Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/UTCpSmWa3gA7RYZMiBqy-sQ245U.roa
File: UTCpSmWa3gA7RYZMiBqy-sQ245U.roa (raw, json)
Hash identifier: JEWZkLLQQrOnpKJAOc8WqOKgOitlmgPhkIlDCsR6z9Q=
Subject key identifier: 51:30:A9:4A:65:9A:DE:00:3B:45:86:4C:88:1A:B2:FA:C4:36:E3:95
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 014120B4
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/UTCpSmWa3gA7RYZMiBqy-sQ245U.roa
Signing time: Tue 19 Apr 2022 16:37:23 +0000
ROA not before: Tue 19 Apr 2022 16:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.39.10.0/24 maxlen: 24
2a12:1b80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21045428 (0x14120b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Apr 19 16:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5130a94a659ade003b45864c881ab2fac436e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:8a:a6:2f:7e:c3:a3:56:52:9a:0c:4b:b5:
97:e5:95:b4:d5:48:10:31:9f:cd:ed:93:4c:11:f4:
5b:ad:3c:43:83:9c:dd:6e:5f:a4:94:f2:b4:2d:94:
2c:78:87:12:4b:ac:00:fe:ac:ab:53:39:6c:c5:aa:
a5:82:18:36:4f:ce:4b:fc:d5:f4:e7:d9:3a:36:88:
ae:17:38:e6:ba:9a:6d:0e:00:ec:61:89:e6:7a:bc:
a0:a3:21:83:c8:95:3f:df:a8:d4:30:d4:5d:9c:9a:
a1:6f:f0:fd:d4:69:72:9e:d1:13:0f:24:31:df:cc:
cf:7f:ab:8c:4c:bd:53:e2:fd:f5:eb:40:da:59:bf:
e1:71:ce:f6:50:67:4e:fd:59:be:61:22:04:03:bb:
7f:8e:8c:5c:74:39:1a:f4:eb:d0:0c:f6:6e:3a:76:
1f:3c:45:31:8a:68:1e:6d:62:e4:ed:4e:15:ee:f0:
b8:8f:2f:8d:13:3f:ca:30:07:c3:e0:37:b0:12:e0:
44:7a:c7:53:a2:26:d5:8e:67:43:99:f1:5f:63:cd:
f2:11:b6:74:bf:76:9e:1f:4d:cd:40:ea:11:ee:5d:
40:a2:91:09:66:f0:7a:ed:6e:ef:ab:3f:3c:a5:60:
e8:38:48:01:b9:93:fc:7b:e1:6a:f7:4d:1e:2c:75:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:30:A9:4A:65:9A:DE:00:3B:45:86:4C:88:1A:B2:FA:C4:36:E3:95
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/UTCpSmWa3gA7RYZMiBqy-sQ245U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.10.0/24
IPv6:
2a12:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
0b:25:02:3d:55:c2:ef:5b:f2:1e:5a:7f:3b:2e:10:d9:51:15:
d9:7b:45:ef:7d:05:fe:ef:2f:d2:52:86:65:c0:62:ab:e8:59:
ef:8c:d5:5a:1c:1c:b6:a7:ad:0f:38:82:70:9b:9f:10:70:22:
7d:10:ec:11:4a:bd:e4:df:fc:11:44:ac:8e:53:27:1c:33:12:
37:40:b4:6e:d9:b2:a6:de:8f:ca:66:2e:18:37:a8:f9:31:e1:
1b:48:40:82:40:19:2a:99:fe:8c:68:d1:b4:49:14:b0:98:9a:
ff:ad:d1:2f:b0:4e:a7:ad:f0:24:18:c3:cb:10:94:72:66:c1:
17:cc:24:d1:e9:98:9a:65:df:9b:f7:36:1f:9a:9f:2b:86:3f:
48:2f:62:98:b0:b6:c5:b7:72:9c:ac:50:51:ee:53:46:b9:6a:
5e:11:74:1b:4b:0f:2c:d2:98:83:58:75:27:08:a8:f3:b7:39:
f9:0b:94:d0:65:a7:3d:2a:54:0a:c6:48:52:84:e0:bd:ec:7a:
1e:89:24:19:47:45:7e:ba:ce:4a:1f:06:1a:e4:4a:0b:58:2a:
fd:c2:92:35:eb:fa:5f:76:dc:de:ac:42:63:e2:e9:a8:c4:01:
85:8f:bb:47:09:5f:52:ce:e9:41:9c:17:85:cf:4d:4d:52:e6:
99:14:54:6f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAUEgtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZDM5NDc1N2UxNDE2MjAyYTQwMjI5NTZkYmY0OGQ3MDc0NTg1MjBjMB4XDTIyMDQx
OTE2MzcyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTEzMGE5NGE2NTlh
ZGUwMDNiNDU4NjRjODgxYWIyZmFjNDM2ZTM5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALI9iqYvfsOjVlKaDEu1l+WVtNVIEDGfze2TTBH0W608Q4Oc
3W5fpJTytC2ULHiHEkusAP6sq1M5bMWqpYIYNk/OS/zV9OfZOjaIrhc45rqabQ4A
7GGJ5nq8oKMhg8iVP9+o1DDUXZyaoW/w/dRpcp7REw8kMd/Mz3+rjEy9U+L99etA
2lm/4XHO9lBnTv1ZvmEiBAO7f46MXHQ5GvTr0Az2bjp2HzxFMYpoHm1i5O1OFe7w
uI8vjRM/yjAHw+A3sBLgRHrHU6Im1Y5nQ5nxX2PN8hG2dL92nh9NzUDqEe5dQKKR
CWbweu1u76s/PKVg6DhIAbmT/HvhavdNHix1L30CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRRMKlKZZreADtFhkyIGrL6xDbjlTAfBgNVHSMEGDAWgBTNOUdX4UFiAqQC
KVbb9I1wdFhSDDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pUbEhWLUZCWWdLa0FpbFcyX1NOY0hSWVVndy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvOTc1ZTRmLTZjMjYtNDRiYi05YWRhLTJmYzZkMTdmOGI1OC8x
L1VUQ3BTbVdhM2dBN1JZWk1pQnF5LXNRMjQ1VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
OTc1ZTRmLTZjMjYtNDRiYi05YWRhLTJmYzZkMTdmOGI1OC8xL3pUbEhWLUZCWWdL
a0FpbFcyX1NOY0hSWVVndy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALknCjANBAIAAjAHAwUAKhIbgDAN
BgkqhkiG9w0BAQsFAAOCAQEACyUCPVXC71vyHlp/Oy4Q2VEV2XtF730F/u8v0lKG
ZcBiq+hZ74zVWhwctqetDziCcJufEHAifRDsEUq95N/8EUSsjlMnHDMSN0C0btmy
pt6PymYuGDeo+THhG0hAgkAZKpn+jGjRtEkUsJia/63RL7BOp63wJBjDyxCUcmbB
F8wk0emYmmXfm/c2H5qfK4Y/SC9imLC2xbdynKxQUe5TRrlqXhF0G0sPLNKYg1h1
Jwio87c5+QuU0GWnPSpUCsZIUoTgvex6HokkGUdFfrrOSh8GGuRKC1gq/cKSNev6
X3bc3qxCY+LpqMQBhY+7RwlfUs7pQZwXhc9NTVLmmRRUbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:51 2024 by rpki-client on console-fra.rpki-client.org