Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/UjTS95-1kwt9ObyiqKW89Cma390.roa
File: UjTS95-1kwt9ObyiqKW89Cma390.roa (raw, json)
Hash identifier: m0sA9Dcb8yy7BCZsT0Jzr/9f4FUFX/CzzqA3zZuo4kc=
Subject key identifier: 52:34:D2:F7:9F:B5:93:0B:7D:39:BC:A2:A8:A5:BC:F4:29:9A:DF:DD
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 241E61C5
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/UjTS95-1kwt9ObyiqKW89Cma390.roa
Signing time: Sat 01 Jan 2022 02:57:13 +0000
ROA not before: Sat 01 Jan 2022 02:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3276
IP address blocks: 80.79.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 605970885 (0x241e61c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 1 02:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5234d2f79fb5930b7d39bca2a8a5bcf4299adfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:21:05:89:7b:b7:62:d1:91:d4:90:bd:f6:
bb:dc:2c:e9:af:32:21:7a:68:15:77:1e:25:38:55:
3b:d1:0b:3b:0f:37:02:15:6b:d5:96:39:c3:fd:44:
05:6c:a6:e2:b0:8d:99:a1:b5:50:e3:cd:2f:71:ba:
c8:6a:91:ea:e0:cf:12:90:0c:0f:0e:6a:fd:ff:9e:
22:f2:62:3a:c3:b1:a5:66:2b:05:4f:02:a1:22:99:
ad:db:4b:e3:bb:86:21:83:ed:d8:4a:10:1d:33:13:
d7:16:c6:87:b4:a0:a2:a4:d2:3f:01:13:1d:69:ce:
fd:f0:9d:6a:97:84:fd:03:ac:ea:40:64:e5:c7:42:
78:f6:c9:a1:7c:59:57:ae:df:e4:bb:4b:26:14:9c:
4f:93:f7:fb:af:e3:3d:d1:11:df:60:c6:2c:f5:4a:
d9:26:bf:d8:d2:22:02:61:ed:72:22:8b:63:9a:a1:
10:6c:f7:6e:6d:5e:4e:9c:cb:ea:7d:fd:f3:b8:51:
60:4a:4f:a0:69:b9:58:b6:55:9c:f3:a5:97:81:4a:
97:19:75:2b:07:92:de:d0:40:64:cb:94:f2:83:59:
0d:31:33:fb:a5:b6:d4:3c:55:6a:1a:8d:d8:e5:b8:
f5:4c:af:70:03:1e:68:d5:f0:9e:c2:ab:c0:d8:c5:
26:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:D2:F7:9F:B5:93:0B:7D:39:BC:A2:A8:A5:BC:F4:29:9A:DF:DD
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/UjTS95-1kwt9ObyiqKW89Cma390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.77.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3d:09:f0:63:57:66:21:12:93:e1:c5:87:32:55:5a:0b:f4:
fe:28:5a:ae:a3:0f:0e:af:fc:21:77:88:a2:4b:29:09:f3:8e:
50:b1:35:48:54:d2:97:b3:7b:5a:58:e9:3f:28:fd:a8:96:c4:
8d:72:af:53:42:0e:f0:63:69:33:61:03:da:73:38:b0:a8:cc:
63:84:a7:4e:7a:04:ca:04:d2:49:1b:ca:f5:76:38:85:ef:e8:
ef:02:f1:40:64:c0:b8:7a:76:5b:cc:8d:70:20:47:35:8f:54:
c7:80:b7:ce:54:41:d1:e8:d7:e1:b6:e3:28:60:4d:e1:07:e0:
1b:4c:ac:76:e8:ea:da:0b:1d:3b:52:47:33:98:23:ce:81:bb:
aa:79:fb:8e:80:96:c0:0b:a5:c9:9e:8b:2d:c7:07:ce:bb:7b:
3f:c0:d8:1d:cb:68:76:27:a6:e8:f0:1c:75:04:66:a1:b9:f2:
45:cf:9f:2d:fc:0f:21:2e:ee:ad:11:ad:35:93:d2:f6:ff:6c:
22:45:09:ad:ba:d6:5f:5c:ee:87:1c:bd:9c:27:40:4e:66:3b:
5f:ab:19:ad:c1:7c:8c:38:02:34:28:ed:ba:f3:91:39:eb:9c:
b5:06:b3:f8:48:26:f3:7e:b6:72:6a:08:0c:34:64:76:7b:43:
a7:52:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:19 2024 by rpki-client on console-ams.rpki-client.org