Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/T-UA37mdPRp3G2m-XRbTOwSRU_E.roa
File: T-UA37mdPRp3G2m-XRbTOwSRU_E.roa (raw, json)
Hash identifier: B5fTaGrjIeAMU57J1T7c7WGoevNF8232K4YxJ65pVt8=
Subject key identifier: 4F:E5:00:DF:B9:9D:3D:1A:77:1B:69:BE:5D:16:D3:3B:04:91:53:F1
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 12C7B448
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/T-UA37mdPRp3G2m-XRbTOwSRU_E.roa
Signing time: Sat 01 Jan 2022 16:06:49 +0000
ROA not before: Sat 01 Jan 2022 16:06:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12315
IP address blocks: 193.176.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315077704 (0x12c7b448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Jan 1 16:06:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fe500dfb99d3d1a771b69be5d16d33b049153f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:df:fa:db:03:16:98:49:41:44:cc:0d:0a:
fd:4b:40:9d:01:66:8f:10:a2:c2:8f:d2:fb:e8:28:
d1:bd:fe:cb:3d:3a:3d:6a:63:56:83:56:55:f8:53:
79:30:47:0e:e0:67:e2:a9:59:d9:30:67:11:ca:a4:
48:43:02:f7:d7:10:84:07:e0:2f:4b:86:82:2c:cc:
ac:ad:03:06:ad:68:b5:c0:e0:89:dc:d5:37:07:40:
17:c1:a9:54:a4:26:bb:71:2c:bb:6b:f4:d6:f6:09:
c8:90:59:c5:51:c6:a8:d2:f3:39:b1:d2:4c:71:02:
07:1d:db:d4:12:90:27:40:c1:29:3c:9e:7b:40:d3:
fc:fc:b0:09:a8:24:81:fd:09:6b:d5:95:1f:6e:cd:
e5:34:d0:c3:a6:5c:cb:df:df:d7:11:f5:18:d8:32:
4b:9d:fb:57:9d:16:1a:5e:73:f2:7d:25:96:3e:14:
97:c2:63:16:8f:74:61:fc:52:be:ea:5e:76:00:cd:
b7:8a:bd:3e:7d:0c:60:e3:ee:af:52:d4:67:d4:c7:
9f:29:46:65:ff:c5:00:8c:2c:70:0e:19:bc:c4:10:
19:6d:6e:8a:81:11:fc:5b:1c:0a:12:30:d5:9e:ff:
a8:03:d2:db:4a:cb:62:1f:02:f4:9d:7f:c6:f9:d5:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:00:DF:B9:9D:3D:1A:77:1B:69:BE:5D:16:D3:3B:04:91:53:F1
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/T-UA37mdPRp3G2m-XRbTOwSRU_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.136.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:26:5a:43:46:2b:c1:a8:94:88:03:bd:b5:c3:df:b7:30:be:
8b:a8:08:90:3b:0d:8c:5b:c4:6f:e6:75:c7:31:ff:8b:81:c3:
4f:b4:73:8c:38:d1:63:fb:b9:50:f1:6f:49:f1:e4:6f:b7:2d:
a2:8b:8e:2a:fa:7a:82:4c:49:26:3f:a4:63:ee:b8:d9:cb:4b:
c8:21:9f:d2:15:87:71:f2:79:fe:c4:d8:da:31:da:f4:26:79:
59:0c:57:56:69:f1:2e:e0:e9:e9:5f:aa:0e:4d:b1:1e:a2:97:
82:7f:40:64:ea:62:3e:c9:7a:de:79:64:df:49:61:65:fd:3f:
87:e7:5b:22:ea:23:01:8a:9a:4f:49:fd:06:62:d2:cf:54:56:
b2:a0:e6:48:4a:76:27:25:2a:78:b7:65:65:21:b7:6d:64:11:
f5:46:57:98:8a:97:9c:d7:f1:d6:e3:21:51:70:29:49:cb:a0:
14:16:23:2b:3e:31:4b:3b:ad:1b:4a:7b:03:7e:dd:64:16:9b:
de:e3:7f:96:1b:32:95:96:8a:ce:a8:44:de:73:ce:f7:99:a1:
dc:4e:c7:47:ef:80:b0:40:e5:58:1e:f1:8c:63:9a:cf:c8:ed:
a2:32:b4:4b:ae:0b:0d:50:50:bf:d6:37:3e:c8:d9:08:5d:26:
58:1e:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org