Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/cUd8aT6ef2rhOynSUNGddEghxj0.roa
File: cUd8aT6ef2rhOynSUNGddEghxj0.roa (raw, json)
Hash identifier: swfC7vywvurSIZEOYa3iQZPEvLQb21zUTjBswlHzOhQ=
Subject key identifier: 71:47:7C:69:3E:9E:7F:6A:E1:3B:29:D2:50:D1:9D:74:48:21:C6:3D
Certificate issuer: /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial: 4ADB
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/cUd8aT6ef2rhOynSUNGddEghxj0.roa
Signing time: Tue 11 Jan 2022 13:25:47 +0000
ROA not before: Tue 11 Jan 2022 13:25:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12335
IP address blocks: 212.53.32.0/19 maxlen: 20
2a02:2f8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19163 (0x4adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Validity
Not Before: Jan 11 13:25:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71477c693e9e7f6ae13b29d250d19d744821c63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:47:9a:a2:ec:89:b1:66:eb:43:a3:90:fd:c2:
7e:ee:89:dd:8e:69:7a:6d:4d:4f:ae:50:7a:93:4a:
d5:a4:35:aa:e2:04:89:13:1a:46:77:96:c4:97:b9:
70:13:c1:0a:d5:44:44:a0:a9:e9:27:a9:b6:8e:1e:
a0:3b:3c:7f:f2:0c:2d:9f:c3:23:ab:3e:d1:ed:f1:
62:6a:75:6f:c4:c3:6f:63:51:62:00:c1:e0:83:57:
4c:5d:b7:1d:d2:da:f7:6c:b2:80:a6:06:84:51:fa:
65:1c:cb:a1:40:20:22:7c:27:3f:55:4e:1d:fa:18:
52:2a:70:d9:0f:65:47:b6:62:b3:c7:8d:06:c9:fe:
a8:58:b0:d6:c9:19:7b:a8:b0:40:c6:ee:7a:16:ca:
0a:f8:1d:6a:17:98:ab:15:e3:d4:0a:38:72:1b:a6:
b8:00:d2:e5:2d:c9:40:0e:4f:9f:59:8b:01:3f:da:
85:a8:f4:9f:19:fe:4c:0b:7b:c4:dc:48:79:49:b9:
7e:b9:d4:67:91:10:c1:bd:eb:96:d7:90:85:20:34:
49:f6:6b:70:f3:a0:d8:d9:05:cd:c1:f3:08:31:14:
93:ff:ee:f9:8d:fe:0d:16:93:7a:bf:f3:d0:d6:05:
e4:5b:97:f3:7b:d7:da:b5:90:35:57:1a:0e:50:7d:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:47:7C:69:3E:9E:7F:6A:E1:3B:29:D2:50:D1:9D:74:48:21:C6:3D
X509v3 Authority Key Identifier:
keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/cUd8aT6ef2rhOynSUNGddEghxj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.53.32.0/19
IPv6:
2a02:2f8::/32
Signature Algorithm: sha256WithRSAEncryption
10:a8:ee:58:03:20:32:77:e6:d8:d0:e6:25:b6:f2:20:41:e8:
b4:37:fc:78:13:09:00:3f:3a:1f:07:ba:36:2f:32:65:58:8d:
be:ec:33:1d:bc:bd:9c:67:4e:ae:71:b4:79:62:e4:36:cb:cd:
0f:48:1d:1e:21:08:d5:6a:b1:96:80:2e:b9:60:59:31:8b:ab:
2d:27:30:a3:6e:b3:c3:a8:bf:76:bc:2e:57:37:09:19:21:ff:
06:87:0e:8b:fc:9b:f7:5b:7e:0e:83:56:ff:d3:4b:dc:00:44:
58:3f:fe:16:58:15:d9:6f:42:26:e6:0f:d3:83:29:75:56:b5:
50:da:40:5e:cd:aa:d3:fd:9d:30:fd:ab:e8:f7:e5:f5:ea:16:
08:ad:b5:73:30:7c:6f:2f:06:20:09:f8:5b:91:85:a9:89:2b:
f9:24:c4:bb:fe:14:47:32:9a:68:10:86:ed:ba:ec:a9:28:ca:
30:25:f7:5a:75:33:f1:67:86:39:53:18:90:0f:c0:59:8e:9e:
1d:89:1e:12:51:51:84:fa:37:0e:93:89:69:5a:53:2f:64:0a:
6e:7d:65:cd:73:d5:4b:06:76:1d:e5:48:c8:b3:05:17:9d:65:
d1:29:d1:39:8b:31:61:4a:b3:e0:07:5f:d4:41:b6:dc:22:b3:
ea:04:94:63
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgICStswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTA2
NTZjYjQ3NzdkMTRiNWViMjY0YzZiMDMyYzhiYTM3NTZmMmFlNTAeFw0yMjAxMTEx
MzI1NDdaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDcxNDc3YzY5M2U5ZTdm
NmFlMTNiMjlkMjUwZDE5ZDc0NDgyMWM2M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjR5qi7ImxZutDo5D9wn7uid2OaXptTU+uUHqTStWkNariBIkT
GkZ3lsSXuXATwQrVRESgqeknqbaOHqA7PH/yDC2fwyOrPtHt8WJqdW/Ew29jUWIA
weCDV0xdtx3S2vdssoCmBoRR+mUcy6FAICJ8Jz9VTh36GFIqcNkPZUe2YrPHjQbJ
/qhYsNbJGXuosEDG7noWygr4HWoXmKsV49QKOHIbprgA0uUtyUAOT59ZiwE/2oWo
9J8Z/kwLe8TcSHlJuX651GeREMG965bXkIUgNEn2a3DzoNjZBc3B8wgxFJP/7vmN
/g0Wk3q/89DWBeRbl/N719q1kDVXGg5QfcuXAgMBAAGjggIYMIICFDAdBgNVHQ4E
FgQUcUd8aT6ef2rhOynSUNGddEghxj0wHwYDVR0jBBgwFoAUUGVstHd9FLXrJkxr
AyyLo3VvKuUwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9V
R1ZzdEhkOUZMWHJKa3hyQXl5TG8zVnZLdVUuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxULzIxL2IwY2QyZS00ODY0LTRhMzQtODJhNS1lN2M0NDQzNDY3NjAvMS9j
VWQ4YVQ2ZWYycmhPeW5TVU5HZGRFZ2h4ajAucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2Iw
Y2QyZS00ODY0LTRhMzQtODJhNS1lN2M0NDQzNDY3NjAvMS9VR1ZzdEhkOUZMWHJK
a3hyQXl5TG8zVnZLdVUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYI
KwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAXUNSAwDQQCAAIwBwMFACoCAvgwDQYJ
KoZIhvcNAQELBQADggEBABCo7lgDIDJ35tjQ5iW28iBB6LQ3/HgTCQA/Oh8HujYv
MmVYjb7sMx28vZxnTq5xtHli5DbLzQ9IHR4hCNVqsZaALrlgWTGLqy0nMKNus8Oo
v3a8Llc3CRkh/waHDov8m/dbfg6DVv/TS9wARFg//hZYFdlvQibmD9ODKXVWtVDa
QF7NqtP9nTD9q+j35fXqFgittXMwfG8vBiAJ+FuRhamJK/kkxLv+FEcymmgQhu26
7KkoyjAl91p1M/FnhjlTGJAPwFmOnh2JHhJRUYT6Nw6TiWlaUy9kCm59Zc1z1UsG
dh3lSMizBRedZdEp0TmLMWFKs+AHX9RBttwis+oElGM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:06 2025 by rpki-client