Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/U6OUX-fzsZC7vuvxIRD7V3Nj6KM.roa
File: U6OUX-fzsZC7vuvxIRD7V3Nj6KM.roa (raw, json)
Hash identifier: Jrkjj7XwfTaIX69kmzIIhdK651Jyfi8BNl8HCNaco60=
Subject key identifier: 53:A3:94:5F:E7:F3:B1:90:BB:BE:EB:F1:21:10:FB:57:73:63:E8:A3
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 0184E79608CCC2B212B9C3CFA352E83B6541
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/U6OUX-fzsZC7vuvxIRD7V3Nj6KM.roa
Signing time: Tue 06 Dec 2022 13:18:00 +0000
ROA not before: Tue 06 Dec 2022 13:18:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199156
IP address blocks: 81.171.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:96:08:cc:c2:b2:12:b9:c3:cf:a3:52:e8:3b:65:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Dec 6 13:18:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53a3945fe7f3b190bbbeebf12110fb577363e8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:78:63:2a:63:21:69:5b:f2:93:a6:b9:d4:
95:95:d4:25:9d:10:89:88:e3:74:77:ee:0c:ec:ae:
a0:41:f8:40:65:5d:c7:d9:ad:7b:ea:1c:ae:f8:f7:
08:16:1d:27:63:c9:b4:60:3d:10:ca:f9:59:f3:8a:
a1:20:03:b3:22:9c:b6:fb:42:a2:28:da:fe:d7:2f:
cc:5b:64:98:bc:c7:9a:40:f2:c7:df:47:aa:cc:f6:
7f:cd:90:3e:3b:77:50:3d:e4:3e:7f:6d:6c:73:81:
5f:2c:99:e0:56:42:b8:db:2d:26:b2:44:f6:84:36:
4a:f2:bd:cc:2c:f9:2c:c8:5c:56:b0:eb:64:85:14:
13:e9:b0:0d:b2:2f:69:15:e9:01:fb:96:53:a0:38:
6a:28:7c:e3:20:c1:1b:a4:fa:33:46:fa:ad:ef:f2:
1c:d4:85:8e:ab:d9:bf:d8:c5:04:03:d0:df:00:e2:
e6:d7:f3:f1:58:6b:5b:3f:a5:b9:8b:73:b8:fb:61:
74:6a:09:e6:22:e0:3b:de:78:2f:97:d8:69:1d:d3:
83:f6:a9:2a:78:cf:f2:38:02:65:22:f1:b5:8f:2c:
94:b3:99:63:3b:72:2c:d1:bc:57:1d:3f:26:ea:7b:
61:fa:3f:71:a0:a6:8e:e4:aa:e7:ac:6c:65:04:64:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:94:5F:E7:F3:B1:90:BB:BE:EB:F1:21:10:FB:57:73:63:E8:A3
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/U6OUX-fzsZC7vuvxIRD7V3Nj6KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.123.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3e:4b:dd:4d:de:94:90:6e:14:e3:75:a1:a9:94:52:dc:3c:
28:1c:e8:86:86:1e:21:8b:b4:a0:0b:d1:26:9e:2f:50:66:17:
c5:97:c1:49:c4:83:30:7c:ab:df:24:7e:92:03:09:34:1e:f6:
1e:7c:a4:dd:00:7b:6c:c1:99:7b:9e:83:f9:af:f3:d9:c7:60:
b8:cc:be:fc:36:e2:d8:42:d8:7e:e8:60:b2:64:ca:00:40:2f:
c3:88:bb:ba:16:61:fe:48:a7:be:02:ff:34:f2:7e:bb:ac:50:
bf:b3:42:fb:10:d4:45:48:f9:79:5b:70:a6:08:01:fc:e0:93:
98:82:3a:f9:23:6a:e4:92:7d:67:73:b4:68:d9:f0:33:54:b2:
14:02:1c:4f:32:70:a9:26:d5:0b:a4:1f:4a:f0:54:0f:19:ba:
4f:b7:8a:b9:08:ba:82:19:77:fd:35:b0:de:a9:5d:be:9f:46:
8b:9c:01:e2:0e:b0:ab:28:6f:6d:c4:bb:c1:07:7a:f1:d2:d2:
1e:37:c5:6f:05:2c:60:f9:90:f5:43:c9:15:df:ec:a7:e0:41:
28:d0:bf:ce:0f:cf:69:a0:04:46:5e:d2:c0:1b:05:94:d6:01:
c6:ce:66:f7:1b:d7:55:c1:51:b0:15:fc:30:b1:cb:b9:63:f8:
ef:2b:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org