Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UPsCYg-wE87aafYa4a4IYJGZY60.roa
File: UPsCYg-wE87aafYa4a4IYJGZY60.roa (raw, json)
Hash identifier: WVH4hTt/0WsvltwCmKOKUDxi8mtqoXAT+Ng8Pmo80M0=
Subject key identifier: 50:FB:02:62:0F:B0:13:CE:DA:69:F6:1A:E1:AE:08:60:91:99:63:AD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018461237392864636841CC6906D8568624A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UPsCYg-wE87aafYa4a4IYJGZY60.roa
Signing time: Thu 10 Nov 2022 10:43:44 +0000
ROA not before: Thu 10 Nov 2022 10:43:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 194.58.42.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:23:73:92:86:46:36:84:1c:c6:90:6d:85:68:62:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 10 10:43:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50fb02620fb013ceda69f61ae1ae0860919963ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:77:ad:3b:71:12:29:db:80:10:fd:88:67:08:
d4:84:95:ae:19:26:fd:c4:55:78:7b:14:ac:7d:d5:
1f:25:67:d8:9c:90:31:3c:5d:1e:86:14:59:d6:da:
af:af:6e:08:d3:1e:c0:35:c8:97:b9:6f:6e:c0:89:
dc:a6:a1:ec:28:af:98:dc:bc:53:0f:75:05:ac:d0:
64:80:5f:22:1f:d8:70:b2:0d:a8:e6:51:dc:c2:59:
10:c8:54:91:2e:58:55:c6:0c:2a:0c:7f:ce:b5:d3:
1b:e3:a0:4d:ee:b1:81:ed:54:d7:68:ef:4f:1c:05:
17:41:1a:9d:3c:cd:be:ea:50:53:ab:b6:50:98:df:
3c:43:b8:d3:ed:ae:ac:03:d7:17:58:4c:19:03:79:
49:52:71:11:88:97:37:6a:25:1d:8e:fb:5e:e2:08:
12:1c:16:66:c5:47:c1:1a:56:ad:65:71:27:99:b2:
a8:71:6a:81:57:3f:8d:d4:1f:1c:4c:5d:d9:ee:b5:
e6:85:b9:d9:6c:5a:98:31:bb:57:79:8e:a9:e8:83:
94:84:3f:ca:ce:f2:e4:50:7c:92:75:76:eb:7f:e7:
c0:e6:3d:93:a4:df:de:5e:8f:1c:78:00:51:95:bf:
0a:b1:1f:0f:5a:76:05:8e:98:6b:6d:9a:a8:90:29:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FB:02:62:0F:B0:13:CE:DA:69:F6:1A:E1:AE:08:60:91:99:63:AD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UPsCYg-wE87aafYa4a4IYJGZY60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.42.0/24
212.193.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1d:70:a2:ee:4a:0c:10:c4:e4:64:2f:36:51:ae:da:6b:ac:
aa:9f:8f:a6:7f:e4:38:86:83:df:a0:7c:07:7e:bc:ab:db:76:
d0:74:55:6d:af:f8:31:7b:23:93:cf:e3:2e:28:96:35:5c:dd:
0c:68:5d:fc:a4:b4:2c:28:d0:1b:74:ab:ee:f1:6b:2c:8b:ad:
1d:82:ed:13:fb:7e:6c:44:8f:86:d6:da:da:57:ce:c7:b7:30:
89:8f:94:cd:74:1e:aa:35:f9:b9:34:d6:b2:5b:4a:0d:5d:0a:
f4:92:58:a4:fe:72:ae:90:51:7d:07:40:c3:6c:38:4f:7a:5c:
ae:74:a1:b0:8f:34:8b:d6:19:89:88:de:cb:d6:9b:c7:b0:cc:
20:81:ee:94:1c:2b:09:60:1b:fe:0c:2e:df:20:f6:ba:1a:e6:
30:db:b8:bc:34:35:29:64:99:0c:5d:f8:4c:22:b3:bb:69:e0:
5d:b0:e6:4a:0e:31:f6:60:27:b1:e9:f0:ad:07:b8:df:8f:67:
30:07:db:84:3b:bd:12:cb:76:82:ad:b8:ce:d3:06:4b:fc:93:
75:d3:89:99:14:a3:59:4c:37:8f:84:f0:c3:43:53:31:77:f0:
cb:05:8a:c4:7b:a5:06:d5:72:6f:c1:1e:ce:5e:f5:9b:df:9d:
ab:d3:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:04 2023 by rpki-client on console-fra.rpki-client.org