Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/H_UjR_YfvIJHRUqzc5XjTU_gn3k.roa
File: H_UjR_YfvIJHRUqzc5XjTU_gn3k.roa (raw, json)
Hash identifier: d/WfSkBGr2EaGHSRLQh3LzQl4I11BE6ctt6/jIwbn7g=
Subject key identifier: 1F:F5:23:47:F6:1F:BC:82:47:45:4A:B3:73:95:E3:4D:4F:E0:9F:79
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 017872
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/H_UjR_YfvIJHRUqzc5XjTU_gn3k.roa
Signing time: Mon 14 Mar 2022 10:02:53 +0000
ROA not before: Mon 14 Mar 2022 10:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210593
IP address blocks: 91.247.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96370 (0x17872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Mar 14 10:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ff52347f61fbc8247454ab37395e34d4fe09f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:f5:ce:e6:7d:a6:f3:20:3b:0d:bd:9f:e5:
f0:f6:bd:3b:c2:b7:73:ff:28:ff:92:55:79:eb:ba:
c6:0c:64:eb:fe:5e:5b:7e:f3:e1:39:08:c2:25:db:
58:55:b3:5c:4d:29:51:82:99:99:2c:de:40:a3:03:
50:b7:a0:21:fc:20:3d:f0:9f:52:11:25:66:11:0c:
3a:b7:b0:3f:fb:56:9e:7f:76:34:71:77:57:5a:f8:
00:df:fe:22:4d:f8:14:94:8c:c2:c7:46:95:4c:c7:
8d:5a:0a:eb:e6:54:eb:03:e8:9c:1e:75:7d:1a:97:
fb:2f:b7:e4:f9:32:3d:3e:9e:da:97:cb:87:22:e4:
d0:5c:16:58:4b:5f:21:c5:1d:de:ea:50:3b:2d:f3:
4d:61:28:a6:46:d0:f6:8f:b4:a9:0e:e6:84:5a:2e:
61:3e:0a:ea:a0:cb:1f:cf:94:4f:d9:06:5a:75:31:
8a:39:c9:9f:ba:68:6d:94:df:cb:05:22:d6:59:40:
fe:c6:23:bb:87:4f:c2:d5:97:28:69:b6:85:b0:ed:
62:93:a4:37:83:00:4c:90:d9:a8:e0:31:83:e4:73:
32:a5:e2:87:41:c6:a9:37:04:4e:04:ac:c6:b4:95:
e3:74:ec:ec:ea:07:0c:ed:12:13:a8:79:09:08:b0:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F5:23:47:F6:1F:BC:82:47:45:4A:B3:73:95:E3:4D:4F:E0:9F:79
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/H_UjR_YfvIJHRUqzc5XjTU_gn3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.175.0/24
Signature Algorithm: sha256WithRSAEncryption
be:4e:2e:f2:5c:ab:6f:68:da:31:f1:f5:52:11:ac:a8:4f:04:
da:67:97:88:48:84:49:da:33:3d:aa:89:47:39:0d:e1:34:bd:
6f:6f:95:6c:14:9f:4f:ac:74:e4:f5:0c:df:2d:59:87:41:24:
39:eb:9f:b6:ee:31:ff:5c:38:33:12:a4:9a:4b:87:20:10:1a:
c5:3f:85:c8:b1:05:d6:be:98:72:b6:3c:20:d5:49:9f:f9:3c:
1f:16:9e:15:cb:87:4f:23:7c:b2:d2:86:f0:39:ff:70:1b:22:
65:52:45:89:27:f8:3f:92:72:49:1c:3b:df:69:cc:ec:9c:e1:
3a:ec:fa:9c:af:77:c2:19:9e:83:59:e4:ee:a3:a3:fe:6c:86:
3c:66:b9:97:96:d0:95:81:6c:0f:2c:64:87:01:94:d2:10:d4:
df:32:2c:67:8b:3a:92:56:32:ed:b7:f3:c5:f3:ad:cc:d6:a6:
8f:1b:e7:5e:48:c5:43:e4:64:db:59:7d:52:15:ca:ae:2d:16:
7f:77:ff:c4:af:ca:b2:fa:52:19:f0:ec:20:a1:11:fa:e0:02:
ec:cc:d1:4a:55:e6:70:d3:f1:60:fc:ea:7d:9d:ea:11:04:8a:
a8:46:d1:95:65:94:5e:9c:69:a6:28:b0:b3:13:5d:36:9b:a9:
4c:9d:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:17 2024 by rpki-client on console-fra.rpki-client.org