Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/UjLFLpqflC-QLKm6xyNMSK46kSU.roa
File: UjLFLpqflC-QLKm6xyNMSK46kSU.roa (raw, json)
Hash identifier: m3vYM6K6ZRAejJoY40p04LlOGtCCTK5EO8uoXP48XK8=
Subject key identifier: 52:32:C5:2E:9A:9F:94:2F:90:2C:A9:BA:C7:23:4C:48:AE:3A:91:25
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: DD5123
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/UjLFLpqflC-QLKm6xyNMSK46kSU.roa
Signing time: Thu 23 Jun 2022 15:14:30 +0000
ROA not before: Thu 23 Jun 2022 15:14:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43366
IP address blocks: 185.54.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14504227 (0xdd5123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Jun 23 15:14:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5232c52e9a9f942f902ca9bac7234c48ae3a9125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:05:27:55:34:44:4f:4b:77:98:60:1e:a1:
c6:cf:4b:47:fc:3e:52:85:e1:2d:be:e4:60:1f:78:
09:04:e5:9a:dd:ca:39:ed:ba:6b:62:38:bf:6b:d3:
7d:33:e0:3b:54:a3:9d:d0:b2:b1:c2:94:69:e8:30:
c8:94:74:f2:d8:e3:c6:dd:b9:5c:89:92:5b:36:54:
ac:c3:22:c5:f6:26:a8:34:c3:d7:94:e8:71:e6:6c:
aa:5f:f5:16:02:5c:92:ae:7c:51:10:47:4f:11:19:
84:68:51:4b:a5:9a:8a:23:5b:01:f5:8d:c3:4b:63:
55:79:41:78:f4:48:74:4a:53:90:e2:4e:59:c4:1d:
d9:36:76:86:45:cd:d2:da:0a:b1:82:80:17:2c:d5:
59:4b:86:a8:0d:de:83:4a:33:5e:82:d5:c4:56:19:
4d:db:e5:26:1f:bc:f4:32:38:72:df:f2:23:da:4e:
a4:e6:81:3b:68:0c:c6:3c:b8:fb:b3:57:af:8a:05:
bd:68:6f:a3:a9:d3:d1:6e:ff:bf:e2:aa:69:6b:2d:
9a:c5:e3:b1:6e:55:f6:46:5d:e7:af:9f:44:8d:b9:
09:c9:d2:e0:56:2f:65:db:18:e5:d7:a8:95:30:2e:
a2:0f:94:ee:dd:99:05:f5:ba:5d:72:38:a5:9f:5e:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:32:C5:2E:9A:9F:94:2F:90:2C:A9:BA:C7:23:4C:48:AE:3A:91:25
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/UjLFLpqflC-QLKm6xyNMSK46kSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.216.0/23
Signature Algorithm: sha256WithRSAEncryption
49:e0:73:d4:44:1c:b6:88:5d:bf:19:87:81:c0:8c:4a:33:e4:
9a:9f:18:4c:e5:91:2b:f3:59:cf:b0:0e:2e:1f:a2:c1:3b:43:
0d:7d:2d:6f:84:fe:b3:95:a6:16:3f:64:0b:04:03:60:50:e7:
70:af:96:6b:b1:9d:7a:98:94:fe:8f:f1:2b:0c:f4:28:52:73:
51:aa:19:18:cc:de:3a:1b:21:9d:1a:8a:12:4c:9a:b1:fc:46:
12:38:12:4d:a2:3b:0c:c8:68:4b:aa:2b:90:a0:b0:52:ee:c0:
1b:c5:28:be:22:fe:49:fe:8b:87:d6:bf:49:7c:ec:b1:07:29:
a7:8e:57:b8:61:7d:31:3f:27:7d:a2:86:67:fb:23:d9:06:67:
66:a3:86:33:22:aa:8b:ee:cd:4f:5e:69:2e:2a:e2:7b:a2:08:
00:ca:7b:97:49:62:38:71:fb:dc:57:e2:03:04:b4:bf:67:ab:
80:ce:a5:32:c2:ac:a4:c9:e7:0e:a9:6a:dd:c5:55:ae:95:a7:
81:ad:8f:2b:2f:46:05:c2:11:19:f1:5a:64:c0:e2:35:9d:56:
2d:71:fb:6f:57:91:1f:da:bc:d6:46:35:31:b4:16:b9:21:6b:
6e:73:28:ac:81:4b:43:9d:2c:44:12:42:be:64:39:56:07:d2:
e4:97:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:49 2024 by rpki-client on console-fra.rpki-client.org