Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/UAbulqHdZ_uito0OufurA4oZ6EM.roa
File: UAbulqHdZ_uito0OufurA4oZ6EM.roa (raw, json)
Hash identifier: o31WYtAwFekGuITdhcRka74PSI8WE8hjMf5qy4fd+aU=
Subject key identifier: 50:06:EE:96:A1:DD:67:FB:A2:B6:8D:0E:B9:FB:AB:03:8A:19:E8:43
Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Certificate serial: 09AE4DB5
Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/UAbulqHdZ_uito0OufurA4oZ6EM.roa
Signing time: Sat 01 Jan 2022 11:53:46 +0000
ROA not before: Sat 01 Jan 2022 11:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52052
IP address blocks: 194.247.33.0/24 maxlen: 24
185.166.72.0/22 maxlen: 22
2a09:f880::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162418101 (0x9ae4db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Validity
Not Before: Jan 1 11:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5006ee96a1dd67fba2b68d0eb9fbab038a19e843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:14:57:08:00:f4:dc:c0:f2:86:33:98:f0:
51:a8:37:66:a5:06:ac:69:66:7a:02:e0:fe:42:d6:
90:58:e2:c6:73:22:ce:a1:c0:3f:66:69:b3:48:7f:
16:7b:12:34:2e:1a:b7:1c:1e:00:ee:6b:44:23:25:
03:68:12:4b:85:b3:6c:2e:5a:3f:d4:ee:d9:0e:1e:
9d:fe:a6:b2:9b:93:df:5c:df:9a:5b:c8:79:ad:2e:
50:f2:02:5a:7f:05:28:cb:b4:9f:e2:9d:a2:75:4e:
7e:d6:94:84:d6:50:76:6a:9f:35:af:a6:89:98:87:
21:71:a0:45:b4:2b:bc:36:ba:3c:92:31:a8:7b:f2:
56:42:27:20:65:15:e5:22:5b:8a:bd:23:5d:4b:b5:
24:f6:4e:12:2a:7d:af:89:54:f7:f5:35:83:bd:6d:
75:80:67:0d:77:b8:79:43:4e:e2:8c:c5:9a:d9:7e:
30:6c:db:49:6f:08:a6:59:16:f2:08:68:26:51:32:
42:cb:65:19:a6:d9:1d:55:82:cb:5d:c1:46:99:1f:
a4:8e:8a:53:e0:f5:f5:53:36:60:c4:ef:96:fc:cf:
83:67:da:23:ec:a0:77:2f:f3:b1:cd:86:1b:a5:00:
e6:19:b0:7d:f4:0a:16:18:44:9a:be:1c:d9:21:e8:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:EE:96:A1:DD:67:FB:A2:B6:8D:0E:B9:FB:AB:03:8A:19:E8:43
X509v3 Authority Key Identifier:
keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/UAbulqHdZ_uito0OufurA4oZ6EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.72.0/22
194.247.33.0/24
IPv6:
2a09:f880::/32
Signature Algorithm: sha256WithRSAEncryption
20:16:d3:29:ec:c6:6d:db:e2:b8:28:04:1a:91:77:b4:3f:5b:
72:99:80:5b:b4:eb:0f:7c:b2:32:04:87:4f:ee:1b:0f:e3:f3:
d4:43:a3:dd:49:6c:47:3a:10:dd:be:2a:6c:af:53:65:0c:b4:
29:3c:0b:bc:4e:ec:36:ff:7d:c1:61:3e:01:26:b0:ca:6a:ed:
85:3d:00:90:75:e8:45:3b:d6:e2:ff:8c:cd:dc:2c:1e:41:fb:
99:8d:45:29:03:a9:87:10:7b:01:aa:c5:eb:b8:9a:93:b9:b4:
39:3c:c2:e5:b9:78:a0:e8:e0:cc:81:24:16:db:02:4c:1b:fb:
0d:4c:d8:3a:22:8c:85:95:6c:e9:be:3a:46:e3:f1:db:64:f0:
15:56:47:7e:1d:b2:8d:ff:55:46:f5:ee:c3:7a:a6:fd:5b:87:
df:11:4a:54:0d:21:bc:0e:68:2b:23:8c:2e:f6:ec:54:a4:7d:
63:46:86:af:93:47:bd:f0:9e:66:12:db:aa:20:f1:7c:37:44:
8a:de:a8:61:c9:7b:1a:0a:a0:c7:db:94:99:2a:3a:90:14:9c:
bc:2f:d2:48:97:c0:fc:74:b8:2a:89:51:9d:c2:8a:db:2e:7a:
c6:db:f3:53:3b:ce:1a:4e:58:54:77:7a:3d:bc:0f:c8:0a:ef:
c0:38:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:37 2023 by rpki-client on console-ams.rpki-client.org