Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/unBaQD_dViQkSekIYZLc50lVZrI.roa
File: unBaQD_dViQkSekIYZLc50lVZrI.roa (raw, json)
Hash identifier: 3iajZpSQ+e/BG5GZRTZesFJFYWdDslxhkGx5EOX5fkU=
Subject key identifier: BA:70:5A:40:3F:DD:56:24:24:49:E9:08:61:92:DC:E7:49:55:66:B2
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 032EE6AB
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/unBaQD_dViQkSekIYZLc50lVZrI.roa
Signing time: Sat 01 Jan 2022 08:06:00 +0000
ROA not before: Sat 01 Jan 2022 08:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 193.37.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53405355 (0x32ee6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jan 1 08:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba705a403fdd56242449e9086192dce7495566b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:a4:3d:1f:12:af:49:88:c1:84:cd:86:09:
c1:aa:83:5c:32:59:8c:6d:01:0a:e5:58:23:2b:20:
9a:87:d4:6b:c2:99:7d:f7:a9:a0:65:30:66:c7:1b:
ab:52:0b:f2:87:0d:b3:89:e8:a5:3e:46:80:84:9d:
f8:8e:f4:b5:bd:5d:e0:ea:18:77:f4:88:78:51:43:
d8:fc:e7:70:64:c2:51:a1:93:50:40:97:e5:6f:6d:
27:01:22:0e:a5:bf:a3:1a:e6:7d:c3:db:3b:3b:e9:
26:8a:55:ee:9a:e6:b7:6d:bb:91:9e:ee:18:33:dd:
12:c3:ff:1b:35:78:f6:31:65:0f:5e:fb:3f:07:5e:
11:49:27:00:6d:bc:fa:c2:eb:31:7c:ee:8c:c7:23:
00:d4:22:6f:08:fc:75:9a:7a:b2:b3:3d:bf:5f:be:
1b:6e:09:8e:51:72:c2:94:df:14:fa:db:73:66:f9:
eb:38:e5:9f:a9:2f:4a:4c:f4:50:db:d7:0d:54:82:
25:2c:21:6b:ee:aa:b5:ce:ce:13:d7:0d:d8:79:ea:
b7:3e:bc:bb:08:f2:58:7e:4f:a4:df:37:0d:ca:72:
e6:ef:c2:2a:28:99:10:6f:10:a7:14:cc:34:df:02:
52:bf:2c:16:78:e4:64:cb:ae:80:71:85:8f:f5:b3:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:70:5A:40:3F:DD:56:24:24:49:E9:08:61:92:DC:E7:49:55:66:B2
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/unBaQD_dViQkSekIYZLc50lVZrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:28:83:7c:c5:be:c8:6a:9c:4b:bb:c6:36:23:9a:b6:41:4f:
ab:c7:53:ef:fc:a1:81:14:f1:c6:95:ce:49:aa:71:8b:0c:ec:
c7:07:d0:6e:b2:a5:2f:e9:24:4f:b5:ae:5b:14:e7:19:94:e8:
e1:22:a2:8e:c3:3e:f3:02:7e:c5:36:e4:74:79:6d:de:4a:a9:
62:89:8e:1b:8f:61:30:fd:16:66:e8:4f:d1:fa:3e:26:e3:c9:
f5:0f:30:70:2b:81:56:62:4b:06:a3:5d:aa:92:a8:fb:56:94:
3e:47:18:63:60:0a:f5:4d:df:c8:97:c9:5d:59:9c:eb:fd:8c:
11:b0:28:95:30:bb:a9:f1:a4:42:0a:13:89:87:63:a1:0a:a8:
a5:71:b3:b3:f9:af:5e:36:f0:7b:dc:ec:14:d0:64:80:d8:6d:
2d:7a:f5:70:13:7a:ff:d7:35:f9:8f:c0:46:92:9d:7b:00:c1:
72:c9:5d:a2:61:72:d7:16:d3:1a:d4:d4:87:0b:ba:fe:31:00:
8d:53:24:f1:ab:1c:65:da:20:2f:8a:17:f0:e5:7e:db:13:a2:
ff:d9:71:da:b2:2e:fe:a0:26:99:35:f9:12:61:78:7f:1a:74:
a4:ce:9e:64:40:bb:de:a1:cb:9b:cc:8f:fc:b8:1d:46:ba:2c:
1d:dd:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org