Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/UbsIcDxp_EniD6ZaILqGD9Upo-0.roa
File: UbsIcDxp_EniD6ZaILqGD9Upo-0.roa (raw, json)
Hash identifier: aOhjDuHwDrliLVm9YbZbiDDYKDz6BejaCk8OFztrlrI=
Subject key identifier: 51:BB:08:70:3C:69:FC:49:E2:0F:A6:5A:20:BA:86:0F:D5:29:A3:ED
Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial: 0184C7DFEF6DD03ED496F984F7918CAD9289
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/UbsIcDxp_EniD6ZaILqGD9Upo-0.roa
Signing time: Wed 30 Nov 2022 09:30:52 +0000
ROA not before: Wed 30 Nov 2022 09:30:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212728
IP address blocks: 193.138.195.0/24 maxlen: 24
2a13:2480::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:df:ef:6d:d0:3e:d4:96:f9:84:f7:91:8c:ad:92:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Validity
Not Before: Nov 30 09:30:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51bb08703c69fc49e20fa65a20ba860fd529a3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:93:77:e8:a7:67:db:e6:c6:c6:83:a4:2c:
e3:8d:dc:e5:e5:0b:a1:7c:f7:52:da:7d:91:e6:8c:
ac:66:d7:38:c9:b3:ab:7d:ef:1d:c6:c7:19:06:93:
38:fc:87:ff:06:0e:f3:cb:b7:b0:b9:85:53:29:7e:
7d:4a:85:5e:cb:c0:b3:56:1e:06:a3:40:1a:77:30:
26:62:ac:12:88:8f:18:39:5e:ac:f4:b2:f3:e6:e6:
98:00:36:2e:0f:1b:e8:2b:28:8d:87:54:ef:b0:cf:
24:7b:54:15:22:ab:6e:7f:e7:75:7c:a0:36:de:39:
bd:a5:0f:bb:94:aa:e1:ab:18:cc:c5:42:f4:a3:88:
cd:d6:51:04:22:ea:a7:82:63:cb:e9:44:fd:0d:64:
ac:0c:51:20:a4:7d:c2:8e:52:08:a3:1a:71:52:af:
8e:e9:b4:ba:97:49:3e:50:61:b4:5d:4e:5b:fc:ce:
33:7f:94:fd:51:de:ad:b4:3d:0a:79:38:1b:9b:11:
81:f6:25:00:bb:d0:69:f8:dc:12:d4:c2:74:39:b5:
f7:e6:27:98:a3:69:78:06:29:24:c7:7e:5e:3a:b2:
25:af:89:af:bf:9d:2d:e7:f9:e8:26:e0:f6:bc:9d:
58:47:b5:2c:91:6a:c3:cb:01:e8:09:39:1a:0a:91:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BB:08:70:3C:69:FC:49:E2:0F:A6:5A:20:BA:86:0F:D5:29:A3:ED
X509v3 Authority Key Identifier:
keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/UbsIcDxp_EniD6ZaILqGD9Upo-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.195.0/24
IPv6:
2a13:2480::/29
Signature Algorithm: sha256WithRSAEncryption
7e:b6:f6:5d:ac:04:17:5d:6b:ff:2b:7d:55:53:ca:7c:6e:4c:
6d:24:6a:0b:ef:4a:04:fc:7d:83:12:76:d1:27:53:51:82:e8:
95:b0:87:00:14:f9:5c:6d:7e:f3:e4:51:36:0e:ee:1a:9f:cd:
8a:c5:de:40:c1:c6:32:04:67:14:c4:77:5d:37:61:91:9e:af:
1d:54:a2:89:4c:76:01:48:bf:9c:ba:5d:54:f5:3d:3b:51:61:
61:a9:26:00:b9:b3:a2:b4:db:55:be:04:0f:9c:db:d6:37:c3:
76:17:e5:47:56:e6:1f:69:f8:d7:ca:9b:91:75:06:f4:dc:c7:
e3:80:c9:1b:c6:bf:94:47:43:4d:25:6b:0f:56:2b:99:1d:9b:
5b:ba:2e:88:26:68:83:43:3a:b4:73:08:b1:93:1b:a8:f5:41:
70:32:90:e7:34:e1:ab:6b:1c:65:22:61:76:a8:6c:8f:9f:b3:
c4:c6:33:b4:87:90:3f:df:5d:c2:22:6a:0a:4c:ab:cc:18:63:
20:75:40:46:1f:f4:9e:9b:28:9c:6a:e7:5f:a8:25:af:cf:21:
19:68:48:8f:bc:6c:0b:fb:2a:84:18:9e:e4:4b:72:92:8d:44:
d2:6f:a3:ae:6b:e7:cd:89:96:94:12:8c:79:4c:e5:93:73:27:
97:7e:e2:0e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYTH3+9t0D7UlvmE95GMrZKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZTM2ZmNmYjA0N2I4YzY1M2ZmYTMyN2ZjMmNhNTExNjll
OTQ3YTQwHhcNMjIxMTMwMDkzMDUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWJiMDg3MDNjNjlmYzQ5ZTIwZmE2NWEyMGJhODYwZmQ1MjlhM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbOTd+inZ9vmxsaDpCzjjdzl5Quh
fPdS2n2R5oysZtc4ybOrfe8dxscZBpM4/If/Bg7zy7ewuYVTKX59SoVey8CzVh4G
o0AadzAmYqwSiI8YOV6s9LLz5uaYADYuDxvoKyiNh1TvsM8ke1QVIqtuf+d1fKA2
3jm9pQ+7lKrhqxjMxUL0o4jN1lEEIuqngmPL6UT9DWSsDFEgpH3CjlIIoxpxUq+O
6bS6l0k+UGG0XU5b/M4zf5T9Ud6ttD0KeTgbmxGB9iUAu9Bp+NwS1MJ0ObX35ieY
o2l4Bikkx35eOrIlr4mvv50t5/noJuD2vJ1YR7UskWrDywHoCTkaCpGeJwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFG7CHA8afxJ4g+mWiC6hg/VKaPtMB8GA1UdIwQY
MBaAFBvjb8+wR7jGU/+jJ/wspRFp6UekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMt
ZTBjOTY2YzE1ZDVmLzEvVWJzSWNEeHBfRW5pRDZaYUlMcUdEOVVwby0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMtZTBjOTY2YzE1ZDVm
LzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwYrDMA0E
AgACMAcDBQMqEySAMA0GCSqGSIb3DQEBCwUAA4IBAQB+tvZdrAQXXWv/K31VU8p8
bkxtJGoL70oE/H2DEnbRJ1NRguiVsIcAFPlcbX7z5FE2Du4an82Kxd5AwcYyBGcU
xHddN2GRnq8dVKKJTHYBSL+cul1U9T07UWFhqSYAubOitNtVvgQPnNvWN8N2F+VH
VuYfafjXypuRdQb03MfjgMkbxr+UR0NNJWsPViuZHZtbui6IJmiDQzq0cwixkxuo
9UFwMpDnNOGraxxlImF2qGyPn7PExjO0h5A/313CImoKTKvMGGMgdUBGH/Semyic
audfqCWvzyEZaEiPvGwL+yqEGJ7kS3KSjUTSb6Oua+fNiZaUEox5TOWTcyeXfuIO
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:20:17 2025 by rpki-client