Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/UKzeN0RuO5lwTIADj1U84iihWSk.roa
File: UKzeN0RuO5lwTIADj1U84iihWSk.roa (raw, json)
Hash identifier: /Tc051HiHIbLTvrbXcN5NdIIzDpkWPpukmxiXhghy1M=
Subject key identifier: 50:AC:DE:37:44:6E:3B:99:70:4C:80:03:8F:55:3C:E2:28:A1:59:29
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 06721156
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/UKzeN0RuO5lwTIADj1U84iihWSk.roa
Signing time: Tue 03 May 2022 07:17:19 +0000
ROA not before: Tue 03 May 2022 07:17:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13121
IP address blocks: 46.231.224.0/21 maxlen: 21
213.169.64.0/19 maxlen: 19
213.169.88.0/21 maxlen: 21
2a01:6880:0:1::/64 maxlen: 64
2a01:6880::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108138838 (0x6721156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: May 3 07:17:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50acde37446e3b99704c80038f553ce228a15929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:73:d5:07:c8:c4:04:58:aa:e8:97:79:62:
18:af:17:65:c9:75:56:89:42:dd:30:01:1b:28:38:
78:9b:07:ef:8d:3f:b1:e0:87:20:2f:bd:ee:1f:5a:
fa:ee:4d:b6:3d:fe:23:7e:3e:62:7a:33:11:55:34:
61:da:06:5e:24:a3:91:3d:9d:d8:10:1d:b8:b4:dd:
1d:6c:f0:5e:5b:1c:82:3f:41:b5:a4:fb:94:25:7e:
3a:45:25:de:43:08:46:12:41:f2:74:5f:23:99:d7:
0a:29:f1:54:f7:eb:ac:1a:61:a8:f0:58:93:85:b8:
d7:4f:18:ed:45:6c:e5:19:78:a9:06:cb:f2:03:d5:
bc:e5:b9:4d:eb:a8:07:60:73:40:bb:fa:4c:c7:3c:
c0:5a:ff:ce:f6:a0:a2:c0:2c:c5:56:be:5f:b4:dd:
17:2f:6e:6c:22:56:13:97:aa:bc:85:e4:6d:92:bd:
3b:c2:f0:bc:10:93:44:63:8a:28:26:7f:f8:33:85:
9e:be:0b:83:d3:aa:9e:de:c5:8c:9e:ca:34:9e:ef:
70:b7:f1:9b:b2:a4:a1:4d:14:f4:48:15:1c:de:6a:
91:44:18:9b:ff:76:b3:98:e4:59:65:8a:79:5e:91:
93:c6:67:d6:07:0e:18:ff:a1:42:26:df:92:6a:76:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AC:DE:37:44:6E:3B:99:70:4C:80:03:8F:55:3C:E2:28:A1:59:29
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/UKzeN0RuO5lwTIADj1U84iihWSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.224.0/21
213.169.64.0/19
IPv6:
2a01:6880::/32
Signature Algorithm: sha256WithRSAEncryption
3c:02:15:3a:6a:0c:e5:74:04:03:29:5d:0e:9a:42:6e:b5:f5:
08:57:59:23:9a:fa:0b:55:a0:c3:dd:50:2c:af:fc:5b:fd:a3:
25:12:e6:19:b7:5d:c6:13:27:82:94:d8:68:cc:bd:ee:d6:c8:
92:a4:bc:84:cd:02:85:e7:64:51:7b:13:81:6b:96:32:f5:53:
1d:30:2b:10:f6:58:cf:a8:4e:6a:42:56:ca:c4:b5:34:77:61:
64:fc:83:0a:47:3b:b6:27:b3:bd:ec:17:1e:a7:ea:38:5e:ff:
40:12:47:9d:d9:53:46:20:9c:33:cb:ff:8a:bf:d7:8e:ef:35:
58:bb:c3:d8:71:6e:30:15:e2:65:1d:b9:91:d1:7e:87:6d:54:
6f:a9:48:db:c8:ed:4c:ae:3e:90:76:6e:2c:b8:bc:b8:ed:c1:
39:21:49:ee:7b:cc:cc:8e:a9:52:d7:9e:f0:da:9d:4c:e9:3d:
8e:20:67:c4:d4:71:18:5c:6a:fa:23:a7:ec:a8:8c:bd:54:3a:
44:44:ee:bb:eb:91:b3:81:c5:fb:be:ab:3d:4f:e6:21:ed:23:
1f:91:83:13:4a:f1:27:d5:01:34:f5:fb:77:85:b8:3c:6a:42:
e0:7c:dc:cd:75:c2:ba:a8:c4:8e:b8:c5:c0:f9:16:08:a4:d5:
8a:65:b1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:27 2024 by rpki-client on console-fra.rpki-client.org