Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ubu_KRbat9sqY-u_8IaviE82cwM.roa
File: ubu_KRbat9sqY-u_8IaviE82cwM.roa (raw, json)
Hash identifier: dgSpSN0EZAygFjNzB58z3OHIRyiKkUduhNYTCmD0MMg=
Subject key identifier: B9:BB:BF:29:16:DA:B7:DB:2A:63:EB:BF:F0:86:AF:88:4F:36:73:03
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0846B6E9
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ubu_KRbat9sqY-u_8IaviE82cwM.roa
Signing time: Mon 18 Apr 2022 14:43:52 +0000
ROA not before: Mon 18 Apr 2022 14:43:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.136.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138852073 (0x846b6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 18 14:43:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9bbbf2916dab7db2a63ebbff086af884f367303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:cc:3f:2a:d6:42:2f:51:8f:96:0b:d9:58:
ed:4c:44:4f:47:09:0a:ec:26:5b:29:d5:41:29:78:
90:4c:97:2e:83:af:4a:5c:2f:db:7c:14:f5:9a:ea:
85:eb:92:dc:8a:a4:b6:e6:a0:b6:29:17:5d:f3:f3:
a2:f0:c2:7a:8a:65:8a:98:29:0a:d0:f5:a3:a8:b9:
94:1c:9e:e4:30:45:30:f8:b6:02:d2:f4:25:4d:c6:
48:24:05:7d:11:09:2d:00:24:f6:66:f1:35:27:a2:
ee:54:3a:97:59:90:60:63:20:08:71:78:9a:26:c1:
ad:c4:ac:b0:16:01:37:c0:ae:d7:08:e4:a0:5c:c0:
f3:0b:f7:44:29:4d:26:3e:ac:b7:87:3e:63:06:1f:
7e:78:b7:59:33:17:59:16:a0:25:0f:b4:bc:6d:20:
2d:ad:77:d9:f5:f0:63:80:39:d1:d6:61:3d:6a:49:
1c:ae:17:85:7f:78:12:32:62:20:58:c5:7b:de:00:
42:3c:c7:79:07:6e:87:49:8e:27:79:62:7c:ac:05:
93:65:25:b6:2b:9b:1c:5e:7d:fb:a9:bc:a0:da:b6:
f0:b0:a2:1f:33:35:ce:4e:cd:8a:98:03:86:7a:fe:
8a:83:15:e9:1e:bd:d6:f8:54:87:a1:10:61:ae:0b:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BB:BF:29:16:DA:B7:DB:2A:63:EB:BF:F0:86:AF:88:4F:36:73:03
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ubu_KRbat9sqY-u_8IaviE82cwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:30:7b:f4:1c:96:94:b9:50:10:11:6e:af:22:0c:0a:8e:e5:
4e:bc:27:6e:6e:cd:27:4b:d7:de:e0:26:9c:ca:f8:51:e0:b4:
bd:ff:c6:df:fd:c0:8a:ae:ba:04:23:cb:ad:ca:29:6b:40:8e:
2f:ca:50:4c:d4:6d:a7:c9:c6:49:b5:ec:1b:3e:38:0e:44:c2:
dc:50:89:3c:55:52:89:4b:04:14:cf:7d:3e:90:b5:07:53:29:
5d:22:6e:fc:44:29:95:30:54:97:02:a1:a0:15:f0:5a:87:65:
f6:1e:91:93:de:0f:a5:72:d5:55:f4:09:db:e2:72:75:2e:b3:
b2:aa:90:e4:87:c9:c8:fc:57:f5:b7:7a:57:d7:06:6a:4f:25:
c7:a5:59:2c:e6:98:cf:15:76:44:c8:bb:09:af:6f:06:d8:06:
66:33:57:55:47:32:1e:f9:f5:8c:07:7d:42:c2:d4:fd:73:72:
ee:f8:f1:69:4f:54:fa:8d:ad:4c:80:64:40:4d:73:2d:39:36:
e9:9b:9b:2f:3a:0b:b6:25:8c:b6:4b:d6:85:85:8a:06:7e:de:
0e:de:e3:59:4e:dd:21:c7:d5:0f:61:6e:f4:50:0a:7f:36:58:
59:42:ee:35:a4:2a:39:59:c5:58:32:f9:eb:d2:68:89:c4:2a:
b5:1d:ea:22
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECEa26TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODA1ZjE3YzJkNzEzM2QyZGFkM2E4ZGY3ZTM1MzE1ZTM3ZWY1ZGFmMB4XDTIyMDQx
ODE0NDM1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjliYmJmMjkxNmRh
YjdkYjJhNjNlYmJmZjA4NmFmODg0ZjM2NzMwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI/9zD8q1kIvUY+WC9lY7UxET0cJCuwmWynVQSl4kEyXLoOv
Slwv23wU9ZrqheuS3IqktuagtikXXfPzovDCeoplipgpCtD1o6i5lBye5DBFMPi2
AtL0JU3GSCQFfREJLQAk9mbxNSei7lQ6l1mQYGMgCHF4mibBrcSssBYBN8Cu1wjk
oFzA8wv3RClNJj6st4c+YwYffni3WTMXWRagJQ+0vG0gLa132fXwY4A50dZhPWpJ
HK4XhX94EjJiIFjFe94AQjzHeQduh0mOJ3lifKwFk2UltiubHF59+6m8oNq28LCi
HzM1zk7NipgDhnr+ioMV6R691vhUh6EQYa4Lqd8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS5u78pFtq32ypj67/whq+ITzZzAzAfBgNVHSMEGDAWgBRIBfF8LXEz0trT
qN9+NTFeN+9drzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8x
L3VidV9LUmJhdDlzcVktdV84SWF2aUU4MmN3TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
OGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8xL1NBWHhmQzF4TTlM
YTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2IBjANBgkqhkiG9w0BAQsFAAOC
AQEAajB79ByWlLlQEBFuryIMCo7lTrwnbm7NJ0vX3uAmnMr4UeC0vf/G3/3Aiq66
BCPLrcopa0COL8pQTNRtp8nGSbXsGz44DkTC3FCJPFVSiUsEFM99PpC1B1MpXSJu
/EQplTBUlwKhoBXwWodl9h6Rk94PpXLVVfQJ2+JydS6zsqqQ5IfJyPxX9bd6V9cG
ak8lx6VZLOaYzxV2RMi7Ca9vBtgGZjNXVUcyHvn1jAd9QsLU/XNy7vjxaU9U+o2t
TIBkQE1zLTk26ZubLzoLtiWMtkvWhYWKBn7eDt7jWU7dIcfVD2Fu9FAKfzZYWULu
NaQqOVnFWDL569JoicQqtR3qIg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:12 2025 by rpki-client