Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/up_BdAwlsmXIEK9ywfUvDJcSi-I.roa
File: up_BdAwlsmXIEK9ywfUvDJcSi-I.roa (raw, json)
Hash identifier: 1YRmaIfUsC5j/LEMQAO+k/wCFVsiUb+5MVoAg99KZtQ=
Subject key identifier: BA:9F:C1:74:0C:25:B2:65:C8:10:AF:72:C1:F5:2F:0C:97:12:8B:E2
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 05D703B0
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/up_BdAwlsmXIEK9ywfUvDJcSi-I.roa
Signing time: Sat 01 Jan 2022 06:56:44 +0000
ROA not before: Sat 01 Jan 2022 06:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12762
IP address blocks: 193.186.88.0/21 maxlen: 21
193.186.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97977264 (0x5d703b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Jan 1 06:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba9fc1740c25b265c810af72c1f52f0c97128be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:41:99:37:fa:a0:be:17:9a:bb:bc:d6:a8:
1e:b2:77:20:74:c1:cd:06:15:90:df:78:c3:34:85:
75:4e:b9:d7:79:0a:23:20:82:7a:a6:50:ef:f5:7e:
0e:8d:db:01:5e:92:1b:43:29:57:05:74:a7:e3:aa:
de:71:7f:41:ed:d6:de:c3:54:5b:b8:d4:65:5a:f8:
48:85:09:c1:d3:6e:7a:29:71:48:5c:a9:41:35:c0:
55:b0:f8:b5:62:f6:2a:6e:b4:8b:87:4f:40:ae:99:
14:d7:f6:90:63:7d:a4:70:7e:cd:6d:13:3b:71:4c:
a8:73:a4:f0:74:af:1b:86:ee:de:7c:87:58:72:62:
65:ad:32:69:4e:96:38:1a:a3:83:ac:99:0b:be:e4:
b1:9d:96:aa:b7:cf:3c:a4:f4:a1:72:ab:16:8c:5d:
11:f4:52:5f:82:3c:84:1e:29:15:d1:c8:07:fb:18:
8a:a1:f2:02:7f:72:04:56:d6:5c:be:00:e7:87:85:
26:20:e1:d0:d8:eb:64:d8:b2:60:1b:c4:41:3b:73:
79:ee:54:b0:b4:e8:f9:9e:67:7c:f7:63:89:61:6c:
31:00:00:5a:54:cb:78:36:c0:2c:e7:5b:ea:a4:96:
46:62:7d:ee:03:b5:e8:8a:ec:91:05:65:23:70:e1:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9F:C1:74:0C:25:B2:65:C8:10:AF:72:C1:F5:2F:0C:97:12:8B:E2
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/up_BdAwlsmXIEK9ywfUvDJcSi-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.88.0-193.186.103.255
Signature Algorithm: sha256WithRSAEncryption
26:d0:c4:ca:24:bd:f4:d4:eb:4c:b9:dc:46:0b:25:cb:ed:d3:
ca:7b:92:01:fe:95:ae:d8:fd:ca:5b:49:a0:86:d9:81:71:bc:
3b:e9:50:27:c8:e7:71:9f:12:87:57:ba:40:e4:1f:ca:09:12:
15:c4:be:18:0b:1d:c5:a4:e5:af:10:a4:76:22:2b:fd:b6:7f:
a1:8f:f6:78:0c:d9:61:7e:d1:0d:13:57:17:f4:8a:db:18:1e:
10:fc:c5:88:76:2e:cd:f2:24:1f:c5:cf:5d:a2:80:e9:12:68:
f5:45:0f:f5:87:58:c3:56:25:02:84:80:e3:af:96:37:37:24:
d4:ba:e2:6d:82:17:e2:eb:dc:b3:49:80:e3:42:d5:b8:c9:f7:
35:27:51:2f:13:9a:c2:26:cc:99:bf:75:ac:94:f8:09:59:0b:
86:02:a4:b2:5c:13:83:9b:15:cd:e4:0d:c4:84:e4:ab:6a:a2:
f5:2d:11:03:eb:6b:04:c1:b8:2a:96:32:d4:fe:2c:ac:11:da:
23:03:ad:01:a3:ef:c8:5e:24:74:c4:82:16:a3:98:ac:27:27:
dd:07:c8:05:ad:cf:74:1f:de:f9:ed:22:2f:5e:ec:07:de:0a:
f8:0d:4b:b1:2b:d2:67:34:08:8f:ac:67:cd:85:3b:84:ef:89:
f1:ce:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:39 2023 by rpki-client on console-fra.rpki-client.org