Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/UPWcURyh3S0TUWJ8Ufhybub1Vjs.roa
File: UPWcURyh3S0TUWJ8Ufhybub1Vjs.roa (raw, json)
Hash identifier: F7xGSYeJn2qcVbXjFlZaq5R+lknonm9KI3aTy1x0tgk=
Subject key identifier: 50:F5:9C:51:1C:A1:DD:2D:13:51:62:7C:51:F8:72:6E:E6:F5:56:3B
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 018290F19A1BE61687015F9BCDF0F5F3554F
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/UPWcURyh3S0TUWJ8Ufhybub1Vjs.roa
Signing time: Fri 12 Aug 2022 07:25:28 +0000
ROA not before: Fri 12 Aug 2022 07:25:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3209
IP address blocks: 195.50.128.0/18 maxlen: 18
85.238.224.0/19 maxlen: 19
195.158.128.0/19 maxlen: 19
2a00::/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:f1:9a:1b:e6:16:87:01:5f:9b:cd:f0:f5:f3:55:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Aug 12 07:25:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50f59c511ca1dd2d1351627c51f8726ee6f5563b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:91:b4:82:4a:5b:5b:ba:b0:cb:6e:88:d3:
67:7c:e6:3d:69:bc:3a:de:d0:2d:19:28:ef:c4:76:
d8:0b:84:1c:b3:ad:9a:4b:4d:5d:56:5f:db:eb:a0:
e5:32:ed:8f:96:cc:58:87:31:d4:62:dc:ae:65:f1:
ae:a8:23:f3:fd:c0:ad:f7:1f:1a:4f:ad:34:9d:2f:
39:2b:ee:63:06:c8:90:8e:82:1a:22:3f:57:4c:96:
4a:ec:32:f2:2d:9e:7f:36:e6:b6:b7:df:25:f1:fd:
93:84:df:eb:44:0c:33:66:b8:d3:ed:4f:61:57:30:
3a:9d:36:a7:f1:b5:d3:6b:6d:70:18:fd:2c:f5:ec:
1a:97:79:ad:65:0f:ac:02:1d:90:8c:8b:69:39:b3:
44:66:d3:7f:a3:e2:0e:65:b4:1f:e2:04:6c:8c:2a:
7f:6d:27:4d:a5:23:54:f4:c7:05:d7:1f:cd:d4:c0:
e3:78:7f:5d:6f:4d:73:2f:f1:15:e1:d0:c2:53:73:
28:fb:93:a0:37:0c:f2:bd:1e:63:03:b0:75:ef:7d:
9a:21:77:74:a2:bc:b1:89:84:97:3f:59:d7:34:b8:
af:3b:04:20:99:d8:29:11:ff:5a:d3:69:eb:48:ac:
78:bb:4b:67:c2:ba:08:06:94:fa:ad:b6:f6:6f:f0:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F5:9C:51:1C:A1:DD:2D:13:51:62:7C:51:F8:72:6E:E6:F5:56:3B
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/UPWcURyh3S0TUWJ8Ufhybub1Vjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.238.224.0/19
195.50.128.0/18
195.158.128.0/19
IPv6:
2a00::/22
Signature Algorithm: sha256WithRSAEncryption
09:c1:db:e7:19:df:40:55:98:00:d4:2a:3b:40:ea:5c:f1:5d:
26:a8:af:7d:2f:dd:14:55:66:29:6d:79:0a:d1:89:c2:6c:ac:
35:9e:98:45:a2:bc:d9:cf:b9:84:28:36:3a:9d:d3:16:23:53:
d3:02:9a:c8:7e:5c:f6:0a:fd:4c:d4:23:59:b4:de:f8:6c:73:
dc:58:d3:db:83:25:10:f1:d5:e4:80:8d:5d:fa:98:41:ce:f0:
31:17:c3:d7:fa:1b:61:96:88:35:fd:d8:2e:9b:9b:00:e4:f3:
6b:66:8f:dd:32:4d:2d:62:9a:ee:15:d4:c8:0f:89:f6:47:d6:
47:21:1d:a8:30:e8:fd:6e:83:cd:54:f3:02:5e:a7:fe:31:ad:
73:1a:9d:91:69:74:0c:c0:6e:01:6b:e3:b9:d9:32:a4:a5:2b:
4f:42:8f:e9:f7:47:d5:6d:fc:ca:13:81:64:81:e5:9d:8b:47:
82:e6:d3:d7:d9:b2:34:36:ff:50:af:4f:fe:6d:d8:9a:1e:dd:
d0:1f:f2:ce:be:df:a4:05:1c:88:58:5c:f9:32:01:8b:d8:ae:
ef:de:36:aa:5e:dc:79:1e:e6:f9:57:fa:4e:19:35:6d:26:58:
24:b7:5f:5a:35:74:da:5e:29:5e:47:92:6a:98:ea:cb:77:cd:
bb:85:b5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:43 2023 by rpki-client on console-ams.rpki-client.org