Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/UXOr34TZROR0lWi2fFVPKEokwzQ.roa
File: UXOr34TZROR0lWi2fFVPKEokwzQ.roa (raw, json)
Hash identifier: TuyoC6JFUPVAZfvk7y4kQ2uX1vXkEPmHqUe1bPKPFug=
Subject key identifier: 51:73:AB:DF:84:D9:44:E4:74:95:68:B6:7C:55:4F:28:4A:24:C3:34
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 018291559C736C80E80BA3A2BED443ACD670
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/UXOr34TZROR0lWi2fFVPKEokwzQ.roa
Signing time: Fri 12 Aug 2022 09:14:43 +0000
ROA not before: Fri 12 Aug 2022 09:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51855
IP address blocks: 78.108.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:55:9c:73:6c:80:e8:0b:a3:a2:be:d4:43:ac:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Aug 12 09:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5173abdf84d944e4749568b67c554f284a24c334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:d0:66:67:54:76:78:58:a6:d1:77:a5:1d:
e9:f4:b0:41:72:22:87:5e:1e:45:87:7d:09:4f:dd:
31:6d:54:36:88:c0:cd:8a:b1:91:e4:f2:1a:f0:a1:
fb:5d:cf:09:d3:c0:f8:2f:eb:08:72:1c:59:9d:11:
fd:3d:4a:28:e2:f9:0e:d5:1a:f1:b8:f4:da:e8:7c:
4d:76:4a:49:4b:f4:67:ff:16:b0:07:80:ac:7a:93:
4b:5a:99:ad:6e:30:f7:7d:57:48:cd:18:75:2d:cc:
0b:65:41:50:21:cc:ee:de:fd:5e:5e:6b:12:6d:b5:
33:43:d6:70:5c:1f:1e:a1:a5:92:38:c5:4e:7a:2e:
50:44:3c:7a:ae:d8:fb:77:90:d7:f8:28:98:d5:66:
52:76:3c:b0:b2:c8:ba:14:fd:97:8e:e5:c0:1a:6c:
d7:38:23:c0:21:a3:ce:9c:90:38:f3:83:ff:94:b6:
03:c8:6b:9e:04:a1:a8:42:39:18:7e:ce:48:81:9d:
e4:c6:5d:8d:e1:ff:67:73:dd:7b:94:14:2c:90:f1:
b0:e1:d5:ca:ad:de:1c:66:bd:a9:f5:33:26:3c:78:
57:8f:d1:61:d1:a5:4f:d1:17:22:67:9d:8a:a3:d9:
7a:c9:1e:1a:1b:bb:26:e8:60:01:a6:92:16:7a:47:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:AB:DF:84:D9:44:E4:74:95:68:B6:7C:55:4F:28:4A:24:C3:34
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/UXOr34TZROR0lWi2fFVPKEokwzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.247.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fa:3d:8b:59:81:43:90:48:f2:c8:d7:a9:92:bb:19:d4:8b:
10:d5:90:6c:36:22:18:12:96:1a:ea:3e:e6:03:0e:9d:6c:6d:
9e:5a:8a:81:df:ec:8f:04:90:fe:f3:3b:9a:e4:da:0b:70:14:
c4:33:a1:ee:4b:71:13:57:5f:0c:70:3c:8c:94:af:5a:06:0d:
ad:c8:52:4a:d5:d7:2e:0c:e4:19:4c:f9:38:3c:d2:5a:15:d1:
05:ea:82:10:d9:85:d0:15:ac:71:ea:44:10:87:6b:21:96:e6:
b6:75:c5:27:11:83:ed:c4:0b:e4:ef:84:a9:e7:64:62:fc:f3:
6b:18:99:d2:ed:ff:d9:88:5a:19:fd:b3:ab:87:c6:91:07:63:
97:cf:9c:52:dd:ba:50:d3:85:13:9a:2d:2d:b9:ee:7d:d1:6f:
91:05:58:fd:2b:66:08:44:59:88:66:23:e0:77:18:4d:a3:99:
7e:52:6e:36:51:11:68:eb:60:5e:bf:ec:34:56:d1:f6:0d:1e:
4f:52:39:22:30:8e:f0:3c:9e:5e:0d:68:9a:ef:87:81:b6:1a:
36:70:27:f8:17:5c:e5:06:4c:f5:af:53:59:06:44:88:f6:29:
15:f8:c2:27:8d:3e:8c:07:34:52:47:b7:57:f8:ae:eb:c9:f6:
bc:37:9e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org