Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/uosiDMtHUJa6ebAvfPHsnQUoxgM.roa
File: uosiDMtHUJa6ebAvfPHsnQUoxgM.roa (raw, json)
Hash identifier: n5GMBKeiURwAmjso7zsCfY9vn/bUNKpsAnKRDFmFjs4=
Subject key identifier: BA:8B:22:0C:CB:47:50:96:BA:79:B0:2F:7C:F1:EC:9D:05:28:C6:03
Certificate issuer: /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial: E753
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/uosiDMtHUJa6ebAvfPHsnQUoxgM.roa
Signing time: Tue 26 Apr 2022 06:45:38 +0000
ROA not before: Tue 26 Apr 2022 06:45:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50604
IP address blocks: 109.197.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59219 (0xe753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
Validity
Not Before: Apr 26 06:45:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba8b220ccb475096ba79b02f7cf1ec9d0528c603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:a8:07:6d:33:24:e3:e8:10:e3:b5:93:e4:
10:19:03:b5:5e:51:86:ef:01:2d:2d:ba:3f:50:69:
19:f8:c4:3a:ab:fd:e0:13:9d:9e:3c:8f:cb:80:16:
6e:c4:21:90:35:df:37:27:a4:ec:19:59:9d:52:f3:
6c:ef:a2:48:09:ec:34:77:71:d2:c4:12:cb:c4:6f:
cf:4e:06:b7:8e:bc:59:14:61:eb:a1:34:e8:2f:ff:
52:6e:6c:d6:09:38:32:fe:10:ec:04:0e:de:66:a9:
f8:12:ce:4a:31:de:45:84:2d:b1:6a:2a:d3:b5:fb:
63:62:24:dc:fe:2b:96:1a:b8:75:3a:51:39:54:e5:
32:47:2f:db:8c:ec:66:9e:09:75:b5:81:c0:d2:17:
2e:b9:d0:e4:ae:b4:f4:5d:5c:18:32:ec:36:14:5e:
e9:63:79:a8:28:c3:8b:b3:03:d8:fa:db:ae:ee:55:
2e:9e:64:07:0d:62:5a:ae:42:52:e7:86:8d:ba:89:
ca:5e:5b:a0:60:27:57:b5:c8:9e:85:6f:f2:1e:3f:
21:0a:86:ac:56:52:17:a3:11:32:dc:7f:2a:9a:93:
c6:a6:4e:51:5a:c3:01:fd:ea:64:a8:61:50:61:63:
a8:3e:9e:86:66:23:03:51:a8:4a:a4:94:08:6e:4b:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8B:22:0C:CB:47:50:96:BA:79:B0:2F:7C:F1:EC:9D:05:28:C6:03
X509v3 Authority Key Identifier:
keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/uosiDMtHUJa6ebAvfPHsnQUoxgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.80.0/21
Signature Algorithm: sha256WithRSAEncryption
61:de:5f:4b:fd:aa:3a:d9:c4:b3:aa:c1:e3:2a:10:b9:c9:f2:
c3:63:e8:b4:da:ac:dd:33:87:14:52:a5:98:a9:e5:7a:8b:c1:
9d:ed:6a:a5:54:ad:9c:db:de:ea:5a:32:d1:67:50:c2:05:2e:
91:3c:66:9c:68:ed:27:2b:28:19:7a:b0:e6:76:98:a6:bb:c0:
df:d8:9f:15:70:a6:2d:1a:cd:19:3d:9e:7c:1c:05:5d:41:ec:
8a:e3:ac:ed:d5:f2:e7:a7:b9:e9:7f:02:ae:e1:ee:73:22:b2:
07:a7:34:7a:e5:0f:31:a4:a4:47:09:80:f8:a9:a2:33:62:b8:
88:55:ed:96:a6:90:67:fa:34:16:86:06:47:53:36:81:89:98:
a7:7d:b1:19:0f:73:01:7d:d1:44:40:19:06:b8:b0:62:2a:fc:
68:f6:f7:ee:c5:5e:a9:1e:1f:db:01:0e:ff:aa:7a:79:2b:13:
ad:ff:f1:3c:4b:71:ca:4d:1a:7a:e1:c1:be:33:48:ae:18:5e:
8e:6a:7c:52:5b:45:3f:53:b3:94:53:40:5d:7b:a0:7e:b2:40:
09:8c:c7:e1:8c:c1:7a:d2:de:0b:51:26:74:ac:d5:49:a0:ab:
8c:f9:7f:a0:75:d3:dc:f2:65:81:a9:c2:4c:56:4c:15:4a:8b:
b9:bf:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:19 2024 by rpki-client on console-fra.rpki-client.org