Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/uwlBoBUHbr3vkkoM-T7UuubAdPw.roa
File: uwlBoBUHbr3vkkoM-T7UuubAdPw.roa (raw, json)
Hash identifier: rF3YO9LRRV8KarUUYHWkt/GcbkmYvlJAul+ABagn2vA=
Subject key identifier: BB:09:41:A0:15:07:6E:BD:EF:92:4A:0C:F9:3E:D4:BA:E6:C0:74:FC
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 02A5D5
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/uwlBoBUHbr3vkkoM-T7UuubAdPw.roa
Signing time: Tue 26 Apr 2022 16:55:41 +0000
ROA not before: Tue 26 Apr 2022 16:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58180
IP address blocks: 195.206.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173525 (0x2a5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Apr 26 16:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb0941a015076ebdef924a0cf93ed4bae6c074fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:60:3a:74:18:d0:cd:e9:8c:e2:f9:5a:99:ae:
74:7c:e6:45:6a:92:ce:97:dc:f5:4f:1c:54:cc:4c:
10:b0:83:24:f4:15:28:78:dc:eb:5a:93:9f:75:4e:
b4:cf:50:4d:ce:21:3b:34:f8:5a:ab:e0:c0:ff:a8:
aa:f9:eb:c3:e2:c9:2f:41:02:6b:19:5a:e0:79:42:
be:af:e2:07:ae:d2:37:7d:e1:07:07:7d:29:68:de:
22:8e:ab:de:d0:06:af:bc:26:e4:27:27:1b:67:a1:
f2:ab:2d:53:70:8b:09:5a:1a:45:a0:9e:c2:65:4d:
b2:5a:41:25:55:c1:db:d9:26:e8:2f:ac:14:4d:da:
4a:29:43:c0:9d:22:92:98:a6:6a:1d:1b:7b:96:66:
8d:43:15:82:a8:21:07:90:c4:30:72:33:f0:a7:d3:
e6:82:27:6e:dc:a7:63:50:0d:7b:c1:20:b1:85:6d:
ce:94:67:98:bb:79:a9:0b:0f:07:14:54:ad:98:e0:
33:e7:8b:70:a7:da:0e:b3:f0:e3:f1:f4:7f:cb:03:
79:29:74:d7:57:cb:60:b8:a0:50:1c:1a:23:7b:f6:
78:40:b7:c7:6c:63:1d:20:cd:d5:e0:13:92:0a:ca:
3e:c3:ac:22:ce:99:b6:be:12:74:79:e7:be:c6:94:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:41:A0:15:07:6E:BD:EF:92:4A:0C:F9:3E:D4:BA:E6:C0:74:FC
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/uwlBoBUHbr3vkkoM-T7UuubAdPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:19:2d:9e:4d:ce:fd:dd:fa:83:61:3f:13:9a:d6:99:2d:f5:
ea:91:c0:83:6c:e6:df:f2:5b:36:c0:ca:a4:f7:aa:a8:6c:80:
8d:d4:47:c8:b4:da:bb:84:19:9b:2b:a4:cc:e1:b5:20:49:69:
40:05:a7:d6:67:e2:45:98:95:16:a3:42:10:97:c7:5d:6d:44:
17:84:16:ba:36:f1:34:02:f6:58:54:78:0b:fc:02:f6:7f:c3:
87:b7:7f:ef:06:7f:2b:05:b0:a2:59:95:e9:ec:e4:a1:8f:d3:
7e:be:e5:1c:03:5b:c3:77:c6:4d:46:af:77:aa:47:41:41:ff:
4d:cf:e1:8c:b9:d8:43:a1:34:1d:98:98:26:32:68:23:16:6a:
80:45:8c:9c:c6:39:f6:2e:39:64:7a:d5:b3:27:17:a6:cc:78:
ec:4a:8b:86:32:fd:b5:cc:b2:6a:8d:31:88:f4:58:33:1d:52:
f0:49:eb:01:f7:db:f1:70:7c:60:96:23:b8:c2:b0:ab:8f:b2:
a1:d8:17:61:fe:a1:55:c4:83:de:14:c8:4c:74:6d:7e:f7:ef:
44:18:d5:2e:c6:41:5c:f4:de:8c:e5:de:ad:7b:91:97:0a:0a:
ee:bf:bd:92:f0:26:1c:dc:67:60:a3:9a:23:60:f5:21:a2:dc:
1b:a0:ec:a3
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAqXVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
ZTIzOTJiNjU0OGIwOWIxOGE2NGQzZTUwODBiYmJiOTI3OTMxMGIwHhcNMjIwNDI2
MTY1NTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiYjA5NDFhMDE1MDc2
ZWJkZWY5MjRhMGNmOTNlZDRiYWU2YzA3NGZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA52A6dBjQzemM4vlama50fOZFapLOl9z1TxxUzEwQsIMk9BUo
eNzrWpOfdU60z1BNziE7NPhaq+DA/6iq+evD4skvQQJrGVrgeUK+r+IHrtI3feEH
B30paN4ijqve0AavvCbkJycbZ6Hyqy1TcIsJWhpFoJ7CZU2yWkElVcHb2SboL6wU
TdpKKUPAnSKSmKZqHRt7lmaNQxWCqCEHkMQwcjPwp9Pmgidu3KdjUA17wSCxhW3O
lGeYu3mpCw8HFFStmOAz54twp9oOs/Dj8fR/ywN5KXTXV8tguKBQHBoje/Z4QLfH
bGMdIM3V4BOSCso+w6wizpm2vhJ0eee+xpR8mwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLsJQaAVB26975JKDPk+1LrmwHT8MB8GA1UdIwQYMBaAFEHiOStlSLCbGKZN
PlCAu7uSeTELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UWVJNUsyVklzSnNZcGswLVVJQzd1NUo1TVFzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80Ny83ZTQwNDUtMjI3NS00ZTUwLWI2NDEtNWYwNGU1OGRmMWMyLzEv
dXdsQm9CVUhicjN2a2tvTS1UN1V1dWJBZFB3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83
ZTQwNDUtMjI3NS00ZTUwLWI2NDEtNWYwNGU1OGRmMWMyLzEvUWVJNUsyVklzSnNZ
cGswLVVJQzd1NUo1TVFzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw854MA0GCSqGSIb3DQEBCwUAA4IB
AQAUGS2eTc793fqDYT8TmtaZLfXqkcCDbObf8ls2wMqk96qobICN1EfItNq7hBmb
K6TM4bUgSWlABafWZ+JFmJUWo0IQl8ddbUQXhBa6NvE0AvZYVHgL/AL2f8OHt3/v
Bn8rBbCiWZXp7OShj9N+vuUcA1vDd8ZNRq93qkdBQf9Nz+GMudhDoTQdmJgmMmgj
FmqARYycxjn2LjlketWzJxemzHjsSouGMv21zLJqjTGI9FgzHVLwSesB99vxcHxg
liO4wrCrj7Kh2Bdh/qFVxIPeFMhMdG1+9+9EGNUuxkFc9N6M5d6te5GXCgruv72S
8CYc3Gdgo5ojYPUhotwboOyj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:09 2023 by rpki-client on console-ams.rpki-client.org