Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/UjjesCdYCt9k3iuGJNHRNHLoobs.roa
File: UjjesCdYCt9k3iuGJNHRNHLoobs.roa (raw, json)
Hash identifier: JGFfBy7JC2VfoGg5/5Fqtwp44vyFQbFGLVsS8Te8sYU=
Subject key identifier: 52:38:DE:B0:27:58:0A:DF:64:DE:2B:86:24:D1:D1:34:72:E8:A1:BB
Certificate issuer: /CN=3e276ac51a132401db4cd741d866a54622a0d15c
Certificate serial: 039DFB37
Authority key identifier: 3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/UjjesCdYCt9k3iuGJNHRNHLoobs.roa
Signing time: Sat 01 Jan 2022 02:53:07 +0000
ROA not before: Sat 01 Jan 2022 02:53:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206330
IP address blocks: 185.135.189.0/24 maxlen: 24
2a10:1646::/32 maxlen: 48
2a10:1647::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60685111 (0x39dfb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e276ac51a132401db4cd741d866a54622a0d15c
Validity
Not Before: Jan 1 02:53:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5238deb027580adf64de2b8624d1d13472e8a1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:b2:de:fc:a0:31:0d:d2:f9:5d:8c:fe:db:
d5:5f:e3:87:88:20:a0:56:df:bf:e8:30:22:03:29:
f5:ce:94:8a:89:2d:9c:bc:e3:6e:2e:d5:ff:16:90:
db:91:83:ff:26:fc:f5:d6:cf:90:fe:fa:fe:4b:9e:
df:d2:37:6b:72:f3:7d:4a:c3:17:c8:37:f8:2f:af:
9a:76:82:43:55:e1:ed:12:ed:6d:b8:36:84:23:61:
3a:1a:26:bd:9b:a9:93:cb:b1:4c:9e:85:19:df:72:
10:4d:77:a0:bb:8e:54:1c:81:3f:ca:0b:58:e7:3c:
f5:de:0e:e2:cd:ea:ff:7d:61:b6:43:04:72:bf:c8:
fd:6c:88:1c:8b:d4:59:19:21:64:f2:01:ef:c4:a6:
c0:bb:68:c7:1d:72:2a:8b:79:65:29:4d:20:f6:e2:
cf:09:a9:29:5a:4f:b4:11:81:e1:e8:bb:34:60:cc:
cd:a5:1e:6a:16:b8:f1:5f:d8:a6:5f:7f:5d:fe:88:
2b:d2:f8:61:b8:41:7f:9e:b2:16:58:a3:fe:4e:dc:
b9:30:9c:4a:ef:65:5b:91:b2:a3:a4:9a:1c:c5:68:
d7:2b:0f:05:a7:0e:68:0e:9f:4d:ae:a0:6d:dc:0a:
e6:30:5b:65:2b:1f:18:03:c6:8c:2b:9d:d6:d0:0f:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:38:DE:B0:27:58:0A:DF:64:DE:2B:86:24:D1:D1:34:72:E8:A1:BB
X509v3 Authority Key Identifier:
keyid:3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/UjjesCdYCt9k3iuGJNHRNHLoobs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.189.0/24
IPv6:
2a10:1646::/31
Signature Algorithm: sha256WithRSAEncryption
7b:77:d3:65:50:33:bc:51:9d:a8:21:7c:2c:72:3d:ac:1a:1d:
ec:49:cd:d6:12:e3:62:4a:88:6d:91:3e:95:9c:e5:ed:ad:29:
cc:18:c4:0e:a6:69:a2:46:64:92:b8:d6:6b:9f:f3:ba:03:66:
d9:71:49:fb:4f:00:52:17:e6:23:9e:c3:3c:2c:01:b4:89:93:
1a:e4:3c:9e:57:f3:69:aa:b9:fb:8f:b0:3b:06:ed:b9:43:4a:
ea:12:da:9f:c7:1a:49:85:b5:85:7a:81:91:3a:66:e3:a7:d2:
d7:31:ee:43:b2:ec:f0:b8:92:21:3e:69:ab:f0:47:f4:32:34:
e9:f1:aa:cc:39:06:a7:ea:39:ae:26:d4:71:5f:4a:b5:ce:94:
d7:ea:4d:e7:22:eb:a5:00:88:eb:8b:b8:d5:a4:fa:83:4d:0c:
ef:ac:8e:8b:25:cd:0b:90:cc:ae:a4:4b:7c:c8:07:d1:0b:b3:
67:3e:94:0d:da:aa:db:78:c1:bb:e9:b1:52:aa:2e:ed:20:bf:
21:08:cf:fc:bf:ce:87:b7:9d:1b:dc:78:be:6c:e2:4a:d2:e6:
ac:1f:30:bf:2c:bb:26:7a:a0:b3:2d:43:82:08:68:d7:d4:0c:
3b:21:fb:e3:32:c4:5e:b3:c4:46:52:8e:d3:04:75:58:c0:9e:
c9:8f:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org