Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ucR-KeWuSdSj9EAt4OdeyKgATMA.roa
File: ucR-KeWuSdSj9EAt4OdeyKgATMA.roa (raw, json)
Hash identifier: Ci4mc1PgzYgA+gouu2FGL/e1OLDlQ5HYpHHyS2UQtCM=
Subject key identifier: B9:C4:7E:29:E5:AE:49:D4:A3:F4:40:2D:E0:E7:5E:C8:A8:00:4C:C0
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0D8CE292
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ucR-KeWuSdSj9EAt4OdeyKgATMA.roa
Signing time: Sat 01 Jan 2022 02:57:12 +0000
ROA not before: Sat 01 Jan 2022 02:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399746
IP address blocks: 193.34.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227336850 (0xd8ce292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 02:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9c47e29e5ae49d4a3f4402de0e75ec8a8004cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:8f:5c:0e:4e:bf:46:d0:00:6c:d4:d7:df:
ef:80:af:8c:e1:74:62:46:99:93:86:62:be:2f:89:
68:61:f8:dd:13:ce:9e:34:a9:c5:52:94:0b:08:6f:
82:4a:8e:0c:ed:77:e4:1f:05:6f:8f:fb:f8:b3:77:
36:86:5f:97:50:c2:1e:31:54:27:56:20:a2:9b:ab:
86:c5:18:8e:e4:66:a7:f1:37:c8:da:74:d9:6c:6d:
e8:79:5b:02:91:ed:df:cc:05:9c:90:1a:46:9c:45:
95:09:f3:c5:17:df:ae:6e:d5:a9:e4:c6:d6:c6:42:
f7:23:58:dc:de:7a:61:77:81:89:8e:bc:65:1b:67:
b2:33:0c:2d:17:3e:ea:48:f1:c4:d2:0b:7c:c1:0d:
61:1a:ac:f0:08:de:15:64:8c:61:01:ac:94:9e:07:
0d:bc:8c:83:96:37:ae:a9:c0:39:75:11:98:d6:36:
34:74:32:46:be:b4:f5:1e:7d:dc:0f:76:ae:6c:a3:
67:4a:9e:18:5e:3a:af:20:92:f6:f1:34:e4:2f:f6:
69:59:d5:38:02:bd:0b:d2:4a:00:6f:0e:57:51:ad:
ef:90:67:5d:d6:b1:c1:9f:6c:31:5e:ea:32:3d:65:
d5:b8:ed:81:c6:6a:20:91:84:0f:60:17:f8:40:7f:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:7E:29:E5:AE:49:D4:A3:F4:40:2D:E0:E7:5E:C8:A8:00:4C:C0
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ucR-KeWuSdSj9EAt4OdeyKgATMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.51.0/24
Signature Algorithm: sha256WithRSAEncryption
76:03:4d:fb:9a:9f:d4:24:f3:a7:4b:1a:9f:c8:27:ae:98:70:
73:48:b1:45:02:10:d2:2e:3e:fa:1c:37:b6:c8:55:3a:6f:e9:
d4:5b:4c:3f:36:78:df:ce:eb:b3:18:8e:1f:35:9a:41:69:94:
64:1a:88:e1:e5:45:5d:24:f5:69:89:84:27:29:51:b3:0a:fe:
13:b1:a0:77:4f:70:61:9c:ca:d2:66:fb:90:63:75:4f:d3:8d:
ac:03:7d:af:7a:76:7d:4b:dc:76:6b:9b:95:f3:4a:14:19:c8:
f0:66:a1:32:2f:4c:1d:50:6c:59:c7:b3:54:39:2a:34:1c:1a:
46:81:06:44:55:a4:f6:23:ef:c4:b1:90:fa:e8:ce:da:06:08:
a2:a9:05:9c:03:ae:a5:c1:25:26:4f:fe:74:48:e3:e6:92:2e:
f2:18:9a:b4:99:8f:aa:9d:c6:31:68:86:95:a9:c1:8e:7e:35:
79:2d:0e:ec:41:aa:7c:37:fc:e7:9b:7a:76:d1:9c:7a:56:e0:
23:56:f4:71:b1:fc:cf:c0:46:ed:34:8f:0d:5f:73:40:b1:33:
67:a8:d9:99:30:d8:82:a0:21:f4:4a:f8:af:2c:7d:a9:75:0b:
c3:47:66:92:46:cc:3c:cb:56:4d:7d:6e:1c:8f:a4:07:88:4a:
e6:5a:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org