Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/UGKMh8skrN7XaU61WJB3CpX1jwM.roa
File: UGKMh8skrN7XaU61WJB3CpX1jwM.roa (raw, json)
Hash identifier: Q6Su7mwC/ZxYVZ8BejbHICJH1rb4hf6V2hMI0XfE2us=
Subject key identifier: 50:62:8C:87:CB:24:AC:DE:D7:69:4E:B5:58:90:77:0A:95:F5:8F:03
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0D44CFBC
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/UGKMh8skrN7XaU61WJB3CpX1jwM.roa
Signing time: Sat 01 Jan 2022 13:59:41 +0000
ROA not before: Sat 01 Jan 2022 13:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50374
IP address blocks: 45.146.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222613436 (0xd44cfbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 13:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50628c87cb24acded7694eb55890770a95f58f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:a1:dc:54:dc:76:c7:20:e2:34:a7:0c:96:
6c:b8:98:08:6a:fa:f6:9d:e8:08:c4:ff:5d:b3:c6:
c2:73:74:ac:f0:70:56:dd:4c:23:3a:d5:96:29:4f:
ce:11:15:9b:31:78:60:dd:35:a2:bc:85:6f:ce:6f:
f9:4d:8a:46:89:64:34:4e:47:75:d6:bc:8f:34:d6:
d6:82:e9:60:a4:e2:86:92:e5:c0:95:46:14:22:bf:
13:f9:03:ab:32:d3:8f:84:db:df:c9:60:3d:a4:65:
eb:02:8f:6d:1c:59:17:40:6e:dd:54:c5:83:17:73:
fc:0d:2d:7e:7a:6c:5c:15:28:e1:bb:12:01:62:24:
52:2a:d9:e4:17:3e:a3:f3:b4:34:2e:87:62:62:a6:
4c:3d:8e:3e:dc:a5:b4:ef:44:c3:e2:c8:c1:e7:2a:
a4:16:aa:39:23:bb:ec:4e:9e:9c:ea:07:e3:36:d5:
23:f1:cc:fa:e2:3f:0c:73:3d:06:48:c5:20:67:38:
38:14:af:ae:61:2f:10:b6:ed:10:bb:28:b1:75:81:
e1:3b:0e:ef:fd:92:cf:91:71:5f:0a:b6:f6:37:44:
87:a8:ec:6a:a0:f9:c3:8c:45:ba:13:7c:8d:4c:b1:
c7:0d:19:8f:bd:48:9e:a5:82:03:0e:95:a8:3f:c6:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:62:8C:87:CB:24:AC:DE:D7:69:4E:B5:58:90:77:0A:95:F5:8F:03
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/UGKMh8skrN7XaU61WJB3CpX1jwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.64.0/22
Signature Algorithm: sha256WithRSAEncryption
46:64:5f:ab:fe:e1:83:09:58:9b:1d:02:8d:8a:a5:25:08:44:
0e:e5:d9:a5:29:82:d8:79:ea:fe:c4:a6:f7:de:30:6d:29:96:
e5:7f:4c:38:b4:6f:71:1e:22:ca:d2:7c:af:2f:be:40:28:95:
96:ad:08:e6:5b:dd:94:30:c8:54:ae:5e:10:29:da:35:82:c4:
87:02:c3:96:47:76:1c:35:a3:52:3a:45:fb:0d:6e:73:c5:4c:
27:a9:44:6e:ec:39:ab:3d:98:25:c4:bd:ac:73:31:36:53:1f:
82:cd:d0:92:26:3e:ef:39:e1:8b:fe:e9:e5:5e:4d:1b:9d:d5:
1c:c2:fb:39:c9:bc:1b:08:4f:50:c6:06:2e:04:87:e4:46:6b:
ad:e0:35:62:a1:6a:97:e7:71:d5:38:fc:e1:2e:37:97:25:fb:
2a:df:70:d8:a1:14:b7:c2:93:9d:17:5b:7a:2f:c0:81:11:f9:
ef:51:d2:84:68:d7:61:8c:b5:da:6a:f1:39:7f:92:88:f7:e2:
8a:cf:d9:16:90:9e:8c:8f:11:ac:3b:65:0d:fd:b2:f5:1f:76:
99:35:9d:3e:76:c3:bd:ee:37:83:0a:57:c1:3c:f0:8b:e8:4a:
d3:67:b1:65:f7:1c:05:ad:aa:2b:01:cf:27:15:89:da:a9:1b:
27:86:fa:57
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDUTPvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
M2MzNDJjMDZhYWNjMzU5ZDM5NDM5ZmY1OGRlZmE4ZWExODc1NzQ4MB4XDTIyMDEw
MTEzNTk0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTA2MjhjODdjYjI0
YWNkZWQ3Njk0ZWI1NTg5MDc3MGE5NWY1OGYwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKx0odxU3HbHIOI0pwyWbLiYCGr69p3oCMT/XbPGwnN0rPBw
Vt1MIzrVlilPzhEVmzF4YN01oryFb85v+U2KRolkNE5Hdda8jzTW1oLpYKTihpLl
wJVGFCK/E/kDqzLTj4Tb38lgPaRl6wKPbRxZF0Bu3VTFgxdz/A0tfnpsXBUo4bsS
AWIkUirZ5Bc+o/O0NC6HYmKmTD2OPtyltO9Ew+LIwecqpBaqOSO77E6enOoH4zbV
I/HM+uI/DHM9BkjFIGc4OBSvrmEvELbtELsosXWB4TsO7/2Sz5FxXwq29jdEh6js
aqD5w4xFuhN8jUyxxw0Zj71InqWCAw6VqD/GFt0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRQYoyHyySs3tdpTrVYkHcKlfWPAzAfBgNVHSMEGDAWgBQzw0LAaqzDWdOU
Of9Y3vqOoYdXSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L004TkN3R3FzdzFuVGxEbl9XTjc2anFHSFYwZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvYzU1ZmRmLWE2OGEtNGFhMC1iOGM1LTdmMjMzMzYwNDk5Ny8x
L1VHS01oOHNrck43WGFVNjFXSkIzQ3BYMWp3TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
YzU1ZmRmLWE2OGEtNGFhMC1iOGM1LTdmMjMzMzYwNDk5Ny8xL004TkN3R3FzdzFu
VGxEbl9XTjc2anFHSFYwZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2SQDANBgkqhkiG9w0BAQsFAAOC
AQEARmRfq/7hgwlYmx0CjYqlJQhEDuXZpSmC2Hnq/sSm994wbSmW5X9MOLRvcR4i
ytJ8ry++QCiVlq0I5lvdlDDIVK5eECnaNYLEhwLDlkd2HDWjUjpF+w1uc8VMJ6lE
buw5qz2YJcS9rHMxNlMfgs3QkiY+7znhi/7p5V5NG53VHML7Ocm8GwhPUMYGLgSH
5EZrreA1YqFql+dx1Tj84S43lyX7Kt9w2KEUt8KTnRdbei/AgRH571HShGjXYYy1
2mrxOX+SiPfiis/ZFpCejI8RrDtlDf2y9R92mTWdPnbDve43gwpXwTzwi+hK02ex
ZfccBa2qKwHPJxWJ2qkbJ4b6Vw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:28 2024 by rpki-client on console-ams.rpki-client.org