Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/UbQ4BiPyxZOYV4RunKGtKfHZAS8.roa
File: UbQ4BiPyxZOYV4RunKGtKfHZAS8.roa (raw, json)
Hash identifier: GPdJHQWdpu6kHxwuyDyKmcNGtrrNExELWNktfmMh7T0=
Subject key identifier: 51:B4:38:06:23:F2:C5:93:98:57:84:6E:9C:A1:AD:29:F1:D9:01:2F
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 01823B92BF1444C4E8809DAF14ACC27C093B
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/UbQ4BiPyxZOYV4RunKGtKfHZAS8.roa
Signing time: Tue 26 Jul 2022 17:34:08 +0000
ROA not before: Tue 26 Jul 2022 17:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15987
IP address blocks: 46.41.32.0/24 maxlen: 24
185.112.252.0/22 maxlen: 24
188.246.23.0/24 maxlen: 24
2a02:a00:1009::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:92:bf:14:44:c4:e8:80:9d:af:14:ac:c2:7c:09:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Jul 26 17:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51b4380623f2c5939857846e9ca1ad29f1d9012f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:b6:ea:de:ff:87:a8:9f:81:b2:8f:b5:00:
bd:6e:cf:d5:cd:10:12:4c:a4:34:8b:1d:89:2f:8f:
ed:dc:9f:9b:08:41:a2:b0:5d:40:d6:99:2d:c0:25:
1a:38:21:79:fa:a5:48:c8:2e:ca:b3:cc:5e:3c:9d:
21:50:3d:45:3e:36:22:7b:57:14:5d:92:6a:cc:7e:
6b:42:04:4a:02:f8:7e:cb:8a:96:9a:8e:5f:20:e8:
2b:25:28:74:28:d6:88:6d:af:49:73:31:e7:58:71:
55:c5:c0:8b:95:11:7e:3f:fd:ab:5a:2f:57:e6:fe:
1a:a5:be:bb:f9:ee:26:81:51:59:98:0e:2c:d7:ba:
d9:22:f4:a0:27:9f:07:58:f7:f3:b8:83:2c:42:2e:
bf:b7:28:48:79:51:c3:3e:01:3c:5d:d5:1e:81:c7:
87:05:29:77:c9:c8:b6:12:cd:9c:d9:d0:b5:58:96:
fc:03:a6:93:ca:01:55:4a:8a:67:2c:d9:76:b9:2d:
19:90:f8:48:20:fc:a3:a4:53:a2:1c:1f:6f:f1:97:
da:6f:a5:19:7f:94:15:27:3b:f8:22:20:be:c2:04:
fc:09:8d:a7:dc:eb:54:f8:d5:c6:88:f1:77:e0:02:
c8:0f:7d:a3:c8:f7:f2:e9:5a:be:7e:69:9d:0c:43:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:38:06:23:F2:C5:93:98:57:84:6E:9C:A1:AD:29:F1:D9:01:2F
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/UbQ4BiPyxZOYV4RunKGtKfHZAS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.41.32.0/24
185.112.252.0/22
188.246.23.0/24
IPv6:
2a02:a00:1009::/48
Signature Algorithm: sha256WithRSAEncryption
53:60:45:0c:47:6d:97:91:ac:56:06:79:c4:67:e5:eb:e5:09:
97:35:fb:b4:d0:19:97:4e:23:e3:ff:81:27:6d:67:2f:ad:41:
ff:57:05:d9:fe:2a:5d:41:6c:f4:81:c9:3c:e7:0d:85:f4:33:
40:b7:99:30:e3:15:6b:3e:ba:df:da:83:50:18:83:14:7d:72:
5f:c7:3b:a8:7c:1a:06:1e:70:f7:d9:6d:28:3f:c9:c7:6a:81:
54:4f:45:2b:95:6e:bb:c0:d4:5d:23:5a:73:e7:0d:b3:92:db:
74:9a:2a:12:f5:18:6a:58:5d:a5:b1:54:3c:60:a4:5f:e5:c7:
62:f6:90:fd:4d:7c:da:20:cb:b3:dd:53:fe:4d:02:90:c8:af:
01:93:8c:b4:cd:c2:9c:75:88:37:52:29:20:51:55:30:a8:59:
e5:f5:f1:22:cf:34:1d:83:06:d5:e2:25:a7:d3:63:d9:34:e0:
8c:00:d6:a1:58:51:72:0b:c5:82:e4:e4:d1:c6:be:1b:83:e6:
60:ce:24:17:3d:5d:48:ea:10:4b:92:36:eb:10:cf:64:3d:74:
5a:9a:22:c5:a0:c1:d2:c9:3d:70:2e:8d:74:c5:cf:ee:63:2f:
d7:b6:dd:7a:38:d1:2f:67:64:ae:08:bf:01:da:4f:2c:0e:6a:
6f:55:0a:1b
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYI7kr8URMTogJ2vFKzCfAk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5
OTNjMDQwHhcNMjIwNzI2MTczNDA4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWI0MzgwNjIzZjJjNTkzOTg1Nzg0NmU5Y2ExYWQyOWYxZDkwMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8S26t7/h6ifgbKPtQC9bs/VzRAS
TKQ0ix2JL4/t3J+bCEGisF1A1pktwCUaOCF5+qVIyC7Ks8xePJ0hUD1FPjYie1cU
XZJqzH5rQgRKAvh+y4qWmo5fIOgrJSh0KNaIba9JczHnWHFVxcCLlRF+P/2rWi9X
5v4apb67+e4mgVFZmA4s17rZIvSgJ58HWPfzuIMsQi6/tyhIeVHDPgE8XdUegceH
BSl3yci2Es2c2dC1WJb8A6aTygFVSopnLNl2uS0ZkPhIIPyjpFOiHB9v8Zfab6UZ
f5QVJzv4IiC+wgT8CY2n3OtU+NXGiPF34ALID32jyPfy6Vq+fmmdDEPlQwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFFG0OAYj8sWTmFeEbpyhrSnx2QEvMB8GA1UdIwQY
MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt
YzY5ODcxZjVkMzA1LzEvVWJRNEJpUHl4Wk9ZVjRSdW5LR3RLZkhaQVM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1
LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALikgAwQC
uXD8AwQAvPYXMA8EAgACMAkDBwAqAgoAEAkwDQYJKoZIhvcNAQELBQADggEBAFNg
RQxHbZeRrFYGecRn5evlCZc1+7TQGZdOI+P/gSdtZy+tQf9XBdn+Kl1BbPSByTzn
DYX0M0C3mTDjFWs+ut/ag1AYgxR9cl/HO6h8GgYecPfZbSg/ycdqgVRPRSuVbrvA
1F0jWnPnDbOS23SaKhL1GGpYXaWxVDxgpF/lx2L2kP1NfNogy7PdU/5NApDIrwGT
jLTNwpx1iDdSKSBRVTCoWeX18SLPNB2DBtXiJafTY9k04IwA1qFYUXILxYLk5NHG
vhuD5mDOJBc9XUjqEEuSNusQz2Q9dFqaIsWgwdLJPXAujXTFz+5jL9e23Xo40S9n
ZK4IvwHaTywOam9VChs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:32 2024 by rpki-client on console-ams.rpki-client.org