Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/UFhZBuLZ9zZKaJ_L5QMaMFNYVOw.roa
File: UFhZBuLZ9zZKaJ_L5QMaMFNYVOw.roa (raw, json)
Hash identifier: YUxpMTNRQQybV0nTx/JQobD1738/7dUCKCWwsmeafzw=
Subject key identifier: 50:58:59:06:E2:D9:F7:36:4A:68:9F:CB:E5:03:1A:30:53:58:54:EC
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0183CC11690189217018918566D4511BCE2F
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/UFhZBuLZ9zZKaJ_L5QMaMFNYVOw.roa
Signing time: Wed 12 Oct 2022 12:00:36 +0000
ROA not before: Wed 12 Oct 2022 12:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 193.34.49.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
195.13.61.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:11:69:01:89:21:70:18:91:85:66:d4:51:1b:ce:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Oct 12 12:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50585906e2d9f7364a689fcbe5031a30535854ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:b9:e4:94:3c:6a:8d:a5:44:0a:e9:54:fd:
59:55:f9:f5:0a:e8:ab:81:43:4b:ad:2c:bb:a7:ae:
be:fe:d5:b9:0c:bc:e7:94:17:16:50:36:c3:a2:0d:
1e:8e:9e:d0:ae:b5:8f:f5:64:d3:54:52:1a:a3:23:
b8:a8:8f:88:c2:58:c1:e3:93:55:df:98:2c:64:dc:
03:9e:82:26:cb:53:24:9c:c5:36:74:f3:58:66:12:
fe:57:3b:4f:41:65:50:cd:73:87:31:3f:f5:88:44:
0e:5c:8a:da:ca:89:42:f6:2b:10:1d:e7:ab:6c:a2:
16:6c:03:94:64:92:7f:08:62:92:01:db:e4:95:e4:
3d:28:36:70:f9:0e:34:a7:69:a1:ef:4e:94:d8:02:
e8:55:02:07:f2:f8:51:6f:74:3b:d4:10:50:13:52:
66:bf:0f:21:6d:1d:e7:92:8f:ce:1d:25:80:3a:15:
01:27:69:f8:c2:cf:b6:6e:2f:76:c9:b8:9c:1e:5c:
21:90:12:9c:96:30:7f:a9:4e:85:73:62:5f:d5:86:
5f:ce:5a:8e:8d:b9:af:69:cc:fc:a5:44:de:33:df:
12:af:c0:42:3b:42:f0:1d:43:88:5c:0a:fa:e0:0e:
e6:e2:06:f0:3d:11:43:41:dd:79:c2:3b:6e:e4:6a:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:58:59:06:E2:D9:F7:36:4A:68:9F:CB:E5:03:1A:30:53:58:54:EC
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/UFhZBuLZ9zZKaJ_L5QMaMFNYVOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.49.0/24
193.34.51.0/24
195.13.61.0-195.13.62.255
Signature Algorithm: sha256WithRSAEncryption
a0:b1:69:ee:17:fd:d2:cc:93:70:51:91:31:53:e4:34:bf:8e:
63:4c:69:5b:20:07:71:90:75:b6:fa:63:39:25:e1:1e:54:46:
b4:90:e3:86:ec:a6:e8:c8:11:80:fa:05:c2:e0:9a:26:a0:a2:
95:21:0a:d2:ed:61:07:5b:2d:80:9b:d9:5a:8a:eb:23:13:ae:
b1:ef:77:ba:c4:85:4a:55:5c:aa:4e:4b:5a:63:63:0c:ca:a9:
de:77:4e:81:89:f8:1b:fe:2a:93:4c:03:9c:d6:11:c5:86:16:
a3:c6:01:c0:d3:82:c4:2a:23:3a:29:91:4a:94:82:4c:56:d3:
4b:7f:8f:76:75:75:9c:66:d3:fa:9d:bf:e1:5f:70:5f:e0:14:
03:7c:dc:41:66:93:f7:aa:7b:ff:6d:29:5b:58:77:28:0c:10:
4a:1f:96:17:01:0c:c7:f5:74:ee:d7:1a:59:44:7b:68:05:78:
f5:42:88:a6:f2:54:71:85:2d:df:ad:2b:8b:51:63:79:ea:13:
df:aa:c7:ff:4b:a5:b2:ec:37:59:1b:3c:b2:2d:04:09:64:c7:
6d:b2:e1:81:57:a7:9d:ad:28:fd:9f:6a:62:bb:7a:d1:c3:6d:
fd:10:ff:a2:01:f7:87:92:47:cc:56:30:4c:ff:93:cf:66:af:
4d:c8:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org