Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UhWch_TI2f-0fNxZcIltMcF2zE4.roa
File: UhWch_TI2f-0fNxZcIltMcF2zE4.roa (raw, json)
Hash identifier: dNBvKc8g9zMaJiFcv6vL8Fv4NqdsX+vkoeiG86ql+Ao=
Subject key identifier: 52:15:9C:87:F4:C8:D9:FF:B4:7C:DC:59:70:89:6D:31:C1:76:CC:4E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18AFA0BC
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UhWch_TI2f-0fNxZcIltMcF2zE4.roa
Signing time: Sat 12 Feb 2022 17:21:53 +0000
ROA not before: Sat 12 Feb 2022 17:21:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212032
IP address blocks: 193.149.161.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414163132 (0x18afa0bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 12 17:21:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52159c87f4c8d9ffb47cdc5970896d31c176cc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:23:bf:bf:3e:53:4b:f5:af:59:26:34:b6:
99:12:3e:b8:6d:45:7f:ca:55:b8:68:53:90:d9:bc:
ed:ff:26:ec:5e:27:69:e7:e2:12:66:ed:87:00:d0:
1a:4c:bc:db:20:19:85:02:c8:a5:12:ca:21:74:5c:
10:54:37:3a:63:c5:20:7c:c5:eb:e2:df:ac:10:ca:
c4:89:ae:f8:da:70:c3:26:aa:cc:bb:17:03:dd:b6:
72:2e:b5:9a:8c:c2:a0:f7:be:54:06:c7:91:42:47:
8f:43:ba:65:c6:b6:3f:e7:1a:a6:49:39:ca:eb:3a:
f9:22:2d:b0:21:4c:36:01:7b:d7:2b:81:cd:5c:7b:
a2:34:63:53:7c:0c:3b:7b:ab:d3:ac:55:57:b8:96:
24:88:97:38:2b:60:46:95:04:ec:69:3a:55:91:3a:
88:3e:43:ad:f7:8c:79:c5:54:67:18:c0:30:e7:f7:
9e:c3:ec:1e:cb:0e:d8:e9:47:e8:3f:c0:6b:e7:f7:
09:8f:f5:fe:68:94:a2:8a:95:d1:59:b5:16:8e:ae:
09:e0:62:96:50:1d:f1:47:f5:1d:0f:2f:d0:2d:a6:
2c:c7:71:cc:2c:35:3a:33:fe:07:05:3e:87:88:04:
94:a1:8f:f6:df:0c:6c:b1:43:af:5a:1f:c1:42:69:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:15:9C:87:F4:C8:D9:FF:B4:7C:DC:59:70:89:6D:31:C1:76:CC:4E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UhWch_TI2f-0fNxZcIltMcF2zE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.161.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1c:14:5e:1e:2a:4e:49:33:5b:80:be:a3:d9:b9:37:aa:39:
dd:0d:93:bd:19:64:2f:96:d9:e3:ee:f3:82:fb:b6:5e:48:6e:
54:df:9f:b3:cd:63:a8:1a:7f:ac:7c:98:c5:e2:68:88:6d:44:
ac:10:ee:0a:68:11:33:0e:20:cb:28:be:22:c7:1a:f3:6b:18:
1a:03:f1:93:b7:26:ef:25:5a:9c:7e:f2:a6:a4:bf:fe:de:2d:
36:0c:67:c6:1e:66:d2:80:a9:be:ac:b2:63:0c:9b:88:14:8b:
9b:f4:ee:5b:5e:fc:17:e4:46:26:37:da:48:4d:47:33:b2:e7:
ed:4f:b5:1e:5b:3b:d6:91:7f:c8:9b:52:88:a2:ef:82:0b:b3:
15:e9:5d:5e:41:3e:e0:0c:52:10:94:30:56:ec:75:fe:6c:9d:
b4:7f:ec:94:54:df:06:a2:b0:26:d3:19:fc:fb:b9:d6:db:7c:
21:5e:e6:4f:85:cd:74:0f:bd:c5:e1:8d:4f:20:c3:4b:3c:c7:
94:32:9c:d1:9c:c9:2a:8b:4e:32:7e:01:c7:d6:e1:6d:f4:3b:
ba:5e:37:ef:1e:33:62:16:92:9f:5b:d6:ec:59:7b:9a:97:9c:
b3:a0:2e:71:b3:61:fd:99:ef:6a:7e:88:bc:d6:70:d9:47:f5:
9f:40:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org