Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/UEPbhGSvZ9EwaNDxUFRM4LOLMaM.roa
File: UEPbhGSvZ9EwaNDxUFRM4LOLMaM.roa (raw, json)
Hash identifier: vPd15ZeHQLgpHwliLlD10Vbm6IAKqzme7viB0j0ioAE=
Subject key identifier: 50:43:DB:84:64:AF:67:D1:30:68:D0:F1:50:54:4C:E0:B3:8B:31:A3
Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial: 023F08F6
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/UEPbhGSvZ9EwaNDxUFRM4LOLMaM.roa
Signing time: Sat 01 Jan 2022 08:56:07 +0000
ROA not before: Sat 01 Jan 2022 08:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 194.115.212.0/22 maxlen: 22
193.98.156.0/24 maxlen: 24
193.102.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37685494 (0x23f08f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Validity
Not Before: Jan 1 08:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5043db8464af67d13068d0f150544ce0b38b31a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:c0:8a:68:c9:b3:cc:d3:51:9b:be:98:4e:
8c:96:5d:d7:80:3e:8d:b6:a1:b7:98:2f:3b:80:e5:
ed:b3:98:4a:6f:9b:af:12:24:3b:39:bc:12:96:fb:
7f:62:5f:c6:00:e5:39:8f:30:e3:89:c4:9c:fd:49:
f8:82:97:a3:8b:40:70:b3:e3:ac:21:7a:c4:df:bd:
33:e3:2c:e4:c2:8b:8c:3f:be:df:8c:c0:ed:21:16:
27:31:2d:a8:3c:30:78:44:20:2a:3c:42:de:de:10:
27:44:0a:e8:6a:f2:d8:f9:14:5e:eb:ad:8b:b2:fb:
a4:58:b6:11:92:a7:24:72:31:cb:ad:8b:5c:91:8d:
5c:c4:8f:b3:65:cf:08:e6:10:81:ac:63:6c:b3:1a:
17:b5:0e:20:55:5c:2b:6a:33:94:65:63:17:3c:75:
1b:91:10:91:7c:a7:4e:6d:8a:5d:41:91:20:1c:5f:
00:2c:85:dc:fb:01:d5:94:ca:ee:f7:25:00:a4:e5:
d9:2a:45:d0:98:08:f9:da:d3:f9:24:54:4e:09:c3:
f1:57:e3:d9:9a:75:1d:ff:6b:b6:6d:51:c4:58:55:
9c:e0:86:01:de:1d:f9:cd:74:0c:10:bd:9a:c9:ac:
dd:40:ac:65:13:71:90:b3:cf:95:ce:8c:2f:d3:6b:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:DB:84:64:AF:67:D1:30:68:D0:F1:50:54:4C:E0:B3:8B:31:A3
X509v3 Authority Key Identifier:
keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/UEPbhGSvZ9EwaNDxUFRM4LOLMaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.98.156.0/24
193.102.132.0/24
194.115.212.0/22
Signature Algorithm: sha256WithRSAEncryption
52:ea:ff:fd:79:2d:ad:01:49:be:51:e3:f0:18:bf:d7:64:0e:
f5:c7:b8:3c:fe:42:73:a0:41:a6:ef:aa:61:76:40:d9:01:d1:
02:cf:55:24:ef:8f:4b:07:c9:29:06:98:02:2c:a3:ca:67:f8:
34:38:2c:4d:28:04:2b:9e:13:1a:9b:9d:fb:d3:a4:62:de:70:
a9:89:16:20:5a:ab:ac:43:1f:05:18:fd:c2:e9:ac:75:9c:3c:
03:5a:7a:a3:90:f0:5c:d6:47:de:0f:f6:e5:2f:22:4b:cc:39:
7e:4b:46:b1:ab:38:23:00:af:2e:b8:36:49:b5:8d:07:28:3f:
7f:fe:6c:08:fb:8a:40:e1:e0:f6:1f:d4:d3:c1:e5:bb:bc:75:
e3:64:77:8c:76:4f:4f:c8:70:b8:55:ca:f1:07:f5:30:f4:47:
35:20:0b:63:a3:42:e7:7c:de:fd:8f:a0:7d:af:98:04:74:33:
95:a8:b9:6b:85:0f:61:23:55:a9:15:16:8f:6e:55:3a:e3:9d:
0e:e0:64:f4:9d:41:60:d7:8c:21:61:36:74:31:f8:4c:26:90:
16:95:95:22:2f:44:8e:3e:44:03:59:90:f8:30:63:5c:6e:4a:
07:bc:d0:67:6a:1e:7b:6d:03:45:6d:b3:77:ec:f9:df:7f:da:
16:86:a2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:53 2024 by rpki-client on console-fra.rpki-client.org