Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/Uaf8AfhyXcyJbl3vBQPYJLaHJ7Q.roa
File: Uaf8AfhyXcyJbl3vBQPYJLaHJ7Q.roa (raw, json)
Hash identifier: sjuvuJnc5osSoXVjZ9GzQlBE7Qg5fd9h22et1pd8MkI=
Subject key identifier: 51:A7:FC:01:F8:72:5D:CC:89:6E:5D:EF:05:03:D8:24:B6:87:27:B4
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 40C9E9A4
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/Uaf8AfhyXcyJbl3vBQPYJLaHJ7Q.roa
Signing time: Sat 01 Jan 2022 08:00:29 +0000
ROA not before: Sat 01 Jan 2022 08:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15424
IP address blocks: 192.136.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1086974372 (0x40c9e9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 1 08:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51a7fc01f8725dcc896e5def0503d824b68727b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:3d:f8:51:30:ad:c9:13:d8:4e:24:d0:b6:
18:84:68:fa:43:87:6f:cb:9b:4c:fd:d0:e1:f9:54:
df:98:71:bb:a8:b4:cc:0d:64:39:98:18:58:c5:96:
79:92:82:75:38:99:e6:80:f3:4c:9f:14:4f:ca:55:
0e:d7:c2:af:31:b9:0e:31:eb:20:33:3f:46:89:e2:
ca:41:12:7c:3b:28:6c:7b:d7:16:d6:e6:c6:25:b2:
2b:79:4c:7b:25:f8:dc:b1:4b:35:be:19:38:3a:a2:
c6:c2:7d:65:34:42:05:00:57:ae:0c:52:d2:60:d3:
d0:01:df:cd:20:fc:f1:fd:08:ce:2f:38:c1:a7:18:
18:42:ca:50:6f:2b:8e:1b:c5:f2:a6:6e:e7:3b:e1:
a7:c5:90:4d:a4:d1:86:af:5c:d2:c8:ae:a2:a4:0d:
a2:47:68:56:d5:76:1e:53:7e:d4:80:fd:8d:e6:4d:
b3:11:f1:78:c4:0a:98:c1:25:81:05:9e:f1:ed:c0:
18:e9:74:47:8d:c1:89:c4:27:26:d0:b8:4f:75:13:
25:d7:a2:71:3a:1e:f2:ca:13:1c:bd:21:0f:63:0b:
8a:b6:e7:ed:52:ec:c4:9e:e9:52:83:bc:59:33:7d:
7d:b9:9e:2f:88:af:af:52:31:49:11:fe:6a:ed:e8:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A7:FC:01:F8:72:5D:CC:89:6E:5D:EF:05:03:D8:24:B6:87:27:B4
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/Uaf8AfhyXcyJbl3vBQPYJLaHJ7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.136.71.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ba:d2:47:cb:d7:dc:50:0e:43:f0:f4:6d:f8:1b:7b:05:7c:
43:a0:cf:bb:3f:3f:0f:d6:eb:be:9d:0a:06:bd:6b:83:10:72:
23:0a:f1:4c:13:43:db:c5:44:ea:99:a6:ce:5d:97:79:0b:0b:
8f:cc:3b:d8:92:98:f1:76:96:48:28:4c:b3:26:f1:17:d3:ef:
da:6a:1e:63:c7:9a:b9:57:cb:ac:65:de:f8:b5:f1:c2:23:2e:
c0:56:84:02:1f:9e:fe:fb:ab:cd:00:27:09:86:c6:3d:d5:3d:
79:b8:4f:70:e8:50:29:6c:3c:3e:c0:6d:6f:48:b9:13:4c:e0:
b0:1d:cc:61:97:c2:63:71:bc:9a:ab:14:e0:66:c0:01:f9:85:
58:3b:0d:6a:b7:7b:03:54:4b:fb:4d:39:88:ba:15:a4:1e:51:
65:d3:84:2f:d0:54:65:fb:d3:d0:1e:0c:a1:2f:8f:5f:69:bc:
f5:e8:f0:75:4e:78:d1:06:d5:0e:ba:20:05:70:c7:8e:6b:a9:
e6:88:8e:04:9f:cb:82:76:6b:25:08:2e:e2:83:ad:b2:8e:b8:
d2:08:95:9d:3b:b5:0c:5e:b7:3f:c0:ce:9b:ff:fe:17:1a:d2:
71:65:7b:54:91:b3:cf:50:43:6f:fb:49:bf:a0:be:d9:e3:04:
8f:31:07:7f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQMnppDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MGRlZTFiMDZiYTI0YTY3NjIxM2Y5NzZhNGI1MGMxMjlkY2IyYjczMB4XDTIyMDEw
MTA4MDAyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTFhN2ZjMDFmODcy
NWRjYzg5NmU1ZGVmMDUwM2Q4MjRiNjg3MjdiNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfZPfhRMK3JE9hOJNC2GIRo+kOHb8ubTP3Q4flU35hxu6i0
zA1kOZgYWMWWeZKCdTiZ5oDzTJ8UT8pVDtfCrzG5DjHrIDM/RoniykESfDsobHvX
FtbmxiWyK3lMeyX43LFLNb4ZODqixsJ9ZTRCBQBXrgxS0mDT0AHfzSD88f0Izi84
wacYGELKUG8rjhvF8qZu5zvhp8WQTaTRhq9c0siuoqQNokdoVtV2HlN+1ID9jeZN
sxHxeMQKmMElgQWe8e3AGOl0R43BicQnJtC4T3UTJdeicToe8soTHL0hD2MLirbn
7VLsxJ7pUoO8WTN9fbmeL4ivr1IxSRH+au3oCi0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRRp/wB+HJdzIluXe8FA9gktocntDAfBgNVHSMEGDAWgBTg3uGwa6JKZ2IT
+XaktQwSncsrczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRON2hzR3VpU21kaUVfbDJwTFVNRXAzTEszTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvYzIyZGM5LWM3YmEtNDE1Ni1hNzljLTE1ZTkwYmY4N2ZhYi8x
L1VhZjhBZmh5WGN5SmJsM3ZCUVBZSkxhSEo3US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
YzIyZGM5LWM3YmEtNDE1Ni1hNzljLTE1ZTkwYmY4N2ZhYi8xLzRON2hzR3VpU21k
aUVfbDJwTFVNRXAzTEszTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCIRzANBgkqhkiG9w0BAQsFAAOC
AQEAOLrSR8vX3FAOQ/D0bfgbewV8Q6DPuz8/D9brvp0KBr1rgxByIwrxTBND28VE
6pmmzl2XeQsLj8w72JKY8XaWSChMsybxF9Pv2moeY8eauVfLrGXe+LXxwiMuwFaE
Ah+e/vurzQAnCYbGPdU9ebhPcOhQKWw8PsBtb0i5E0zgsB3MYZfCY3G8mqsU4GbA
AfmFWDsNard7A1RL+005iLoVpB5RZdOEL9BUZfvT0B4MoS+PX2m89ejwdU540QbV
DrogBXDHjmup5oiOBJ/LgnZrJQgu4oOtso640giVnTu1DF63P8DOm//+FxrScWV7
VJGzz1BDb/tJv6C+2eMEjzEHfw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:39 2024 by rpki-client on console-ams.rpki-client.org