Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/UHBXXq2DG4J-KuGjzEyBiWYVtCs.roa
File: UHBXXq2DG4J-KuGjzEyBiWYVtCs.roa (raw, json)
Hash identifier: OnvUUkNQ9cZsK6VMc5WMmL/+iHtUEmSW7cQlbq4wTdU=
Subject key identifier: 50:70:57:5E:AD:83:1B:82:7E:2A:E1:A3:CC:4C:81:89:66:15:B4:2B
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 04B0A102
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/UHBXXq2DG4J-KuGjzEyBiWYVtCs.roa
Signing time: Sat 01 Jan 2022 04:55:26 +0000
ROA not before: Sat 01 Jan 2022 04:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212945
IP address blocks: 195.85.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78684418 (0x4b0a102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Jan 1 04:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5070575ead831b827e2ae1a3cc4c81896615b42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:58:83:12:03:f6:38:5e:4f:bb:87:24:db:
6c:62:53:5d:cb:58:64:af:26:63:69:e7:68:4c:7c:
82:e1:ca:99:ca:4a:73:b3:af:87:f2:44:2f:90:f2:
7c:5b:98:34:dc:47:d9:55:5e:20:2e:d2:b4:0e:0a:
54:cc:08:25:fa:0e:09:19:f1:0b:74:1f:8e:1c:b4:
cb:81:b7:30:93:26:ef:6a:d4:04:89:76:5f:dc:99:
4a:07:b8:b2:50:59:bf:96:9c:12:6a:ce:94:4a:3f:
83:b2:59:f5:19:91:ca:e3:59:80:ff:91:7f:7e:a2:
7d:5c:e7:3b:f2:9c:cd:39:b7:67:dc:eb:f2:56:98:
a7:1b:9b:f2:4f:5d:36:b8:4b:1b:62:41:9c:1d:35:
a7:aa:29:4a:33:5b:99:b4:a9:f1:14:aa:ad:92:af:
cc:56:7d:4d:53:2f:4b:02:1f:6a:be:f6:2b:bb:93:
33:e7:09:b6:c0:67:73:5c:f1:06:db:87:4d:ff:86:
9b:a5:f8:1f:13:3d:5b:5b:13:28:17:cc:b7:58:18:
cb:27:b4:6c:76:62:9b:07:08:e8:33:7d:42:f6:5f:
ff:c3:98:d2:80:9a:5a:c2:15:5e:f1:39:7f:0e:0a:
43:fa:39:c4:a5:2a:2a:58:3c:69:0e:3a:83:c7:b7:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:70:57:5E:AD:83:1B:82:7E:2A:E1:A3:CC:4C:81:89:66:15:B4:2B
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/UHBXXq2DG4J-KuGjzEyBiWYVtCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2c:64:5c:d5:ab:9d:72:1b:1a:e3:ec:db:66:05:73:1f:86:
37:17:6c:1a:28:d9:d4:e8:b1:22:3f:91:d6:0c:6c:bb:c5:0f:
03:5d:13:dc:87:79:c1:c4:96:20:ec:fd:96:11:70:3e:74:7f:
ef:e8:3c:ca:e7:9d:13:00:6c:5d:c5:0d:ef:01:be:46:76:0d:
2a:7e:d4:c8:49:10:fc:a3:b0:85:af:28:f3:bf:8f:93:5f:f7:
03:06:3d:7e:01:4c:63:8e:7b:d7:8d:47:63:4f:85:02:d0:b6:
8e:38:ab:be:6e:db:b1:2e:20:41:cb:98:27:bb:4e:42:51:f1:
e0:d2:dc:56:3f:b3:74:68:6c:aa:30:82:d8:7f:03:93:ff:58:
8b:2a:eb:ba:36:5d:b7:d8:72:d6:c7:a0:45:70:e2:25:64:c5:
74:ad:c2:f8:89:96:41:cb:b5:b9:de:2a:42:97:5e:6f:c7:87:
52:79:a1:c5:4c:9c:3c:38:e7:bd:2b:ae:c8:62:48:ae:3d:ef:
28:17:e3:08:80:62:94:e8:fa:41:de:be:77:aa:21:1c:2c:a1:
11:20:4a:52:27:9c:63:52:bd:7d:76:4d:69:5d:71:f1:96:f0:
9f:aa:5f:be:b8:2f:3d:b6:0c:83:ef:03:11:7a:4b:d0:56:bf:
8b:47:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:00 2024 by rpki-client on console-fra.rpki-client.org