Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/uTkEgwfWQ8tG7vprMZ-utFnDYoI.roa
File: uTkEgwfWQ8tG7vprMZ-utFnDYoI.roa (raw, json)
Hash identifier: q66CfVKfZXd9mvCjNS2jG5HubajtJXJf8VwLQsmZ61s=
Subject key identifier: B9:39:04:83:07:D6:43:CB:46:EE:FA:6B:31:9F:AE:B4:59:C3:62:82
Certificate issuer: /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial: 11504E3D
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/uTkEgwfWQ8tG7vprMZ-utFnDYoI.roa
Signing time: Sat 01 Jan 2022 05:02:04 +0000
ROA not before: Sat 01 Jan 2022 05:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6732
IP address blocks: 193.247.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290475581 (0x11504e3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Validity
Not Before: Jan 1 05:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b939048307d643cb46eefa6b319faeb459c36282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:5d:d5:be:ca:47:d9:d0:91:aa:0f:d2:d1:
8f:9f:b8:fd:0f:8d:77:4f:6c:07:bb:f2:25:92:08:
fc:ea:3f:ee:7c:11:92:d4:7c:e7:68:6f:bf:d3:e9:
ca:7e:b1:91:f7:b0:72:80:f8:85:6a:29:aa:b2:f3:
5a:9b:2c:c5:85:5a:73:87:40:81:96:23:14:92:08:
5a:61:3a:33:7b:bc:f5:53:f1:cd:01:8e:75:93:20:
3c:12:ae:ea:47:e8:12:d6:1d:64:1d:21:f0:6c:e1:
7a:e3:56:fa:12:69:be:96:d2:12:ac:d7:3b:92:9c:
ff:c8:d1:6b:a6:86:c4:81:1c:15:ca:19:76:55:66:
0c:28:72:74:45:54:aa:4e:63:7c:0f:1e:a2:ba:80:
b3:c6:9b:f1:5c:c5:16:0a:87:9d:25:a0:ca:c5:0f:
dd:9b:89:7a:be:bd:45:fc:0a:47:b0:4c:2e:2f:51:
8a:14:6a:c3:d9:f5:10:a0:1c:05:78:a9:aa:7a:b3:
dd:8a:61:e6:6d:5c:4b:13:1c:5a:52:d0:47:32:4f:
dd:72:aa:6a:0c:be:28:01:1f:b2:c9:95:2a:7b:ec:
d5:0d:ec:05:dd:64:99:2c:66:7b:21:2c:02:ba:d7:
85:14:26:0d:e3:d0:45:13:c0:14:c4:0b:58:3b:a5:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:39:04:83:07:D6:43:CB:46:EE:FA:6B:31:9F:AE:B4:59:C3:62:82
X509v3 Authority Key Identifier:
keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/uTkEgwfWQ8tG7vprMZ-utFnDYoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.146.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:db:38:28:4a:c4:6b:7f:e2:52:7c:5e:e1:31:36:1a:98:c2:
2c:eb:09:7c:5b:d0:5d:73:75:40:f3:c5:a2:a8:83:70:ab:aa:
3a:d9:34:4c:dc:c5:2f:e1:59:31:cc:f8:29:58:ae:f9:e8:41:
bb:81:0c:a5:67:ac:e2:e1:0b:96:e8:d5:19:50:94:c3:90:19:
9b:c9:1b:cf:07:eb:40:db:a5:4b:4e:9a:d7:ff:8d:2c:31:9b:
9c:70:ea:be:e6:0c:5b:b4:aa:f4:3a:fb:b4:f9:77:c6:29:a7:
cc:17:f4:60:32:ce:93:38:7e:a0:25:8d:7c:e7:c8:64:b1:6b:
2e:af:2d:b7:48:32:f0:34:cb:ec:30:ae:a0:d1:27:d6:77:2d:
ad:c9:5d:ae:d5:3f:8f:14:08:f3:45:1d:c2:ca:ab:7d:28:b6:
60:44:b5:df:29:be:6f:4d:6d:f3:44:f7:43:44:6c:9c:ce:21:
51:7a:cc:fd:f9:15:e6:05:01:11:f6:c5:2f:e5:10:ff:ac:57:
08:05:c8:cd:3c:e3:55:61:d0:46:d3:c9:6c:1d:45:06:8b:a6:
b5:1d:04:c6:f5:f3:d1:95:db:ab:bf:38:10:6e:85:8b:37:4e:
9c:32:e1:54:0a:13:d3:9d:e1:33:d8:00:0e:fb:8e:b9:6f:d0:
e7:48:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:05 2024 by rpki-client on console-fra.rpki-client.org