Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ULPiqYqgtOkiPXVPhk4G4627inY.roa
File: ULPiqYqgtOkiPXVPhk4G4627inY.roa (raw, json)
Hash identifier: +MqwRh29+R35KlAqJe4fCBoWUQaSF/utBT3TXEGPdcE=
Subject key identifier: 50:B3:E2:A9:8A:A0:B4:E9:22:3D:75:4F:86:4E:06:E3:AD:BB:8A:76
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01847F7FAD04E2BFAA170EDAA2465DE238B5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ULPiqYqgtOkiPXVPhk4G4627inY.roa
Signing time: Wed 16 Nov 2022 08:13:04 +0000
ROA not before: Wed 16 Nov 2022 08:13:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 194.87.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7f:7f:ad:04:e2:bf:aa:17:0e:da:a2:46:5d:e2:38:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 16 08:13:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50b3e2a98aa0b4e9223d754f864e06e3adbb8a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a2:7f:8c:21:ee:49:93:82:fd:3b:0d:e1:de:
77:4f:44:0d:55:90:d5:14:5b:9e:25:2c:7e:32:46:
f9:48:e7:f2:7e:f1:80:e1:74:8f:4e:8b:37:d9:e8:
c1:98:41:35:c3:36:57:0b:d1:66:4d:7a:3d:38:20:
ad:cf:73:57:2f:cd:30:5c:63:f6:c4:76:3d:2b:fc:
53:39:f8:5b:9d:c8:e3:b4:a6:ad:4e:57:60:f0:bf:
25:15:14:a0:81:40:c8:8d:09:0d:ac:0c:6a:ce:26:
d2:77:7c:17:94:69:bc:3e:e2:34:29:67:f8:e7:34:
ba:a0:f3:4a:a5:70:77:bd:ff:b2:93:6f:40:17:b2:
c8:98:60:07:a2:fc:32:bd:ca:c9:0a:3e:fc:7d:68:
12:f8:67:2e:69:e7:cc:dd:12:16:1d:b1:28:06:8d:
b9:ab:c6:96:f5:87:2f:4e:c7:df:44:8c:09:57:0f:
21:9d:a6:84:bd:58:b0:1e:c5:99:c3:5e:3d:f7:cd:
96:73:22:86:ea:dc:41:da:52:14:e6:65:7d:6e:65:
f5:29:de:84:8a:8e:b0:4e:8f:42:17:68:0a:71:4f:
c2:97:3b:44:fd:50:5a:3b:db:50:01:97:3f:e2:ff:
03:8a:9a:70:97:79:90:51:13:e8:d7:f3:96:2c:17:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B3:E2:A9:8A:A0:B4:E9:22:3D:75:4F:86:4E:06:E3:AD:BB:8A:76
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ULPiqYqgtOkiPXVPhk4G4627inY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.127.0/24
Signature Algorithm: sha256WithRSAEncryption
87:7e:fe:12:43:26:0f:9c:0e:b1:7b:c8:64:b9:72:9d:ad:4c:
98:ac:9a:31:f3:02:ea:ac:61:90:5a:0f:0d:80:47:ff:59:78:
79:56:30:a1:06:e8:9e:63:6b:e0:1d:65:48:89:c9:83:3d:6a:
7f:5b:24:6c:00:66:e4:2e:aa:4a:87:18:8a:32:44:1f:2f:32:
05:7a:cf:ae:90:ae:7f:cc:45:31:b6:76:fa:9d:c0:5f:b0:2d:
a6:8f:3f:16:57:61:4a:52:63:8b:63:eb:e8:87:04:2b:45:b1:
53:bc:8c:03:93:c3:e9:49:f3:ca:92:3b:56:d6:86:ea:17:b7:
7e:64:9f:3e:89:97:07:72:57:85:73:85:59:31:3a:0c:36:e2:
25:6a:09:96:32:c0:f2:b0:df:62:09:67:12:05:10:c2:d9:72:
6e:5a:66:87:be:b8:8a:0f:9a:ff:c8:2a:cb:5d:4c:0f:47:3e:
21:28:a8:1e:37:d9:63:e6:a8:61:e1:30:af:2f:ba:a8:9e:89:
35:8e:97:d9:9b:67:b4:1f:38:a3:4d:8f:43:e4:69:42:4a:49:
23:87:8a:d4:cc:dd:5f:b2:ca:cc:d0:ae:68:23:d1:7b:ac:2f:
ef:76:be:36:d3:b9:ab:6c:e9:84:12:b6:b3:42:b5:2c:6f:cb:
2c:21:af:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYR/f60E4r+qFw7aokZd4ji1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMTE2MDgxMzA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGIzZTJhOThhYTBiNGU5MjIzZDc1NGY4NjRlMDZlM2FkYmI4YTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26J/jCHuSZOC/TsN4d53T0QNVZDV
FFueJSx+Mkb5SOfyfvGA4XSPTos32ejBmEE1wzZXC9FmTXo9OCCtz3NXL80wXGP2
xHY9K/xTOfhbncjjtKatTldg8L8lFRSggUDIjQkNrAxqzibSd3wXlGm8PuI0KWf4
5zS6oPNKpXB3vf+yk29AF7LImGAHovwyvcrJCj78fWgS+GcuaefM3RIWHbEoBo25
q8aW9YcvTsffRIwJVw8hnaaEvViwHsWZw149982WcyKG6txB2lIU5mV9bmX1Kd6E
io6wTo9CF2gKcU/ClztE/VBaO9tQAZc/4v8Dippwl3mQURPo1/OWLBfODQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFCz4qmKoLTpIj11T4ZOBuOtu4p2MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVUxQaXFZcWd0T2tpUFhWUGhrNEc0NjI3aW5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwld/MA0G
CSqGSIb3DQEBCwUAA4IBAQCHfv4SQyYPnA6xe8hkuXKdrUyYrJox8wLqrGGQWg8N
gEf/WXh5VjChBuieY2vgHWVIicmDPWp/WyRsAGbkLqpKhxiKMkQfLzIFes+ukK5/
zEUxtnb6ncBfsC2mjz8WV2FKUmOLY+vohwQrRbFTvIwDk8PpSfPKkjtW1obqF7d+
ZJ8+iZcHcleFc4VZMToMNuIlagmWMsDysN9iCWcSBRDC2XJuWmaHvriKD5r/yCrL
XUwPRz4hKKgeN9lj5qhh4TCvL7qonok1jpfZm2e0HzijTY9D5GlCSkkjh4rUzN1f
ssrM0K5oI9F7rC/vdr4207mrbOmEErazQrUsb8ssIa9s
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-ams.rpki-client.org