Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UB4yJtEra6gVGUkvyepeWbwZaXw.roa
File: UB4yJtEra6gVGUkvyepeWbwZaXw.roa (raw, json)
Hash identifier: kvenYpbPNBBa0YWWa+OnEK+jYbE/JeXonErDRa+uCtc=
Subject key identifier: 50:1E:32:26:D1:2B:6B:A8:15:19:49:2F:C9:EA:5E:59:BC:19:69:7C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E77C84F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UB4yJtEra6gVGUkvyepeWbwZaXw.roa
Signing time: Fri 21 Jan 2022 20:04:07 +0000
ROA not before: Fri 21 Jan 2022 20:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210352
IP address blocks: 194.87.218.0/24 maxlen: 24
212.192.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242731087 (0xe77c84f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 21 20:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=501e3226d12b6ba81519492fc9ea5e59bc19697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:50:db:30:f1:91:13:08:2a:8b:58:9e:e0:
a1:7b:7c:10:66:8b:22:26:ba:81:a4:c4:83:1b:bc:
56:30:f8:80:e5:9a:7b:9b:c9:9b:f2:f0:82:9e:a2:
57:a4:e8:71:1e:14:db:17:92:e8:47:cf:b9:90:c6:
76:b0:62:f0:2b:e4:b0:ee:41:28:0e:ec:63:51:c0:
ba:5e:fc:ba:6f:c1:86:3b:a4:fb:73:da:76:4c:fc:
44:f3:c0:88:d2:36:53:cb:4c:1d:ba:a2:a9:5f:32:
c1:b1:1f:a0:a3:25:26:fa:22:af:35:f8:5b:15:9e:
b5:b1:c5:6e:cf:61:ee:31:0d:f8:7b:ae:3f:e0:a9:
53:29:80:0c:63:a5:b9:9c:58:94:4f:43:0d:f3:20:
f9:52:10:9f:bf:5f:21:3c:e4:ad:8e:da:d5:e5:80:
3d:cc:68:bf:0b:5b:88:f1:b8:1d:f8:91:19:e8:28:
37:f2:b0:e1:7a:78:d1:c5:69:be:dc:ec:c1:56:6f:
2f:d2:4c:ea:cd:c1:e9:69:dd:0f:ae:c5:72:58:1e:
d2:66:58:19:ee:62:cc:3e:ba:ad:ea:96:41:39:3f:
f3:51:4c:34:72:8f:c3:99:e6:03:2f:35:6d:c8:4e:
58:2b:dc:e1:b0:2c:fc:d0:f5:45:87:30:3d:69:49:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:32:26:D1:2B:6B:A8:15:19:49:2F:C9:EA:5E:59:BC:19:69:7C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UB4yJtEra6gVGUkvyepeWbwZaXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.218.0/24
212.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:de:d2:3d:90:d5:81:40:9e:1d:c6:a0:a7:39:56:f1:62:9e:
31:5d:a7:ce:e8:9d:7e:51:52:ed:61:0b:87:86:22:6f:62:63:
30:ad:21:a0:c5:9f:14:cd:48:89:38:69:bd:b5:7d:7f:c1:c5:
ed:68:6d:53:ee:c4:50:ca:23:11:bd:d8:ae:e3:39:c8:f3:e1:
e2:54:34:91:1e:41:07:73:f2:cd:8b:42:78:05:05:ad:fc:43:
8a:66:5c:30:2e:a3:20:c5:cb:5f:e4:0b:12:12:59:39:f7:89:
12:09:28:d7:93:af:db:9d:68:9f:c4:19:e8:e7:5b:c1:1a:0e:
ae:ff:c1:5f:fb:64:36:91:4f:1d:30:0e:20:88:9a:18:c7:9a:
ac:3f:ac:7b:fb:b1:d8:01:95:41:84:68:41:0c:4c:27:1f:30:
35:72:9c:38:c6:a8:58:08:fd:d5:37:38:b5:89:a7:a8:bf:20:
08:49:68:cf:d9:ff:da:9f:77:64:6a:79:cd:aa:8f:1d:e0:5f:
66:af:18:77:6a:26:a2:cc:d2:8b:cd:72:f1:3f:e8:4a:7f:15:
fb:b3:a2:d3:22:1b:36:fd:86:e6:9e:57:04:50:56:bd:57:3e:
57:f9:87:6f:72:5d:06:fa:82:4b:7d:40:26:0a:c5:06:60:b2:
31:b6:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-ams.rpki-client.org