Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/UBC6RSl81ZAbviiOt5PhFdLGUDE.roa
File: UBC6RSl81ZAbviiOt5PhFdLGUDE.roa (raw, json)
Hash identifier: ZB+5dP2AM9YNPiHf9Hh0UfTEso3I1jKf3248CAVe1u0=
Subject key identifier: 50:10:BA:45:29:7C:D5:90:1B:BE:28:8E:B7:93:E1:15:D2:C6:50:31
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19E35611
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/UBC6RSl81ZAbviiOt5PhFdLGUDE.roa
Signing time: Sat 01 Jan 2022 15:56:48 +0000
ROA not before: Sat 01 Jan 2022 15:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59253
IP address blocks: 193.37.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434329105 (0x19e35611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5010ba45297cd5901bbe288eb793e115d2c65031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:b7:f4:14:59:92:9f:ba:cb:fe:e7:45:f2:
76:36:a0:12:28:54:c8:42:9e:b6:99:8a:b1:fb:38:
ff:cf:60:ec:a1:9c:38:5f:a2:6d:43:4a:4c:a7:8e:
ae:0a:54:9f:30:b7:9e:47:4a:e0:3a:c1:21:68:86:
78:58:b4:9a:1c:db:5b:a8:80:b6:75:53:68:ea:04:
f8:39:4e:d5:ad:9c:25:c1:fa:eb:71:ab:bf:be:b2:
9c:60:08:b0:4e:4a:ac:8b:2e:6c:22:59:df:db:4b:
74:4d:c7:f3:b9:7b:24:32:56:48:58:c3:21:5e:5d:
1b:ee:04:e6:a3:7b:13:48:de:66:4a:11:8f:a9:aa:
77:4d:3e:5e:c5:d1:10:bb:a5:c8:d2:1b:14:f9:bf:
03:5b:d1:ff:f5:57:ec:40:63:45:cc:24:be:57:e7:
30:4f:fb:dc:09:5b:88:dd:81:6b:3a:ac:d3:39:e0:
0e:91:a7:03:e3:5c:1a:a7:fc:8a:cc:9d:ba:e6:c3:
78:06:30:b8:20:07:e0:16:d2:44:e6:36:0c:73:87:
c6:95:d4:06:78:56:63:54:9c:95:50:cb:20:ab:ad:
d2:77:86:f1:e0:b5:5e:7c:21:cd:62:84:9e:a6:35:
16:92:36:f0:5f:77:c5:45:5c:43:97:f4:34:38:dd:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:BA:45:29:7C:D5:90:1B:BE:28:8E:B7:93:E1:15:D2:C6:50:31
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/UBC6RSl81ZAbviiOt5PhFdLGUDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e7:cf:71:0c:4d:a3:af:b3:46:b2:45:8a:7d:63:d8:98:f8:
81:64:92:f0:3a:9f:ec:37:52:b6:ef:c6:4e:93:dd:88:db:da:
43:3b:44:d0:c8:e8:71:12:3f:7b:3e:4e:b4:0a:6e:44:20:da:
f7:99:ee:d1:7a:7d:20:c2:22:eb:ea:cf:0b:e3:5a:2d:84:c3:
08:c0:e2:3b:95:d9:8b:70:b0:45:fa:74:ec:51:18:50:62:ce:
67:d1:c3:f1:7e:48:a8:82:c3:b8:24:b0:e6:36:20:c3:a4:cb:
ac:67:db:8a:42:06:fe:40:bf:1f:e1:d5:bc:a2:a8:57:76:2d:
ba:a7:4f:82:6f:9d:82:87:2a:71:88:65:85:05:2b:f1:e2:23:
d2:1c:09:77:9a:64:f4:1b:b8:cc:02:d1:71:6d:5c:51:75:26:
15:e3:08:04:17:f2:fb:98:45:46:5e:64:9e:d5:5b:97:f0:51:
7f:3a:55:45:f5:df:3f:7a:f8:cc:09:6b:22:4d:e9:d5:d2:fd:
52:16:9c:f4:04:4c:fc:1d:cb:de:bb:37:22:74:bc:db:f5:2c:
49:c1:c9:bb:d3:0d:16:04:e7:4d:ce:5c:68:de:8b:f2:09:59:
bd:95:6a:9d:aa:8f:78:f9:91:82:f0:e7:53:58:4c:94:d8:81:
b4:de:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org