Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/UNHCZ14kBRC4kMNyMmYsiPasNng.roa
File: UNHCZ14kBRC4kMNyMmYsiPasNng.roa (raw, json)
Hash identifier: LnZX1j8sx5Vb7AJI1/tFqdbDWblVhg3gosR+7rpRTcE=
Subject key identifier: 50:D1:C2:67:5E:24:05:10:B8:90:C3:72:32:66:2C:88:F6:AC:36:78
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 1628336C
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/UNHCZ14kBRC4kMNyMmYsiPasNng.roa
Signing time: Tue 12 Apr 2022 06:44:53 +0000
ROA not before: Tue 12 Apr 2022 06:44:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59747
IP address blocks: 91.207.230.0/24 maxlen: 24
91.207.231.0/24 maxlen: 24
2a02:38:1111::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371733356 (0x1628336c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Apr 12 06:44:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50d1c2675e240510b890c37232662c88f6ac3678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:95:69:fa:d7:2e:d8:1c:0b:7c:07:93:9e:
68:56:cb:40:94:70:6a:f0:2b:86:f7:2e:ab:e6:08:
35:91:65:e5:0e:43:e7:5c:ef:ba:6f:a8:eb:ca:d1:
50:ca:7b:e2:6c:13:3d:c9:4b:82:b9:f3:1a:d1:fb:
c1:b9:b2:83:17:fa:3d:f9:77:ed:6a:95:c9:be:0f:
fe:47:aa:d2:6a:19:7c:f1:82:4a:ad:ef:ee:28:93:
5a:cd:0a:02:16:2e:11:aa:dc:54:ba:b7:ee:3e:74:
40:63:b3:77:10:89:8a:4c:bd:28:5a:61:7e:cc:01:
d4:9b:01:39:8b:05:1d:e2:08:4f:2c:c2:52:50:02:
35:33:d6:cb:1d:ed:62:28:33:1e:c3:a6:34:ed:da:
88:4e:02:34:66:e2:f5:51:f5:84:cf:2d:e5:3f:90:
5e:28:57:e1:64:40:70:bc:fd:12:d3:ff:55:68:ec:
0b:15:62:01:ba:5c:21:0f:e1:f0:7e:4f:a1:77:1e:
d4:cd:b7:e5:c5:2b:ab:58:cb:f4:ee:4d:7f:59:47:
3d:0f:78:9f:4f:8e:96:4c:96:5d:47:cf:8e:44:b3:
dc:fb:35:e7:fb:d2:42:23:8c:fa:07:bc:24:76:6c:
db:9a:f3:8e:c8:63:b8:b8:04:96:64:b2:78:b5:35:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:C2:67:5E:24:05:10:B8:90:C3:72:32:66:2C:88:F6:AC:36:78
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/UNHCZ14kBRC4kMNyMmYsiPasNng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.230.0/23
IPv6:
2a02:38:1111::/48
Signature Algorithm: sha256WithRSAEncryption
3e:68:00:60:54:07:83:85:07:57:e6:27:5d:e9:8f:d9:46:15:
3b:a5:6a:af:b4:a5:22:e3:32:7b:14:1f:25:9c:59:e2:65:60:
b1:71:6d:fc:6e:24:71:89:1a:8e:b3:3c:35:55:d8:27:0e:0f:
6d:ec:cb:61:ec:3c:95:70:b6:a6:f5:60:8c:fd:d4:90:34:87:
94:e4:16:68:8d:97:0e:77:38:5a:e7:f5:4e:d0:f3:7e:32:b9:
bc:11:69:e5:8b:4e:b6:54:f2:24:93:77:fe:b0:33:5d:f8:bc:
22:7e:64:27:82:b8:33:b8:75:4f:fc:84:80:94:1b:06:5d:cb:
29:46:42:a0:d3:63:a1:a9:08:07:09:f8:ac:81:05:a5:b2:8a:
f6:3d:3c:5c:67:40:8d:d1:a9:b9:8d:b7:b8:d2:f3:9c:f6:19:
bd:be:be:4c:9b:d1:a9:34:31:3f:28:5f:2d:26:ad:43:ce:37:
31:33:11:fd:7f:1b:a3:7e:11:79:0b:89:13:ac:be:5f:9f:29:
49:66:28:7f:6a:9d:a3:2d:cb:0e:68:a0:46:a3:d0:0f:f3:ae:
58:89:b0:5a:4d:1b:7e:7f:6d:cc:06:41:ea:22:5e:99:ef:5d:
de:87:27:fe:81:3d:86:f0:9f:c3:7a:4c:8c:d4:11:f6:e7:21:
00:ca:37:54
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEFigzbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTEwOWRhNjYyZjlkMzAyZmZmMmM1YzRiNGFmYjhmOTQ3ZmVjMWMwMB4XDTIyMDQx
MjA2NDQ1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBkMWMyNjc1ZTI0
MDUxMGI4OTBjMzcyMzI2NjJjODhmNmFjMzY3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJAhlWn61y7YHAt8B5OeaFbLQJRwavArhvcuq+YINZFl5Q5D
51zvum+o68rRUMp74mwTPclLgrnzGtH7wbmygxf6Pfl37WqVyb4P/keq0moZfPGC
Sq3v7iiTWs0KAhYuEarcVLq37j50QGOzdxCJiky9KFphfswB1JsBOYsFHeIITyzC
UlACNTPWyx3tYigzHsOmNO3aiE4CNGbi9VH1hM8t5T+QXihX4WRAcLz9EtP/VWjs
CxViAbpcIQ/h8H5PoXce1M235cUrq1jL9O5Nf1lHPQ94n0+OlkyWXUfPjkSz3Ps1
5/vSQiOM+ge8JHZs25rzjshjuLgElmSyeLU1iekCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRQ0cJnXiQFELiQw3IyZiyI9qw2eDAfBgNVHSMEGDAWgBQpEJ2mYvnTAv/y
xcS0r7j5R/7BwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tSQ2RwbUw1MHdMXzhzWEV0Sy00LVVmLXdjQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzkvOTMwMjc5LTMxODctNDdhNS04MTM3LWY0ZmI1Yzg4MDUwOS8x
L1VOSENaMTRrQlJDNGtNTnlNbVlzaVBhc05uZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkv
OTMwMjc5LTMxODctNDdhNS04MTM3LWY0ZmI1Yzg4MDUwOS8xL0tSQ2RwbUw1MHdM
XzhzWEV0Sy00LVVmLXdjQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAVvP5jAPBAIAAjAJAwcAKgIAOBER
MA0GCSqGSIb3DQEBCwUAA4IBAQA+aABgVAeDhQdX5idd6Y/ZRhU7pWqvtKUi4zJ7
FB8lnFniZWCxcW38biRxiRqOszw1VdgnDg9t7Mth7DyVcLam9WCM/dSQNIeU5BZo
jZcOdzha5/VO0PN+Mrm8EWnli062VPIkk3f+sDNd+LwifmQngrgzuHVP/ISAlBsG
XcspRkKg02OhqQgHCfisgQWlsor2PTxcZ0CN0am5jbe40vOc9hm9vr5Mm9GpNDE/
KF8tJq1DzjcxMxH9fxujfhF5C4kTrL5fnylJZih/ap2jLcsOaKBGo9AP865YibBa
TRt+f23MBkHqIl6Z713ehyf+gT2G8J/DekyM1BH25yEAyjdU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:47 2024 by rpki-client on console-fra.rpki-client.org