Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/UxpHQGplLu6NfardrEWSChw5gAk.roa
File: UxpHQGplLu6NfardrEWSChw5gAk.roa (raw, json)
Hash identifier: AfoAnaSiUigAQztyNGyhcYmRxLe02l5DbKAenzHn+O0=
Subject key identifier: 53:1A:47:40:6A:65:2E:EE:8D:7D:AA:DD:AC:45:92:0A:1C:39:80:09
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 113A8BCD
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/UxpHQGplLu6NfardrEWSChw5gAk.roa
Signing time: Mon 20 Jun 2022 09:24:48 +0000
ROA not before: Mon 20 Jun 2022 09:24:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 11895
IP address blocks: 193.118.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289049549 (0x113a8bcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jun 20 09:24:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=531a47406a652eee8d7daaddac45920a1c398009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:e4:c2:37:e7:8b:63:f1:ad:9a:6a:f8:22:
5a:a4:c9:bf:c9:ad:c3:e9:45:fd:97:e8:fa:e1:8a:
80:8a:04:2f:c3:5e:0e:d1:fb:b9:a4:0f:09:3c:6b:
3b:74:be:40:59:c4:53:b1:ee:8b:84:dd:c7:5d:a1:
5a:a9:88:09:ca:d3:7a:1d:70:d7:13:42:ec:88:60:
40:2b:85:73:8c:28:07:83:b6:3a:db:95:0e:8a:be:
b0:c3:13:c0:f9:19:e6:42:bb:59:50:79:dd:7f:16:
d9:51:c5:40:4d:fc:14:45:b9:4f:c7:2c:8b:b6:39:
26:e4:22:90:2e:31:cc:14:b9:08:df:d9:8f:2b:95:
fe:70:a2:91:08:e3:ae:e8:2f:45:ef:a8:5e:c1:f9:
a2:79:a2:17:a0:a3:fd:a0:73:65:08:bf:45:c9:da:
02:ed:27:1c:e5:6a:26:22:6e:40:a9:2f:cd:df:51:
b3:66:65:41:46:c2:d4:07:82:52:1e:05:20:7e:b7:
47:73:17:57:d6:df:04:ee:76:a6:b1:ff:e9:6d:3f:
e7:85:c5:a7:ac:98:f6:3a:bc:0f:e3:56:f3:3a:4b:
ad:d0:c9:14:6f:cd:e0:aa:57:c2:75:5e:b0:da:d1:
e6:05:dc:60:61:51:84:2d:64:84:cf:c7:03:6d:c4:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:47:40:6A:65:2E:EE:8D:7D:AA:DD:AC:45:92:0A:1C:39:80:09
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/UxpHQGplLu6NfardrEWSChw5gAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.166.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b0:6b:8b:26:c7:f7:83:9e:f1:df:00:98:94:26:08:fd:62:
84:05:fe:54:c0:f3:a2:2c:1d:d7:9c:e2:15:a1:90:54:60:bf:
15:85:02:ad:0f:77:76:ae:57:7e:96:16:95:c1:9a:50:03:19:
31:17:96:83:37:54:32:c4:bb:92:cf:cb:09:44:28:fd:96:7c:
25:74:91:75:98:a7:97:39:19:59:d3:a5:f0:bd:7f:83:7b:a4:
c9:79:4d:61:8e:82:26:95:4e:f4:9a:29:9b:8c:06:5c:71:54:
0a:27:c0:91:2d:a6:45:1f:e6:69:b2:dd:05:16:c6:bb:5a:fd:
32:c0:0d:f2:c0:67:5d:41:df:b4:62:90:15:a0:5a:f4:6c:8c:
9f:f1:71:90:d6:22:1e:48:f0:9e:1c:3a:3e:8b:48:2a:15:ba:
5c:b3:2b:75:9f:44:f7:f1:bd:5b:e7:a2:c9:a2:88:79:95:31:
28:c0:38:45:0d:57:67:df:4f:4f:bd:a5:44:61:b9:12:cd:2b:
a1:f9:25:1c:b8:66:b0:ac:ae:36:bc:11:95:76:24:10:2c:71:
8e:af:7f:2d:12:73:71:b8:71:73:9f:d7:15:49:6e:f9:3a:26:
5e:3a:53:2c:82:07:ca:ff:6b:31:37:84:5d:3e:cf:fa:0d:d3:
49:61:62:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEETqLzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Y2Y4ZmZjMDg4NTkxZTRmMjQzYmFhZmEyMWI0Mjk4YmZiMzY2MDI2MB4XDTIyMDYy
MDA5MjQ0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTMxYTQ3NDA2YTY1
MmVlZThkN2RhYWRkYWM0NTkyMGExYzM5ODAwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJHl5MI354tj8a2aavgiWqTJv8mtw+lF/Zfo+uGKgIoEL8Ne
DtH7uaQPCTxrO3S+QFnEU7Hui4Tdx12hWqmICcrTeh1w1xNC7IhgQCuFc4woB4O2
OtuVDoq+sMMTwPkZ5kK7WVB53X8W2VHFQE38FEW5T8csi7Y5JuQikC4xzBS5CN/Z
jyuV/nCikQjjrugvRe+oXsH5onmiF6Cj/aBzZQi/RcnaAu0nHOVqJiJuQKkvzd9R
s2ZlQUbC1AeCUh4FIH63R3MXV9bfBO52prH/6W0/54XFp6yY9jq8D+NW8zpLrdDJ
FG/N4KpXwnVesNrR5gXcYGFRhC1khM/HA23EOI0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRTGkdAamUu7o19qt2sRZIKHDmACTAfBgNVHSMEGDAWgBRM+P/AiFkeTyQ7
qvohtCmL+zZgJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RQal93SWhaSGs4a082cjZJYlFwaV9zMllDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvYTBhMzljLWJlMDMtNDdiYi1iZGIzLWIzYjc4YjBiNjZlYS8x
L1V4cEhRR3BsTHU2TmZhcmRyRVdTQ2h3NWdBay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
YTBhMzljLWJlMDMtNDdiYi1iZGIzLWIzYjc4YjBiNjZlYS8xL1RQal93SWhaSGs4
a082cjZJYlFwaV9zMllDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMF2pjANBgkqhkiG9w0BAQsFAAOC
AQEAdrBriybH94Oe8d8AmJQmCP1ihAX+VMDzoiwd15ziFaGQVGC/FYUCrQ93dq5X
fpYWlcGaUAMZMReWgzdUMsS7ks/LCUQo/ZZ8JXSRdZinlzkZWdOl8L1/g3ukyXlN
YY6CJpVO9Jopm4wGXHFUCifAkS2mRR/mabLdBRbGu1r9MsAN8sBnXUHftGKQFaBa
9GyMn/FxkNYiHkjwnhw6PotIKhW6XLMrdZ9E9/G9W+eiyaKIeZUxKMA4RQ1XZ99P
T72lRGG5Es0rofklHLhmsKyuNrwRlXYkECxxjq9/LRJzcbhxc5/XFUlu+TomXjpT
LIIHyv9rMTeEXT7P+g3TSWFimw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org