Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Ugu1J02A8JfukhqjeTLmB_GYNBA.roa
File: Ugu1J02A8JfukhqjeTLmB_GYNBA.roa (raw, json)
Hash identifier: PMX/u/AyKgwl0oqGUPrr+XfryCLZaGincz3J/d/E8lo=
Subject key identifier: 52:0B:B5:27:4D:80:F0:97:EE:92:1A:A3:79:32:E6:07:F1:98:34:10
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018391ADC72AD8C8E64D45E6007659E7D1CC
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Ugu1J02A8JfukhqjeTLmB_GYNBA.roa
Signing time: Sat 01 Oct 2022 03:53:48 +0000
ROA not before: Sat 01 Oct 2022 03:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 213.139.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:91:ad:c7:2a:d8:c8:e6:4d:45:e6:00:76:59:e7:d1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Oct 1 03:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=520bb5274d80f097ee921aa37932e607f1983410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:09:c5:26:bd:46:01:bc:0d:52:d1:c1:cb:
a5:f3:aa:18:20:5f:0e:8c:c8:b2:a8:a2:ee:98:0b:
50:db:2f:e1:04:a2:6d:5b:57:69:63:9b:0f:f4:56:
f9:bd:ba:77:8d:8a:36:cb:f2:bc:a3:0a:86:91:d7:
9e:bb:c2:55:a4:8c:d3:a1:4d:88:44:39:1f:95:1e:
34:c7:b4:d7:3d:f3:1a:e9:d1:b0:ab:b4:ec:89:10:
a7:d1:ba:21:b3:3f:7c:c6:b6:1b:19:76:78:b1:ec:
0c:96:4a:d6:b9:11:b1:43:31:e5:25:15:86:30:15:
8c:3a:e2:7d:f5:57:e7:49:40:bc:62:bd:5f:37:6d:
8f:6a:f0:37:3c:e2:c2:4b:df:63:dd:64:c1:a7:ce:
8e:b4:75:ad:50:17:cf:73:88:e1:dc:d4:06:73:87:
0d:25:e8:f1:01:9a:0e:d5:8b:30:e8:ad:2b:42:ec:
88:6f:6a:16:9b:c8:43:c9:7f:ce:cb:40:aa:6f:76:
83:f1:94:a4:ee:c8:c3:4e:bc:d2:03:8d:ca:f7:26:
98:7c:0e:02:9f:bb:d0:62:f5:95:e1:f2:e9:71:f3:
7b:8b:69:13:88:a9:46:04:4e:61:3d:37:87:e0:c0:
51:e1:2d:20:9a:7b:16:c0:32:78:42:b8:e0:04:1a:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0B:B5:27:4D:80:F0:97:EE:92:1A:A3:79:32:E6:07:F1:98:34:10
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/Ugu1J02A8JfukhqjeTLmB_GYNBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:7d:e8:6d:04:01:80:32:96:cc:23:0b:65:e4:f4:51:24:cf:
1c:16:2b:a3:fc:32:b3:46:88:72:06:33:f8:66:9a:54:b5:c0:
01:f5:1e:fc:09:09:11:ba:70:86:d3:f0:ac:d1:13:dd:9e:1d:
63:ca:d9:b8:9b:35:bb:5f:92:24:e5:0d:e8:56:6b:7c:ae:22:
c5:ad:5f:8d:22:59:c0:0e:c3:24:52:58:6f:28:fe:fe:c9:2d:
80:82:af:05:b1:d8:bb:16:40:d8:1e:32:62:39:e9:12:fc:ab:
05:4d:28:c5:5f:ca:b4:d3:83:c4:cc:d7:08:47:af:20:a1:eb:
34:7e:b4:30:46:6c:4b:7b:9d:b1:d0:68:87:b9:e9:85:a6:81:
5e:fa:5d:7d:6a:a5:16:e6:69:24:46:cc:6b:4a:3b:74:a3:03:
21:62:61:e2:b1:ce:0e:3f:8e:d2:82:03:b4:53:b9:12:e6:72:
01:fa:2b:b1:80:e4:89:3d:dc:75:31:bf:a0:41:17:00:0c:84:
af:02:61:f0:be:d7:7c:bc:a7:67:43:2e:9a:0b:7c:71:dc:23:
31:88:cc:4c:8a:bb:35:01:88:6d:87:ac:17:b9:fe:14:05:e7:
12:51:a9:be:fd:4d:a0:18:dd:68:5e:f2:33:9a:34:11:f0:0c:
8e:52:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org