Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/UwddMgzuAWSj588bhhe4DLclThA.roa
File: UwddMgzuAWSj588bhhe4DLclThA.roa (raw, json)
Hash identifier: UDut2M3+t6QjrjPJa89at0O68VyOue7cbniv1jjKM4Q=
Subject key identifier: 53:07:5D:32:0C:EE:01:64:A3:E7:CF:1B:86:17:B8:0C:B7:25:4E:10
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 03F709E8
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/UwddMgzuAWSj588bhhe4DLclThA.roa
Signing time: Sat 01 Jan 2022 00:57:42 +0000
ROA not before: Sat 01 Jan 2022 00:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.156.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66521576 (0x3f709e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Jan 1 00:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53075d320cee0164a3e7cf1b8617b80cb7254e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:5c:9b:71:f0:17:16:38:7c:03:dd:52:85:
4d:72:f7:c5:4f:d8:a1:f2:13:75:d1:4a:dd:4c:67:
aa:76:22:a4:27:48:89:7a:ac:5a:0a:41:9a:81:c6:
39:18:19:e7:dd:f9:b2:ad:fd:37:4d:40:eb:1a:2f:
a9:d4:2a:24:8b:70:fb:1e:cf:05:aa:0d:26:a3:aa:
b4:f1:cb:5f:23:a5:b0:20:26:5d:f3:16:88:4e:ca:
77:6c:f2:6c:58:ac:04:6b:5a:17:e5:71:7f:e5:5f:
7a:a4:05:88:c1:cd:02:8d:96:20:4c:23:c3:cd:90:
61:c2:e2:1c:f7:e4:95:cb:5d:40:e9:65:28:4e:99:
20:43:0a:6c:ed:82:e3:e1:76:27:31:08:56:35:64:
ee:ec:fd:ad:cb:9e:be:2a:cb:c0:6e:df:8b:65:cc:
cc:49:15:ee:7d:7e:cd:3f:68:80:be:79:5c:56:65:
7a:7a:4d:7d:7a:4c:c6:f5:1b:85:e9:ef:5b:f1:02:
2f:99:b0:e8:26:ea:1e:1a:70:e4:83:69:0f:bc:f4:
2b:cd:0c:8e:bc:66:ae:bb:cb:fc:d5:5f:9a:d1:da:
6c:72:0e:80:30:c3:d4:1e:22:10:a4:13:b3:7b:dc:
87:8f:ff:59:d5:e6:c8:15:2c:14:0b:6f:42:9f:fa:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:5D:32:0C:EE:01:64:A3:E7:CF:1B:86:17:B8:0C:B7:25:4E:10
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/UwddMgzuAWSj588bhhe4DLclThA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:42:45:13:b8:e8:33:9f:5c:49:3b:53:15:2a:03:03:81:5e:
46:f0:33:c0:1f:1a:04:31:25:5e:9b:a0:30:5e:4c:87:f7:c9:
f6:77:58:eb:d1:4e:8a:6f:09:fb:11:a2:fe:96:e1:41:73:d0:
c6:3d:cc:6d:25:ee:a4:7c:b4:07:e1:57:98:60:6c:1c:18:f4:
22:f4:27:46:5e:49:2b:72:0e:15:db:9e:2c:4e:04:54:03:0e:
55:69:38:4f:16:56:16:13:2d:8a:d5:51:15:81:2e:62:30:06:
b7:a3:7f:b9:ca:35:52:25:d3:1f:d8:93:df:ad:3a:4e:67:e9:
d8:f9:9b:ac:85:6c:99:d9:2d:5e:ca:d7:2a:dc:a9:c1:9d:de:
f1:c0:df:9d:c7:d2:34:2a:1b:24:0a:9c:6b:df:66:ca:bd:81:
8b:a9:4a:b9:7b:7f:b1:04:a6:49:50:43:a7:6c:1b:da:17:5b:
59:f0:e6:1c:03:8c:f1:4c:cb:f7:f2:a2:a9:00:16:f2:e7:e7:
d9:90:96:4d:0a:81:d1:23:bd:9c:f2:69:57:d9:8d:b8:cf:1d:
66:2a:51:24:69:b0:70:88:42:27:b6:9b:27:88:8f:bb:3f:5b:
02:3b:ac:f6:65:83:79:83:54:47:50:c1:3f:85:17:46:06:08:
79:63:5c:dd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA/cJ6DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NGZlNmI5ZDBjYzFlN2Y2ZTE2YjJhNDZiNDJjYTVlMDFjNzAwMzQ2MB4XDTIyMDEw
MTAwNTc0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTMwNzVkMzIwY2Vl
MDE2NGEzZTdjZjFiODYxN2I4MGNiNzI1NGUxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALq3XJtx8BcWOHwD3VKFTXL3xU/YofITddFK3UxnqnYipCdI
iXqsWgpBmoHGORgZ5935sq39N01A6xovqdQqJItw+x7PBaoNJqOqtPHLXyOlsCAm
XfMWiE7Kd2zybFisBGtaF+Vxf+VfeqQFiMHNAo2WIEwjw82QYcLiHPfklctdQOll
KE6ZIEMKbO2C4+F2JzEIVjVk7uz9rcuevirLwG7fi2XMzEkV7n1+zT9ogL55XFZl
enpNfXpMxvUbhenvW/ECL5mw6CbqHhpw5INpD7z0K80MjrxmrrvL/NVfmtHabHIO
gDDD1B4iEKQTs3vch4//WdXmyBUsFAtvQp/6unkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRTB10yDO4BZKPnzxuGF7gMtyVOEDAfBgNVHSMEGDAWgBQ0/mudDMHn9uFr
Kka0LKXgHHADRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05QNXJuUXpCNV9iaGF5cEd0Q3lsNEJ4d0EwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvNjJkZjM2LWZkMzYtNGJhZi05ZDJlLTExOGFmZWQ3YTVhZS8x
L1V3ZGRNZ3p1QVdTajU4OGJoaGU0RExjbFRoQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
NjJkZjM2LWZkMzYtNGJhZi05ZDJlLTExOGFmZWQ3YTVhZS8xL05QNXJuUXpCNV9i
aGF5cEd0Q3lsNEJ4d0EwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmcEDANBgkqhkiG9w0BAQsFAAOC
AQEAjkJFE7joM59cSTtTFSoDA4FeRvAzwB8aBDElXpugMF5Mh/fJ9ndY69FOim8J
+xGi/pbhQXPQxj3MbSXupHy0B+FXmGBsHBj0IvQnRl5JK3IOFdueLE4EVAMOVWk4
TxZWFhMtitVRFYEuYjAGt6N/uco1UiXTH9iT3606Tmfp2PmbrIVsmdktXsrXKtyp
wZ3e8cDfncfSNCobJAqca99myr2Bi6lKuXt/sQSmSVBDp2wb2hdbWfDmHAOM8UzL
9/KiqQAW8ufn2ZCWTQqB0SO9nPJpV9mNuM8dZipRJGmwcIhCJ7abJ4iPuz9bAjus
9mWDeYNUR1DBP4UXRgYIeWNc3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:27 2024 by rpki-client on console-ams.rpki-client.org