Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/UJzXrLcTow_h3orysebWCFJOf5U.roa
File: UJzXrLcTow_h3orysebWCFJOf5U.roa (raw, json)
Hash identifier: pjb34Ds5OdqH85uFMudu9UtOATit8vn+AwSKL1Xy3qA=
Subject key identifier: 50:9C:D7:AC:B7:13:A3:0F:E1:DE:8A:F2:B1:E6:D6:08:52:4E:7F:95
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0D8ABAA5
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/UJzXrLcTow_h3orysebWCFJOf5U.roa
Signing time: Sat 01 Jan 2022 02:57:11 +0000
ROA not before: Sat 01 Jan 2022 02:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 193.34.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227195557 (0xd8abaa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 02:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=509cd7acb713a30fe1de8af2b1e6d608524e7f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:e6:5c:ef:bb:20:d7:85:ad:34:ae:f0:76:
96:93:51:c2:e5:74:c7:dc:a4:5e:ef:6e:8e:cd:0d:
82:09:d7:77:8d:43:e3:37:9c:8b:f9:ee:59:5d:d7:
35:08:d9:85:44:cf:a0:8f:99:a3:0a:2e:98:31:93:
5f:d4:fc:1b:09:59:d2:9f:4d:8d:1d:22:3e:18:82:
3b:81:5a:cb:12:3e:97:52:d0:e4:30:b9:12:75:f4:
80:20:9a:19:a5:3e:95:14:ec:c2:76:b7:5a:39:b0:
a9:7a:2f:e2:8b:9c:89:b3:35:73:22:9c:d3:4f:7d:
65:4a:41:9d:9c:14:42:8e:64:ce:d5:21:bf:04:27:
82:5c:1a:db:d7:ad:3d:8d:3b:b0:1f:29:b1:cd:15:
58:b9:a1:2f:d1:31:b0:d7:89:9d:40:22:80:e4:2c:
3e:52:88:fd:24:68:85:ca:14:b1:60:f4:39:a5:ed:
0c:64:92:d0:cd:85:1b:18:34:1b:ec:91:05:91:b3:
01:50:64:55:58:83:e5:08:f4:eb:1e:58:7f:b1:ff:
ea:92:cb:d2:5d:54:1a:c6:a1:0e:6f:ab:87:ea:0b:
f5:c4:13:a1:be:84:59:b4:ac:fd:b6:d1:67:cc:01:
70:5e:43:d7:a6:d0:b4:18:79:83:fb:41:1d:25:b3:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9C:D7:AC:B7:13:A3:0F:E1:DE:8A:F2:B1:E6:D6:08:52:4E:7F:95
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/UJzXrLcTow_h3orysebWCFJOf5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e7:d7:4e:a7:7c:9f:bf:ae:45:03:ca:82:d6:bc:79:df:98:
44:e3:de:e5:e5:ad:ca:d5:cb:8d:c2:0f:5e:06:de:a9:f4:ef:
bb:58:55:0a:61:a9:83:ac:cf:06:32:4c:d7:2f:d9:a7:c4:ab:
6c:95:82:d5:2f:2c:52:3c:de:50:0c:6d:32:b2:5d:a3:5d:68:
8b:d1:ad:6d:31:cb:cb:dd:be:00:a3:b6:0d:c2:13:7a:00:df:
75:94:bd:af:73:1a:ee:60:d6:85:c0:ca:70:d4:a4:c4:c7:ff:
ea:0e:74:bc:40:4d:88:f8:93:1e:a1:af:a1:e5:db:a1:98:ea:
fd:39:d9:0f:58:dd:67:a6:08:c5:e1:49:70:b0:0e:c6:ab:a3:
ad:fe:4e:a0:69:26:38:59:b8:b4:7f:2e:23:e6:b1:c4:9c:c7:
28:8b:5b:0d:a0:0a:b7:42:d1:69:48:88:50:0d:1b:88:af:11:
c9:f3:f5:3d:e1:52:00:79:e6:4b:25:f4:e8:ae:ae:c2:b5:44:
5d:36:4c:c0:ec:ff:29:c4:5f:9a:cd:be:60:61:7d:77:1a:73:
2e:cb:7e:70:e3:13:fb:ed:89:fa:56:63:2c:11:88:5f:0a:73:
f2:c1:ea:99:7b:5c:52:43:88:ed:32:43:cd:13:ae:69:ce:6b:
65:01:87:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org