Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Urzrd5-4ptiw3NgMar72ytmJ_CI.roa
File: Urzrd5-4ptiw3NgMar72ytmJ_CI.roa (raw, json)
Hash identifier: NXprKiv69n4qlQFC1onC6uGUYcr7dbl04kuoWayBJ/g=
Subject key identifier: 52:BC:EB:77:9F:B8:A6:D8:B0:DC:D8:0C:6A:BE:F6:CA:D9:89:FC:22
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 0181EDBFF84B022AC2F11217071589AFA55C
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Urzrd5-4ptiw3NgMar72ytmJ_CI.roa
Signing time: Mon 11 Jul 2022 14:53:09 +0000
ROA not before: Mon 11 Jul 2022 14:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6735
IP address blocks: 194.113.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:bf:f8:4b:02:2a:c2:f1:12:17:07:15:89:af:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Jul 11 14:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52bceb779fb8a6d8b0dcd80c6abef6cad989fc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:69:91:5f:1f:2e:8b:a0:76:6a:62:47:d7:
0f:66:3d:64:50:a5:69:dc:e4:59:94:76:f3:c4:23:
c6:86:bb:ae:e6:a8:a4:a5:1f:6f:32:37:8a:3e:f4:
c9:3f:5d:23:e5:1f:1f:e0:bc:07:88:b4:8e:33:6e:
fd:e2:51:91:f6:79:45:bd:9b:98:82:6a:b0:b1:c2:
32:da:fa:f0:35:29:a5:9b:80:01:43:33:11:2c:26:
0b:87:71:eb:72:6a:9c:e8:24:2b:3f:c8:d4:40:aa:
08:45:df:7d:36:7b:77:f8:e2:e4:cd:25:63:ca:11:
a3:31:d2:ff:d1:a5:0b:36:b5:e5:3f:2a:a2:54:90:
d2:a6:ef:e8:2c:bd:da:6f:81:28:02:7b:b7:58:ae:
39:e9:cb:c4:c7:67:c3:18:44:59:14:8c:79:54:11:
a7:97:49:7f:2d:a8:ea:ce:ce:7a:32:7f:ba:d2:33:
ee:d0:58:73:f4:90:c1:39:e8:86:0f:fb:ee:89:54:
b3:47:1d:83:86:7b:b5:22:9b:10:7b:4a:04:de:6b:
4c:44:d3:87:3d:14:cf:e9:03:f0:16:83:e7:77:50:
6b:37:27:53:f2:8d:2a:e8:3d:77:00:06:09:95:a9:
b3:5d:59:73:b8:fb:6a:6c:4a:15:49:c6:49:1d:74:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:EB:77:9F:B8:A6:D8:B0:DC:D8:0C:6A:BE:F6:CA:D9:89:FC:22
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Urzrd5-4ptiw3NgMar72ytmJ_CI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.117.0/24
Signature Algorithm: sha256WithRSAEncryption
89:fc:6c:ba:65:4a:12:db:4b:04:1b:9a:ab:6a:d5:aa:b0:2a:
34:5c:09:2d:62:7a:5e:07:3d:45:50:2d:5e:b2:f8:4d:6e:fa:
08:e0:c2:ec:32:6b:8c:73:66:7d:ca:b7:b2:25:92:49:a5:d3:
09:f9:b0:88:90:20:b0:10:ee:65:8f:17:7e:f5:8d:78:72:6a:
19:b3:00:cd:32:46:24:5b:7b:fe:1b:ca:ca:e1:d3:6c:1d:a4:
cc:ef:c5:b8:9e:08:34:cf:f5:00:06:c6:6f:0c:e6:b2:00:a0:
f4:b5:21:3e:ca:d2:09:fe:b5:d3:57:6d:1f:54:8f:3d:7a:82:
b7:9d:10:3d:ed:7a:9b:a3:85:24:20:8c:d7:ba:62:6f:50:0e:
dd:a6:80:8c:a3:c6:01:c1:e0:7d:81:9c:43:b4:4f:4f:d2:08:
82:b7:a9:3c:01:15:0f:f9:b3:7a:ff:9b:f1:95:c3:34:6e:e5:
72:e1:22:e0:64:a6:85:eb:b8:27:8b:b3:7d:92:24:17:22:f7:
bf:d7:29:2c:c5:e5:e5:05:65:7d:af:16:c3:6e:5f:c4:ce:02:
3a:2c:81:53:94:2a:ae:1d:ff:01:75:12:87:5f:f5:0b:3d:b0:
c3:e3:c7:1c:76:f1:45:9c:78:56:f2:99:81:6b:d4:b0:68:7f:
5c:b6:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:53 2023 by rpki-client on console-ams.rpki-client.org