Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/Ujq_O0Z82tmwnJ4y4-tPICcpzUE.roa
File: Ujq_O0Z82tmwnJ4y4-tPICcpzUE.roa (raw, json)
Hash identifier: PqfG/IIZKi/xYDB5rANrjSyfOFy9ar6QXMtulCR+b+0=
Subject key identifier: 52:3A:BF:3B:46:7C:DA:D9:B0:9C:9E:32:E3:EB:4F:20:27:29:CD:41
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 413291EC
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/Ujq_O0Z82tmwnJ4y4-tPICcpzUE.roa
Signing time: Sat 01 Jan 2022 13:56:10 +0000
ROA not before: Sat 01 Jan 2022 13:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21239
IP address blocks: 194.0.6.0/24 maxlen: 24
193.109.126.0/24 maxlen: 24
2a02:6e0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093833196 (0x413291ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Jan 1 13:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=523abf3b467cdad9b09c9e32e3eb4f202729cd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:22:2a:34:25:8e:41:95:04:fc:3f:83:c9:
a1:48:a4:c5:23:23:76:15:0b:42:48:80:00:b2:6a:
73:0d:76:3b:2f:38:44:e0:67:5f:06:a7:02:f8:71:
b6:16:fb:ca:d9:0e:45:7f:41:c0:b4:b9:c7:4e:e9:
50:44:dc:c5:95:fd:91:fb:ff:76:be:76:fc:ed:43:
1c:9c:c9:0f:63:ae:4c:4e:fe:17:63:8f:2b:ba:5f:
57:83:84:af:36:ec:07:5a:40:ea:3e:76:0b:49:b8:
1d:1e:31:f4:93:67:69:42:44:15:8c:61:05:db:b4:
f8:c5:94:75:6a:c2:c8:28:e7:b3:fb:92:b7:ea:9a:
6e:35:17:50:3b:a9:c6:1e:b5:11:90:cd:be:0a:eb:
53:c3:8c:55:5d:f7:03:d9:17:f1:db:1e:f7:21:7c:
a5:a4:f4:f8:7d:8b:2e:e7:7d:cd:b4:99:e7:e2:c3:
35:85:7e:84:e6:2c:76:30:3a:99:c6:76:b3:9a:bf:
52:e8:95:73:e5:9c:a5:31:8f:32:30:0e:fa:c9:cb:
7a:9f:83:59:80:1a:ba:5d:8a:9a:67:d6:e8:a2:0b:
e3:a8:fa:4b:7c:d0:1b:bf:7c:e6:89:c0:e5:13:60:
f9:16:f8:c6:48:b7:6d:25:13:df:f2:57:d2:6b:cf:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3A:BF:3B:46:7C:DA:D9:B0:9C:9E:32:E3:EB:4F:20:27:29:CD:41
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/Ujq_O0Z82tmwnJ4y4-tPICcpzUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.126.0/24
194.0.6.0/24
IPv6:
2a02:6e0::/32
Signature Algorithm: sha256WithRSAEncryption
21:2a:c7:b9:21:de:f1:fb:d5:da:d4:d9:f0:72:90:e9:c9:8a:
4a:39:6b:81:82:57:60:4d:f5:92:10:7a:9a:67:c1:8a:ad:e7:
09:e2:88:6f:ed:c0:84:2b:ff:b2:67:37:5f:d1:b9:61:64:58:
4c:5c:54:17:33:19:b6:90:a0:30:2f:b0:ff:f7:16:11:cb:0e:
65:40:9a:f1:e2:b6:23:ff:6e:2f:d0:24:14:aa:c6:27:ed:d2:
d0:17:e9:e9:80:69:c7:36:f2:12:88:6a:72:fe:45:9b:58:f6:
a1:fe:a1:f4:73:bd:5f:16:1f:7c:bc:92:45:1a:d2:77:1c:56:
eb:3f:7b:7b:59:c7:6f:f8:c8:8a:b1:94:0b:6d:b1:9c:ed:a9:
da:1e:92:35:79:46:f2:fc:e0:be:c7:8a:e2:77:93:1c:e2:23:
7b:34:82:83:87:ff:1f:d5:9d:a0:82:61:0a:3f:32:3d:04:59:
71:d7:bd:80:19:fe:0a:64:75:1c:eb:e6:c6:b0:e2:c3:98:f3:
45:71:dd:4d:41:e2:58:ae:23:77:16:c6:17:1c:3e:74:1c:cf:
52:0c:10:3a:48:4b:e1:91:65:28:da:88:21:08:dd:09:76:c2:
d9:73:07:07:c6:79:0c:e8:e0:18:d5:1a:04:98:27:dd:75:9d:
3a:e2:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:55 2024 by rpki-client on console-ams.rpki-client.org