Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UKPQ91WZIaaubEFztZ-7E4Ocnes.roa
File: UKPQ91WZIaaubEFztZ-7E4Ocnes.roa (raw, json)
Hash identifier: QMCHXMcPnIcJ/f86jjq6mGrRH9bbROIGhkQfrtei1Qs=
Subject key identifier: 50:A3:D0:F7:55:99:21:A6:AE:6C:41:73:B5:9F:BB:13:83:9C:9D:EB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183325D2C7F6B090ED3BEB309A66E39966A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UKPQ91WZIaaubEFztZ-7E4Ocnes.roa
Signing time: Mon 12 Sep 2022 15:41:50 +0000
ROA not before: Mon 12 Sep 2022 15:41:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212496
IP address blocks: 195.58.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:5d:2c:7f:6b:09:0e:d3:be:b3:09:a6:6e:39:96:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 12 15:41:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50a3d0f7559921a6ae6c4173b59fbb13839c9deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:b7:77:f9:8d:ac:73:19:ab:e7:15:25:19:
a7:a5:2c:54:98:c5:2a:99:64:c4:ae:a8:15:11:2d:
09:7d:af:ba:85:15:19:46:00:be:45:00:aa:91:84:
ce:ef:e2:f8:03:f9:4b:17:4b:d2:bc:3e:cb:7d:ff:
f7:c4:3c:d1:a2:f5:b4:a0:cc:da:fc:17:4d:00:53:
64:a1:d7:38:c9:1c:07:1f:db:c3:2a:df:5d:cc:d2:
da:7f:9a:df:dc:6d:72:b7:af:8f:bb:cd:c8:ed:5d:
cc:17:33:6c:12:5d:a5:64:44:8a:54:4f:e4:de:71:
75:dd:48:20:b3:40:ff:fe:31:a6:91:a3:19:1b:58:
be:18:12:96:9e:12:db:0c:3f:f6:55:65:22:3f:aa:
82:7e:f6:f5:39:f1:2d:e3:c7:9a:72:dc:6f:e9:1d:
cf:40:56:fd:b9:2a:7f:bb:3f:e6:e1:7e:a9:ea:a3:
a3:c1:45:e0:ce:de:2c:14:2d:6b:15:e2:4c:60:12:
f9:73:de:57:b2:b4:f3:13:60:e4:d5:ef:49:06:86:
2a:39:af:97:1b:ad:a1:ca:b5:ec:28:f0:8b:48:36:
e4:cd:d1:b0:21:44:ad:ac:83:c2:19:05:23:52:96:
a6:bd:a4:15:da:db:f3:fd:f9:2e:36:d2:b9:3a:74:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:D0:F7:55:99:21:A6:AE:6C:41:73:B5:9F:BB:13:83:9C:9D:EB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UKPQ91WZIaaubEFztZ-7E4Ocnes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.36.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3f:f4:cb:55:14:87:33:d5:fd:bf:a3:03:3b:e6:6e:de:1c:
28:42:e7:22:30:69:b5:aa:12:2d:1f:23:7a:ce:9b:a9:f1:60:
d9:6f:9e:f8:72:d8:8c:ee:ba:e7:43:90:0a:62:86:4a:37:8c:
a1:7c:4d:f0:1e:1e:9d:1a:2a:93:4b:1c:06:81:1d:d3:51:eb:
c4:b1:38:34:db:e3:a9:23:26:03:ca:f6:ab:26:6b:44:8d:73:
d6:1b:13:a6:94:ce:a0:68:30:e1:54:90:96:49:7d:e3:b0:d8:
b8:d8:ea:70:f1:89:6e:c3:24:1d:d9:89:91:89:7c:c1:b7:71:
d9:be:99:9a:b2:c0:a2:6d:c5:ea:a5:07:cf:0b:20:15:13:31:
31:9b:06:ca:04:2f:1c:7a:40:47:00:8e:fc:18:3c:08:ce:5f:
20:a3:d1:f3:9f:92:29:27:a7:ad:11:4d:40:73:89:85:05:c6:
8a:39:e3:e9:e4:d2:f8:06:94:77:14:fb:bf:31:f8:57:dc:0b:
b9:1e:e3:87:9a:35:76:30:79:19:51:43:2c:65:f8:d4:d6:45:
ed:cb:3d:b9:76:df:f2:cf:fd:f8:d0:eb:4b:87:f9:18:37:11:
cf:91:f7:3c:93:a3:3d:82:c1:56:81:9a:9c:13:c0:31:63:60:
10:05:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:04 2023 by rpki-client on console-fra.rpki-client.org