Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/UBGaFQYczwjLbdDs0EvhbkOiPAA.roa
File: UBGaFQYczwjLbdDs0EvhbkOiPAA.roa (raw, json)
Hash identifier: rdT8IAXbqTFANxfLIsQTdbCTUD5qGaiDXrfAb9neDdQ=
Subject key identifier: 50:11:9A:15:06:1C:CF:08:CB:6D:D0:EC:D0:4B:E1:6E:43:A2:3C:00
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAE7A29BABA1EB1008EE7A8186B620
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/UBGaFQYczwjLbdDs0EvhbkOiPAA.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49048
IP address blocks: 2a02:2698:7400::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e7:a2:9b:ab:a1:eb:10:08:ee:7a:81:86:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50119a15061ccf08cb6dd0ecd04be16e43a23c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:e0:8a:9d:a4:d0:4a:1b:26:80:27:15:1b:
0e:68:70:38:58:17:e2:76:d5:5d:6e:19:b0:d2:7d:
23:77:52:56:b6:ec:86:88:26:3a:d8:73:65:4a:99:
b1:53:29:58:3b:7b:a0:cb:d3:34:50:a9:6a:7c:bc:
32:39:9f:bc:70:14:cc:66:1b:9b:a9:34:9f:a2:dd:
1e:d0:92:66:f2:aa:ba:17:99:54:93:58:ba:bf:55:
f3:ed:bf:61:ff:06:fb:2f:4b:05:aa:4c:12:fe:d8:
4d:14:14:d7:f0:20:46:cc:a5:88:3e:04:91:ca:0a:
db:84:55:57:8d:64:d5:e2:87:67:f8:0c:04:60:e3:
04:f3:d9:9a:c2:8a:0e:9b:8f:67:50:03:dc:60:13:
40:36:29:74:6a:74:b1:56:7f:32:9a:a5:18:3e:ed:
b4:d8:38:07:07:cd:f2:3f:8d:13:91:78:54:f1:1d:
96:fb:6f:98:33:28:d0:7e:10:9b:37:56:06:5c:91:
4e:02:3d:b0:20:b2:ad:b0:3b:a2:c8:ad:87:46:73:
04:45:51:1a:1a:20:d7:67:9b:f7:93:1a:ef:89:24:
1c:5b:0b:a2:33:d3:07:ef:30:8f:25:55:82:69:bc:
16:08:9d:ed:3b:de:4a:bf:73:7c:12:71:4f:ef:f6:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:11:9A:15:06:1C:CF:08:CB:6D:D0:EC:D0:4B:E1:6E:43:A2:3C:00
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/UBGaFQYczwjLbdDs0EvhbkOiPAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7400::/38
Signature Algorithm: sha256WithRSAEncryption
32:e4:72:28:9e:23:aa:3a:2f:96:6e:8b:47:1f:98:55:b5:a9:
1b:dc:81:b1:9e:33:66:7c:09:87:9b:87:8d:2c:4a:b9:d4:6b:
05:88:6c:1c:7d:16:c2:26:5d:fe:89:dd:b3:97:78:dd:fc:77:
15:0f:30:8b:0f:6f:74:24:3f:d8:b9:92:5d:19:88:73:49:ab:
e9:6c:ec:ab:23:7b:c8:41:49:af:19:b4:31:d3:2e:86:78:77:
78:90:5b:c4:67:34:fb:e3:7d:93:f6:9f:5d:9b:73:ff:59:e1:
9b:b0:2d:63:45:85:82:19:c3:35:3e:1f:a1:ca:d1:19:ce:1b:
18:55:9e:a3:80:b4:8f:4d:17:33:c5:06:56:ba:11:6c:af:35:
52:76:0c:b3:0d:d4:5b:2c:9f:07:b4:e3:39:f1:af:eb:28:4f:
a7:8a:0a:d0:9f:39:f7:31:a3:e5:7e:ff:9d:30:2a:17:d0:53:
de:da:3f:a1:91:fb:76:c9:12:07:3f:4c:c3:79:e0:ac:84:3c:
f7:e9:1a:05:13:e8:51:a1:4e:76:7f:4d:52:20:ce:78:15:ed:
21:67:7d:e7:a6:63:4c:d3:b1:b3:17:b1:f8:ce:b5:aa:26:b7:
16:9b:c2:12:28:66:bf:ab:70:a8:6a:08:f8:64:d5:34:9f:22:
03:c4:8a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:37 2025 by rpki-client