Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ubRF-TCMcDkcJTzWW8ZliKtcIIc.roa
File: ubRF-TCMcDkcJTzWW8ZliKtcIIc.roa (raw, json)
Hash identifier: YCUK+PqfvYYX0irxAT626FIJzeg/S3qdR7JM8hQTBJM=
Subject key identifier: B9:B4:45:F9:30:8C:70:39:1C:25:3C:D6:5B:C6:65:88:AB:5C:20:87
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E656438D2E82E0C5C633EAE5F99ED
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ubRF-TCMcDkcJTzWW8ZliKtcIIc.roa
Signing time: Mon 02 Jan 2023 06:14:55 +0000
ROA not before: Mon 02 Jan 2023 06:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208063
IP address blocks: 2a0c:b641:460::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:65:64:38:d2:e8:2e:0c:5c:63:3e:ae:5f:99:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b445f9308c70391c253cd65bc66588ab5c2087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:e0:8d:02:cc:75:2a:d4:59:d3:41:ff:48:
2a:c9:d2:23:aa:95:54:ae:17:10:e8:69:4f:16:ad:
ab:12:f2:25:c0:c3:e0:2c:1a:ac:78:8b:dc:da:7e:
74:4e:6b:58:7c:b3:a4:28:64:b6:46:1d:2c:2e:07:
ca:11:b5:48:9a:91:e1:4f:94:c1:13:0f:33:39:04:
bb:2b:f6:5e:bf:9f:5a:1b:d7:da:c7:41:fc:91:dc:
bf:d7:6a:bc:42:05:4d:d4:86:63:06:00:c2:5e:91:
a2:ee:6b:0c:12:19:ec:33:c1:21:79:27:ed:74:05:
e5:0e:24:09:cf:de:c1:94:22:5b:03:62:1d:02:52:
3f:ec:bd:9d:ab:ce:c5:06:fb:b1:40:62:58:6d:50:
cf:5e:21:cf:4f:63:06:b5:7f:e9:a2:7b:5a:8d:11:
25:0b:8e:8a:a0:c6:ac:4b:b1:37:0d:8d:47:4c:ba:
cd:9e:d8:34:6d:a5:95:1b:40:51:38:5a:1d:bf:28:
5d:a7:c1:2d:ca:7a:24:82:93:10:e7:3a:73:9c:6b:
21:34:89:7e:37:67:32:bd:de:34:a9:87:54:8a:01:
08:9a:9e:8e:ec:80:cd:4a:c9:c0:9c:be:c8:1b:f3:
34:83:b8:fe:ec:6e:04:94:9a:68:6e:c1:1a:91:a4:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:45:F9:30:8C:70:39:1C:25:3C:D6:5B:C6:65:88:AB:5C:20:87
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ubRF-TCMcDkcJTzWW8ZliKtcIIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:460::/44
Signature Algorithm: sha256WithRSAEncryption
20:5e:9b:c0:88:d0:ed:30:0d:67:8f:ac:95:67:a8:94:3a:c6:
af:13:40:56:dd:8d:17:e0:d3:18:be:59:1b:ac:39:94:25:48:
b6:9b:3a:fd:84:75:ba:06:ec:b7:b3:53:ed:1b:77:c7:e3:35:
49:cd:2a:d4:88:15:5a:c8:55:e4:04:16:6f:3e:a9:b0:91:e0:
bc:58:4b:b4:8f:3d:bc:d5:10:5e:03:a9:07:e8:06:37:4d:19:
71:90:ef:77:5b:b3:15:f3:e8:af:a1:3d:7d:04:4b:39:22:8e:
ec:ae:cb:ac:3a:f5:72:64:c6:d5:4d:59:e3:1c:85:fc:06:68:
84:f0:b5:8b:32:64:fb:73:12:1a:84:a9:c0:3c:35:d5:71:11:
39:cf:30:61:5b:11:bd:da:bd:38:cb:dc:e1:c6:fd:0f:c0:22:
d6:57:9c:aa:6f:2c:cb:f7:bf:c3:cb:cb:2c:7d:25:36:50:36:
aa:17:20:fe:be:f8:64:cf:0d:c5:9d:9b:7d:6c:52:9c:cf:54:
cc:e7:63:ed:ed:51:47:9d:2c:6a:dd:76:22:96:ee:56:a4:4f:
fa:95:eb:f3:4c:b6:f5:10:76:0a:44:ff:9f:cf:24:72:27:d4:
06:1b:2e:fc:c1:cc:40:f4:c5:35:c4:d4:7f:eb:50:d2:ed:db:
39:e8:13:e1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHmVkONLoLgxcYz6uX5ntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWI0NDVmOTMwOGM3MDM5MWMyNTNjZDY1YmM2NjU4OGFiNWMyMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAvgjQLMdSrUWdNB/0gqydIjqpVU
rhcQ6GlPFq2rEvIlwMPgLBqseIvc2n50TmtYfLOkKGS2Rh0sLgfKEbVImpHhT5TB
Ew8zOQS7K/Zev59aG9fax0H8kdy/12q8QgVN1IZjBgDCXpGi7msMEhnsM8EheSft
dAXlDiQJz97BlCJbA2IdAlI/7L2dq87FBvuxQGJYbVDPXiHPT2MGtX/pontajREl
C46KoMasS7E3DY1HTLrNntg0baWVG0BROFodvyhdp8EtynokgpMQ5zpznGshNIl+
N2cyvd40qYdUigEImp6O7IDNSsnAnL7IG/M0g7j+7G4ElJpobsEakaQEsQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLm0RfkwjHA5HCU81lvGZYirXCCHMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvdWJSRi1UQ01jRGtjSlR6V1c4WmxpS3RjSUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQRg
MA0GCSqGSIb3DQEBCwUAA4IBAQAgXpvAiNDtMA1nj6yVZ6iUOsavE0BW3Y0X4NMY
vlkbrDmUJUi2mzr9hHW6Buy3s1PtG3fH4zVJzSrUiBVayFXkBBZvPqmwkeC8WEu0
jz281RBeA6kH6AY3TRlxkO93W7MV8+ivoT19BEs5Io7srsusOvVyZMbVTVnjHIX8
BmiE8LWLMmT7cxIahKnAPDXVcRE5zzBhWxG92r04y9zhxv0PwCLWV5yqbyzL97/D
y8ssfSU2UDaqFyD+vvhkzw3FnZt9bFKcz1TM52Pt7VFHnSxq3XYilu5WpE/6levz
TLb1EHYKRP+fzyRyJ9QGGy78wcxA9MU1xNR/61DS7ds56BPh
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:51 2025 by rpki-client