Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/UbIXjB44nZW6ONtL96E9dzEG6j8.roa
File: UbIXjB44nZW6ONtL96E9dzEG6j8.roa (raw, json)
Hash identifier: 42IKT4VbKWVlsvqHHED+EO2qJFdoXYNBc6oppIAlSIU=
Subject key identifier: 51:B2:17:8C:1E:38:9D:95:BA:38:DB:4B:F7:A1:3D:77:31:06:EA:3F
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 1A1B28E0
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/UbIXjB44nZW6ONtL96E9dzEG6j8.roa
Signing time: Sat 01 Jan 2022 06:52:03 +0000
ROA not before: Sat 01 Jan 2022 06:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196968
IP address blocks: 185.69.180.0/22 maxlen: 22
178.21.0.0/21 maxlen: 21
217.61.232.0/22 maxlen: 22
199.247.56.0/21 maxlen: 21
176.10.48.0/21 maxlen: 21
2a00:6e00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437987552 (0x1a1b28e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: Jan 1 06:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51b2178c1e389d95ba38db4bf7a13d773106ea3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2f:f8:a6:46:52:6d:02:0a:af:9b:84:b5:f6:
26:a3:b4:c5:9d:4e:58:d0:32:04:57:bc:9f:8d:39:
50:74:43:4c:f2:ff:42:75:ec:ba:28:08:c1:d8:ce:
94:bd:68:12:27:e6:00:42:11:0b:33:eb:ca:dd:61:
e0:16:0d:91:68:e9:08:8d:7d:f2:09:09:9a:29:2a:
95:20:50:f3:23:d8:8a:87:35:0a:7d:62:1b:f8:30:
e2:d6:85:0b:33:0f:0a:b9:55:65:af:4d:ff:1c:a6:
8c:80:0e:6c:b5:ac:c3:69:ae:1b:ae:c8:02:76:d4:
ad:a3:2c:51:3e:8f:ca:fd:1f:c6:14:e1:a2:72:d1:
24:6f:36:6a:b8:ee:2b:af:56:39:5f:dc:a1:f0:0a:
a3:d5:01:86:70:88:06:d8:dd:72:1b:dc:a1:78:01:
94:2e:bf:61:f6:b9:c6:b8:39:f6:ca:33:48:90:c9:
43:e0:89:22:cf:90:4d:a1:8f:0f:b4:d7:63:ad:3a:
90:97:f5:00:57:96:80:9c:d5:09:bf:2e:9f:fa:7b:
69:9c:eb:63:08:c1:b0:8e:72:9f:9c:fc:08:42:4e:
cf:df:3a:89:76:b2:82:fd:47:89:a1:26:a2:14:4b:
29:4e:c4:f7:e5:83:fc:30:54:4b:4f:1b:22:07:ae:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B2:17:8C:1E:38:9D:95:BA:38:DB:4B:F7:A1:3D:77:31:06:EA:3F
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/UbIXjB44nZW6ONtL96E9dzEG6j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.48.0/21
178.21.0.0/21
185.69.180.0/22
199.247.56.0/21
217.61.232.0/22
IPv6:
2a00:6e00::/32
Signature Algorithm: sha256WithRSAEncryption
0b:4a:f0:2f:68:8f:3b:73:eb:6f:97:1d:19:d3:c9:56:39:42:
ba:99:77:85:a3:ea:40:89:7e:51:17:0c:c0:bf:86:f3:5a:ba:
5d:0f:c0:f3:a9:1e:62:7a:52:c5:92:9a:05:69:cc:cd:e8:37:
ac:ee:a5:1a:a3:eb:10:84:26:1c:c4:f3:9b:2a:20:54:66:7a:
cb:b1:28:a9:75:46:1f:03:ad:4f:61:d5:76:62:6c:fe:f3:88:
e5:8e:fc:21:16:6f:35:00:7d:61:06:ad:77:46:9c:54:53:60:
8f:b0:f6:00:26:49:45:ce:31:66:41:18:12:04:e2:b3:b0:d1:
cc:24:f0:61:19:52:3e:69:09:49:2e:8e:6c:9c:2e:8b:a8:f2:
44:9e:2f:86:ce:3b:57:e4:53:4f:c0:84:e2:a2:ea:80:85:8d:
79:b9:ff:6b:8d:bd:59:47:5e:39:54:97:97:70:8e:0b:8d:5d:
74:d2:2b:50:b1:ad:e3:cb:0e:42:bb:04:89:1a:4b:b1:b4:14:
a3:f2:43:68:39:4a:da:cc:c1:ef:e8:3c:14:97:7c:5b:53:10:
9b:ef:f4:48:01:65:3d:99:53:81:1b:16:79:0f:11:b6:b1:e2:
ec:13:4b:70:a4:c8:28:27:60:93:33:c2:50:d5:78:23:34:55:
19:19:d3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:18 2024 by rpki-client on console-ams.rpki-client.org