a5:22:1c:08:40:cd:40:02:8a:3a:06:67:
7b:34:13:4e:da:fb:b5:a9:76:c4:09:1d:43:01:af:35:53:f0:
d4:2c:ae:bb:7f:92:f5:2a:12:7f:62:d2:a8:3c:06:2a:ff:55:
ff:fc:04:71:d0:53:ea:de:58:be:8d:ed:8d:7c:41:97:22:cb:
dc:73:71:ec:1f:88:cf:12:da:5f:37:9d:25:98:7e:97:47:50:
1f:17:e2:c1:0d:58:a8:c4:45:a1:6e:20:02:57:69:99:a5:26:
5d:fe:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:47 2023 by rpki-client on console-fra.rpki-client.org