Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UGuVwLuoTrq-sACgEuQWWi2Z-Bw.roa
File: UGuVwLuoTrq-sACgEuQWWi2Z-Bw.roa (raw, json)
Hash identifier: M37UzyT4vPWn6KrdECXXg7Ji81uJFCZCvg/FsV62F1s=
Subject key identifier: 50:6B:95:C0:BB:A8:4E:BA:BE:B0:00:A0:12:E4:16:5A:2D:99:F8:1C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01848E7A088798973B7CCC817AD2C8068AF9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UGuVwLuoTrq-sACgEuQWWi2Z-Bw.roa
Signing time: Sat 19 Nov 2022 06:01:13 +0000
ROA not before: Sat 19 Nov 2022 06:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398395
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8e:7a:08:87:98:97:3b:7c:cc:81:7a:d2:c8:06:8a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 19 06:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=506b95c0bba84ebabeb000a012e4165a2d99f81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:a3:87:2b:5a:c5:0b:7a:af:f1:50:b5:b1:
33:2d:98:3a:2b:af:f4:da:84:1a:47:03:5f:78:44:
9f:ec:74:8d:44:e4:55:91:b4:1e:7b:d1:24:95:cf:
03:eb:d8:19:5a:f0:80:ad:ac:3e:f3:d5:4b:7c:75:
58:ac:5f:69:f3:ee:a0:42:51:26:1e:3a:64:4d:16:
e0:4d:1c:34:dd:dd:b6:aa:b5:8d:41:c4:50:3b:06:
bf:3a:97:86:a8:6c:a0:c9:60:79:43:2e:e0:4f:93:
ed:dc:90:9f:5f:8d:c1:48:59:d0:ec:fa:0d:6e:e4:
6d:87:5d:3c:36:87:f8:57:29:5d:a0:e9:a8:1c:e5:
4b:35:f5:1c:aa:d2:a7:29:e5:c1:35:e9:33:ae:b5:
b8:15:67:b0:34:16:17:fc:5f:3c:97:41:83:33:53:
17:cb:07:2b:a1:d2:4d:7d:50:59:55:86:f4:45:5e:
93:08:19:f2:55:57:0b:13:1b:23:a0:cc:3b:3f:77:
b0:19:f0:60:54:74:62:5e:0c:c1:09:9f:54:a7:a9:
9e:bc:a1:14:b2:f6:db:6f:ef:0d:25:14:ee:c5:d7:
d5:2d:4e:f7:e2:6e:44:de:9e:1d:6b:dc:b0:77:4c:
7a:2b:f5:30:43:96:96:a2:dd:7b:3f:67:37:db:3e:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:95:C0:BB:A8:4E:BA:BE:B0:00:A0:12:E4:16:5A:2D:99:F8:1C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UGuVwLuoTrq-sACgEuQWWi2Z-Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:71:a1:13:4b:48:04:52:ef:2d:83:2a:41:07:7c:c8:bd:9f:
f6:ba:3f:dc:1d:fb:58:de:5e:29:6b:92:d6:31:5a:26:fa:1a:
d1:6a:06:5c:a1:ee:72:e9:1a:b1:47:03:80:47:3c:83:a5:a5:
c6:98:6f:c9:92:2f:e0:89:11:d7:59:3c:01:80:77:ef:d4:b1:
a6:4b:54:d1:ca:1e:0d:9a:a5:38:c2:b7:4d:e1:af:ce:93:66:
dd:8d:e2:81:33:77:44:03:f0:46:2e:eb:33:41:63:1d:2c:10:
40:3a:58:2d:af:b6:d2:71:d2:c4:ed:f1:2d:33:54:d5:3d:47:
cc:c9:bf:06:32:0c:f7:e7:85:27:df:7c:e2:bd:2b:b5:36:28:
c1:62:1f:46:86:f7:61:a3:af:63:d4:63:43:cf:49:4e:66:42:
1f:03:3d:54:e7:38:55:e9:61:e9:e2:87:86:f0:37:92:6b:94:
91:0b:63:cb:52:3c:a2:c1:9b:6f:a5:c5:6a:21:43:f3:b2:a6:
c6:85:8e:8b:b3:d2:61:bc:92:c3:fd:be:77:69:a8:6d:61:14:
4d:f6:37:77:a8:c7:22:f3:ba:64:ae:8d:ec:1b:26:8f:5f:3c:
eb:52:c0:17:fd:6c:b6:a3:08:a1:57:da:9d:d4:e8:78:50:90:
ea:b6:de:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSOegiHmJc7fMyBetLIBor5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjIxMTE5MDYwMTEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDZiOTVjMGJiYTg0ZWJhYmViMDAwYTAxMmU0MTY1YTJkOTlmODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg+jhytaxQt6r/FQtbEzLZg6K6/0
2oQaRwNfeESf7HSNRORVkbQee9Eklc8D69gZWvCAraw+89VLfHVYrF9p8+6gQlEm
HjpkTRbgTRw03d22qrWNQcRQOwa/OpeGqGygyWB5Qy7gT5Pt3JCfX43BSFnQ7PoN
buRth108Nof4VyldoOmoHOVLNfUcqtKnKeXBNekzrrW4FWewNBYX/F88l0GDM1MX
ywcrodJNfVBZVYb0RV6TCBnyVVcLExsjoMw7P3ewGfBgVHRiXgzBCZ9Up6mevKEU
svbbb+8NJRTuxdfVLU734m5E3p4da9ywd0x6K/UwQ5aWot17P2c32z5aXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFBrlcC7qE66vrAAoBLkFlotmfgcMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvVUd1VndMdW9UcnEtc0FDZ0V1UVdXaTJaLUJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXouMA0G
CSqGSIb3DQEBCwUAA4IBAQCbcaETS0gEUu8tgypBB3zIvZ/2uj/cHftY3l4pa5LW
MVom+hrRagZcoe5y6RqxRwOARzyDpaXGmG/Jki/giRHXWTwBgHfv1LGmS1TRyh4N
mqU4wrdN4a/Ok2bdjeKBM3dEA/BGLuszQWMdLBBAOlgtr7bScdLE7fEtM1TVPUfM
yb8GMgz354Un33zivSu1NijBYh9Ghvdho69j1GNDz0lOZkIfAz1U5zhV6WHp4oeG
8DeSa5SRC2PLUjyiwZtvpcVqIUPzsqbGhY6Ls9JhvJLD/b53aahtYRRN9jd3qMci
87pkro3sGyaPXzzrUsAX/Wy2owihV9qd1Oh4UJDqtt7g
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org