Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ubpDfYU_S430C4h6ZdRjiuwR3Ac.roa
File: ubpDfYU_S430C4h6ZdRjiuwR3Ac.roa (raw, json)
Hash identifier: r/SCd+5s/nIVlbN1AEMd+1n9oHsxVcp5knCYCjn++CE=
Subject key identifier: B9:BA:43:7D:85:3F:4B:8D:F4:0B:88:7A:65:D4:63:8A:EC:11:DC:07
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4291DBB3
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ubpDfYU_S430C4h6ZdRjiuwR3Ac.roa
Signing time: Sat 01 Jan 2022 14:03:30 +0000
ROA not before: Sat 01 Jan 2022 14:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208639
IP address blocks: 193.180.56.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116855219 (0x4291dbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9ba437d853f4b8df40b887a65d4638aec11dc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:8b:e3:5a:2c:ad:01:ff:61:df:a9:8e:69:
f8:1b:5a:5b:88:ec:44:49:61:de:42:13:72:05:3b:
c9:d4:9e:f8:cf:69:ab:ca:c7:ef:e0:cb:02:db:5e:
2b:37:8e:37:21:ed:6e:5d:88:53:f3:6c:e1:88:31:
b8:e2:78:26:f8:c1:f7:12:7d:f2:99:de:15:15:ab:
01:73:e0:1d:58:b1:41:5e:8d:d2:5c:48:7f:d4:f4:
72:93:63:6a:e6:9b:d0:eb:ae:91:95:4e:29:f8:ab:
62:78:06:77:cb:5f:b5:eb:96:5c:18:66:b6:f4:92:
27:c9:49:ec:2a:f3:b4:a7:3f:6c:a3:8d:81:53:9e:
f6:f3:e9:5a:3e:bd:d9:a1:5c:cc:e3:4b:d9:4e:ff:
99:7b:25:1e:00:75:f8:6c:03:84:12:f6:49:d2:12:
ac:42:8d:3b:b8:7b:21:19:5a:8c:a1:ac:4e:5b:37:
5e:49:62:19:d5:5d:f1:49:74:6c:d6:ce:9a:47:7f:
72:9f:1b:7c:df:e3:c9:04:d1:f0:e2:17:b2:28:ac:
17:0b:16:1b:fb:b8:09:9a:33:5b:a6:b7:c8:04:42:
ab:00:b6:9b:7c:d3:c5:db:2c:23:8b:17:34:be:03:
5d:ec:1a:c9:f1:b9:89:15:80:87:26:4a:55:f1:7d:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BA:43:7D:85:3F:4B:8D:F4:0B:88:7A:65:D4:63:8A:EC:11:DC:07
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ubpDfYU_S430C4h6ZdRjiuwR3Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.56.0/23
Signature Algorithm: sha256WithRSAEncryption
86:26:26:4a:98:3e:a9:18:92:29:8f:c2:ca:19:54:28:94:11:
70:5d:b6:c1:ee:c8:2c:e7:00:9b:44:01:b3:6a:f8:26:3b:17:
5e:13:f9:a8:40:94:fe:b7:96:43:9e:c6:4f:88:75:65:04:71:
10:34:a2:ae:99:ab:3d:12:84:88:83:7c:37:b6:4e:e8:ab:8e:
7a:ed:29:2f:b6:d6:ca:86:d5:20:c2:96:98:40:93:7d:64:fe:
64:a3:c9:6f:6d:7d:1c:da:77:26:dd:e1:b3:be:ca:7b:3d:53:
4f:1f:de:25:2f:a3:6e:eb:6b:03:49:3a:dc:a0:11:be:e0:a8:
39:28:fb:2e:af:dc:b4:8e:36:72:d7:34:e6:43:3a:36:21:7c:
d1:e1:1a:4e:42:70:68:42:fa:a5:bb:ab:ae:88:92:82:96:d8:
ca:b4:39:3c:78:6d:1e:db:47:d4:6e:24:42:73:9d:38:2c:88:
e5:a2:f6:0c:a2:7c:69:3d:c9:fc:e0:a5:ff:35:65:5a:f1:ce:
8a:43:b5:ce:ab:6a:43:e3:5b:af:37:0d:b7:b5:31:db:9e:ba:
61:af:b1:b6:6b:d8:e5:00:09:3f:9f:80:84:7e:b7:a5:ad:4c:
2d:80:b2:b3:67:05:61:62:ae:a3:cb:88:b1:69:2d:49:ec:cb:
cb:18:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org