Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/u6JA_p78jSAEpVCu6SVaifrEg4k.roa
File: u6JA_p78jSAEpVCu6SVaifrEg4k.roa (raw, json)
Hash identifier: 2dSSgJYHRXvChFONYQa5uptCU94USt/eb9VoZl5PtzA=
Subject key identifier: BB:A2:40:FE:9E:FC:8D:20:04:A5:50:AE:E9:25:5A:89:FA:C4:83:89
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 0187DC504EDFE41CBB8AE25E02C88235EF02
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/u6JA_p78jSAEpVCu6SVaifrEg4k.roa
Signing time: Tue 02 May 2023 11:54:23 +0000
ROA not before: Tue 02 May 2023 11:54:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 193.39.182.0/24 maxlen: 24
193.39.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:50:4e:df:e4:1c:bb:8a:e2:5e:02:c8:82:35:ef:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: May 2 11:54:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bba240fe9efc8d2004a550aee9255a89fac48389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:78:53:ba:46:a8:28:bf:9d:cd:68:30:e3:
81:53:45:25:db:78:f3:47:39:fa:06:05:d1:23:61:
3d:da:13:d9:7c:e8:c4:c1:a2:43:0d:58:18:6e:82:
a2:31:6c:74:bb:a5:27:5b:a6:6d:99:df:23:0a:9b:
29:87:53:de:28:4c:74:a2:de:10:f8:98:83:9d:e5:
62:4b:cd:ff:c9:37:75:3a:f9:55:3e:59:33:50:fd:
c7:ab:eb:9c:5c:7a:99:bb:da:1c:96:e2:77:80:75:
de:48:1e:a6:62:8c:2d:c0:3d:55:76:a9:d1:db:27:
1b:16:df:f5:cc:bc:d8:57:b1:d6:a1:8c:6b:9b:6e:
3d:92:03:84:29:2e:44:c7:97:aa:33:22:56:7c:6d:
f8:19:7a:fc:85:51:23:8e:24:fc:51:f7:e6:9e:39:
25:c3:16:19:0e:e3:66:d2:ac:88:fc:1d:bc:49:ab:
90:d4:7f:8a:ab:3b:f1:01:3a:53:4a:a0:68:d5:77:
26:87:0d:76:b5:70:68:51:c9:5e:e6:e9:99:83:65:
9a:1d:0d:52:73:d7:f9:e0:af:b5:7b:c6:7e:e6:57:
28:ac:20:50:e2:90:f5:aa:19:e3:5a:de:9a:54:7e:
9e:45:09:48:00:f4:b6:8b:eb:7c:a5:1b:63:e9:83:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:40:FE:9E:FC:8D:20:04:A5:50:AE:E9:25:5A:89:FA:C4:83:89
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/u6JA_p78jSAEpVCu6SVaifrEg4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.182.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:12:ea:26:b7:87:f6:fe:54:30:fe:e1:40:c4:b2:b0:bf:f0:
c1:62:e7:f7:dd:56:be:17:4f:7a:51:5b:fe:cb:8b:78:72:f0:
d9:05:9f:b1:47:03:ac:b0:73:bf:02:49:ef:ae:84:85:d3:7e:
55:4e:3c:d8:73:bc:d7:a2:b3:b9:e6:42:17:d9:ee:ad:e0:21:
26:ae:c4:00:9e:a6:80:fe:f2:46:fa:20:2b:b4:11:2b:6d:63:
7e:86:55:91:56:89:ef:9f:a6:10:ce:36:b9:44:46:b1:4d:84:
2e:cf:1a:38:48:ac:81:8d:9c:e2:70:b2:94:02:90:54:be:f7:
b0:f8:88:04:72:cb:a6:97:45:17:97:2e:03:71:ea:78:06:3b:
e1:24:68:1d:fb:fa:0b:de:fa:2b:83:b0:37:9e:fb:fd:e0:f7:
d9:37:00:84:b9:36:93:4d:7a:0c:f0:64:f9:c6:3f:f7:4e:5f:
a1:00:2e:00:15:56:01:d1:10:89:cf:30:95:2a:cb:50:a1:a3:
f9:f1:38:cd:b9:0b:3f:2e:c3:6e:24:51:b8:a7:28:d4:b0:19:
7c:76:33:3c:44:42:fb:26:f9:cd:8d:0b:19:7c:aa:04:ab:da:
f6:60:05:4c:ce:1a:6e:71:de:99:eb:93:c7:12:86:a8:3e:a4:
f9:7d:0f:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfcUE7f5By7iuJeAsiCNe8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTY3MGE2ZWQ0Yzc4ZmRkNzc2ODY3OTJmN2UwODc1OTg5
MDZmNzMwHhcNMjMwNTAyMTE1NDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmEyNDBmZTllZmM4ZDIwMDRhNTUwYWVlOTI1NWE4OWZhYzQ4Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIx4U7pGqCi/nc1oMOOBU0Ul23jz
Rzn6BgXRI2E92hPZfOjEwaJDDVgYboKiMWx0u6UnW6Ztmd8jCpsph1PeKEx0ot4Q
+JiDneViS83/yTd1OvlVPlkzUP3Hq+ucXHqZu9ocluJ3gHXeSB6mYowtwD1VdqnR
2ycbFt/1zLzYV7HWoYxrm249kgOEKS5Ex5eqMyJWfG34GXr8hVEjjiT8Uffmnjkl
wxYZDuNm0qyI/B28SauQ1H+KqzvxATpTSqBo1Xcmhw12tXBoUcle5umZg2WaHQ1S
c9f54K+1e8Z+5lcorCBQ4pD1qhnjWt6aVH6eRQlIAPS2i+t8pRtj6YPiMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLuiQP6e/I0gBKVQruklWon6xIOJMB8GA1UdIwQY
MBaAFNzmcKbtTHj913aGeS9+CHWYkG9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAt
ZjA2ZTIzNDMyMjczLzEvdTZKQV9wNzhqU0FFcFZDdTZTVmFpZnJFZzRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAtZjA2ZTIzNDMyMjcz
LzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSe2MA0G
CSqGSIb3DQEBCwUAA4IBAQCMEuomt4f2/lQw/uFAxLKwv/DBYuf33Va+F096UVv+
y4t4cvDZBZ+xRwOssHO/AknvroSF035VTjzYc7zXorO55kIX2e6t4CEmrsQAnqaA
/vJG+iArtBErbWN+hlWRVonvn6YQzja5REaxTYQuzxo4SKyBjZzicLKUApBUvvew
+IgEcsuml0UXly4Dcep4BjvhJGgd+/oL3vorg7A3nvv94PfZNwCEuTaTTXoM8GT5
xj/3Tl+hAC4AFVYB0RCJzzCVKstQoaP58TjNuQs/LsNuJFG4pyjUsBl8djM8REL7
JvnNjQsZfKoEq9r2YAVMzhpucd6Z65PHEoaoPqT5fQ8L
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:13 2025 by rpki-client