Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/NUUlbrtXRSOE3WvH6KixIUiJ-tA.roa
File: NUUlbrtXRSOE3WvH6KixIUiJ-tA.roa (raw, json)
Hash identifier: 4Qas3e99xt5Hwzk+aSfy39EbBzujH9G3ZQpZXshiCUA=
Subject key identifier: 35:45:25:6E:BB:57:45:23:84:DD:6B:C7:E8:A8:B1:21:48:89:FA:D0
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 0BD2AC55
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/NUUlbrtXRSOE3WvH6KixIUiJ-tA.roa
Signing time: Sun 23 Jan 2022 16:09:23 +0000
ROA not before: Sun 23 Jan 2022 16:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206471
IP address blocks: 194.127.111.0/24 maxlen: 24
194.127.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198356053 (0xbd2ac55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jan 23 16:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3545256ebb57452384dd6bc7e8a8b1214889fad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:72:ae:62:ba:64:c8:ed:40:22:46:03:14:
73:33:56:29:59:12:a2:69:f9:a4:2b:1c:f6:30:ea:
b2:bf:24:a5:0f:4a:0b:e2:18:74:39:46:01:d7:bf:
7f:32:7d:75:3f:53:d6:0c:76:e6:91:bd:3a:d3:fa:
a2:a5:de:83:75:e3:60:f8:35:bb:86:3c:cd:a2:3c:
f4:f9:e4:1d:36:b3:bb:c7:55:5e:6c:ba:a2:1f:04:
32:ab:87:7d:d6:a3:ab:81:e6:d4:bd:6a:4b:13:bc:
4d:5e:fe:0b:ab:de:40:fa:a3:c5:22:9a:ef:8a:8a:
5d:42:8a:4b:2a:56:ca:a5:69:c6:2b:9b:3b:7f:67:
00:16:8e:e6:93:a4:b3:c6:0c:78:27:a0:ad:9d:86:
fe:d7:e7:01:6f:9e:40:b9:2e:72:5e:40:5d:4d:92:
47:27:f1:5d:8e:a4:c7:2c:9f:63:47:52:62:99:42:
e8:0e:86:09:40:13:f9:ba:01:a9:23:d2:6f:66:0e:
b7:a1:e4:54:60:2a:32:13:5b:b2:4d:eb:f0:27:6e:
ee:38:ba:83:49:c5:23:53:a0:c7:83:1b:78:f6:68:
c8:02:7b:f6:d6:dd:a1:82:07:3b:39:bd:37:62:f6:
8f:c7:2f:22:5a:75:5d:5d:fd:f4:07:f4:e3:61:fd:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:45:25:6E:BB:57:45:23:84:DD:6B:C7:E8:A8:B1:21:48:89:FA:D0
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/NUUlbrtXRSOE3WvH6KixIUiJ-tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.109.0/24
194.127.111.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a7:58:e9:ce:ce:ad:1e:4c:4e:b7:20:38:d3:46:ff:41:fe:
8c:28:2b:27:60:98:1f:dc:6f:68:e3:95:c0:7d:36:d6:45:bc:
05:56:d9:40:e1:f0:6f:6d:13:33:4d:b0:ca:cb:a1:af:df:49:
89:81:e3:94:d1:7f:b4:10:2d:cf:f0:e5:08:b0:21:4e:64:1e:
2e:f4:58:53:36:09:eb:47:65:67:5c:39:0f:d6:d5:85:1e:7d:
97:6a:12:8a:6e:df:7c:64:d4:82:29:98:a3:e4:bc:9c:de:53:
9e:b4:c1:9b:48:a1:e9:9f:7e:d4:a1:67:24:59:88:db:c0:ed:
d7:e9:c6:ae:9e:34:e4:f9:12:a1:e7:79:3d:ab:e1:21:53:d3:
a1:b9:e2:7a:ec:ae:a2:05:eb:3e:31:46:e2:fb:45:07:04:48:
2a:01:89:f8:0c:5b:b1:45:e0:42:97:89:50:2c:1e:1f:ea:8a:
36:4a:fc:ea:2b:b4:6e:02:2a:4f:39:d7:b7:77:67:4d:8a:31:
a7:92:43:64:fa:8b:53:eb:d8:cb:bb:77:06:a6:f7:88:92:9a:
d8:b0:ba:cd:58:76:a5:a4:75:27:df:04:84:c6:fb:70:80:e8:
5d:f8:72:71:0a:81:30:ac:45:da:d7:e0:6e:08:01:94:d3:21:
d4:96:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:30 2024 by rpki-client on console-fra.rpki-client.org