Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/uGdJfuHvUObGnRuqZn-16TtEIm8.roa
File: uGdJfuHvUObGnRuqZn-16TtEIm8.roa (raw, json)
Hash identifier: NBTrPHjjNc2Oc95pwqtFtItyqrNGkRgbIq/BTGv3Xf8=
Subject key identifier: B8:67:49:7E:E1:EF:50:E6:C6:9D:1B:AA:66:7F:B5:E9:3B:44:22:6F
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 019F1DAA
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/uGdJfuHvUObGnRuqZn-16TtEIm8.roa
Signing time: Sat 01 Jan 2022 04:59:26 +0000
ROA not before: Sat 01 Jan 2022 04:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 194.187.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27205034 (0x19f1daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Jan 1 04:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b867497ee1ef50e6c69d1baa667fb5e93b44226f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:9d:9d:47:e1:93:bc:45:00:f1:c6:05:c8:
1d:7c:0b:ba:96:5e:00:a4:18:8c:b5:2f:b3:76:c4:
e2:c0:15:bc:c3:99:16:51:d0:0f:59:6e:c8:1e:38:
af:6c:85:a7:9a:0f:72:7d:60:96:3d:94:da:00:55:
0b:ae:40:e5:05:3d:f5:c2:fb:f0:45:8b:81:5c:ac:
a1:a6:04:78:db:53:4d:5e:ec:71:22:77:bc:71:5f:
eb:dd:b2:31:2c:73:4c:16:57:a1:9a:be:0b:8c:92:
17:d6:7d:0e:fc:9f:5f:be:cb:51:c9:1e:bc:37:b1:
8f:21:6b:70:e7:96:0d:4c:1d:a2:89:d4:77:b0:fb:
33:25:f5:5f:5f:6e:42:97:0c:c6:81:9e:b6:30:c2:
01:8c:42:2b:da:92:b4:b0:31:e1:96:1f:6d:17:bf:
ac:f9:30:b0:f9:ea:6d:e3:c9:16:ea:df:83:c6:e5:
d1:45:4e:b6:e2:30:70:8f:b7:b8:83:c2:64:bf:4b:
72:24:32:6d:2d:2a:f7:3e:97:ae:33:8c:51:f8:e4:
b3:99:9c:77:13:30:4a:2f:82:a2:50:e2:e5:29:04:
fe:a5:f3:df:b8:73:e0:a9:e6:5c:b5:5c:aa:3f:6b:
8a:5e:8d:49:e1:a0:84:bc:77:33:04:be:60:49:a1:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:49:7E:E1:EF:50:E6:C6:9D:1B:AA:66:7F:B5:E9:3B:44:22:6F
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/uGdJfuHvUObGnRuqZn-16TtEIm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.56.0/22
Signature Algorithm: sha256WithRSAEncryption
19:2c:85:2d:21:96:81:53:dd:7b:d3:89:7e:c2:fd:7e:c3:cf:
f6:80:aa:08:18:b0:fd:cc:d3:e1:e0:4a:68:9f:64:ef:6a:59:
a8:4a:1a:2a:97:52:a5:8e:4a:01:82:35:30:74:53:23:c3:c0:
f5:68:30:5e:cd:a0:b7:f0:f5:9b:38:0a:09:56:d8:02:a0:56:
0e:97:47:1d:77:c2:ca:59:f5:39:b1:8e:3d:09:fe:52:53:14:
8b:49:3e:c6:38:91:93:d5:b6:3a:65:1d:66:50:e4:dd:6a:81:
53:29:18:90:32:f4:1c:85:9e:57:b4:cc:ba:08:84:77:4e:af:
f3:63:37:4d:88:e7:42:4b:27:a1:27:a4:5e:ab:c4:24:15:53:
93:b6:61:8f:a2:49:63:2f:60:f6:e1:1f:7d:cf:3e:a8:6d:10:
93:ae:40:ca:81:9d:92:9e:75:a5:57:1b:a4:dc:cd:4d:8f:4e:
9f:8a:b3:f9:ee:02:52:65:47:ae:b9:52:68:3e:84:f2:f4:36:
1c:b0:8d:64:3e:4b:5a:1d:83:d7:c8:dc:15:41:d6:34:7a:12:
b2:9b:6e:14:aa:9d:cd:5c:c0:7c:f9:76:96:14:26:66:b6:8d:
20:22:1f:53:9d:c8:3f:69:fc:86:51:6d:7b:9f:b5:22:7c:58:
cf:2e:32:7b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAZ8dqjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZjAzNjgxNmEzMTdkZDk5ZDI1MzgzYTMyYTY4MTg1OWMwNDdiNWZmMB4XDTIyMDEw
MTA0NTkyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjg2NzQ5N2VlMWVm
NTBlNmM2OWQxYmFhNjY3ZmI1ZTkzYjQ0MjI2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMh8nZ1H4ZO8RQDxxgXIHXwLupZeAKQYjLUvs3bE4sAVvMOZ
FlHQD1luyB44r2yFp5oPcn1glj2U2gBVC65A5QU99cL78EWLgVysoaYEeNtTTV7s
cSJ3vHFf692yMSxzTBZXoZq+C4ySF9Z9DvyfX77LUckevDexjyFrcOeWDUwdoonU
d7D7MyX1X19uQpcMxoGetjDCAYxCK9qStLAx4ZYfbRe/rPkwsPnqbePJFurfg8bl
0UVOtuIwcI+3uIPCZL9LciQybS0q9z6XrjOMUfjks5mcdxMwSi+ColDi5SkE/qXz
37hz4KnmXLVcqj9ril6NSeGghLx3MwS+YEmhCOkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS4Z0l+4e9Q5sadG6pmf7XpO0QibzAfBgNVHSMEGDAWgBSvA2gWoxfdmdJT
g6MqaBhZwEe1/zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3J3Tm9GcU1YM1puU1U0T2pLbWdZV2NCSHRmOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvNTJiMTk5LTllMWYtNGVjNy1iMGFhLTRhNGUwZjQyNGYxNy8x
L3VHZEpmdUh2VU9iR25SdXFabi0xNlR0RUltOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
NTJiMTk5LTllMWYtNGVjNy1iMGFhLTRhNGUwZjQyNGYxNy8xL3J3Tm9GcU1YM1pu
U1U0T2pLbWdZV2NCSHRmOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsK7ODANBgkqhkiG9w0BAQsFAAOC
AQEAGSyFLSGWgVPde9OJfsL9fsPP9oCqCBiw/czT4eBKaJ9k72pZqEoaKpdSpY5K
AYI1MHRTI8PA9WgwXs2gt/D1mzgKCVbYAqBWDpdHHXfCyln1ObGOPQn+UlMUi0k+
xjiRk9W2OmUdZlDk3WqBUykYkDL0HIWeV7TMugiEd06v82M3TYjnQksnoSekXqvE
JBVTk7Zhj6JJYy9g9uEffc8+qG0Qk65AyoGdkp51pVcbpNzNTY9On4qz+e4CUmVH
rrlSaD6E8vQ2HLCNZD5LWh2D18jcFUHWNHoSsptuFKqdzVzAfPl2lhQmZraNICIf
U53IP2n8hlFte5+1InxYzy4yew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:12 2024 by rpki-client on console-fra.rpki-client.org