Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/UV5hx7FwnZDzwIn2xPNrDyhI7bk.roa
File: UV5hx7FwnZDzwIn2xPNrDyhI7bk.roa (raw, json)
Hash identifier: hPFuUbu3ALNlubpNiYDomsZ9dJHkv7vQg+bBWdHt4w8=
Subject key identifier: 51:5E:61:C7:B1:70:9D:90:F3:C0:89:F6:C4:F3:6B:0F:28:48:ED:B9
Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial: 0184BDBAC6261B684A61828D1251BE8D562B
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/UV5hx7FwnZDzwIn2xPNrDyhI7bk.roa
Signing time: Mon 28 Nov 2022 10:14:05 +0000
ROA not before: Mon 28 Nov 2022 10:14:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34272
IP address blocks: 193.110.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:ba:c6:26:1b:68:4a:61:82:8d:12:51:be:8d:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Validity
Not Before: Nov 28 10:14:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=515e61c7b1709d90f3c089f6c4f36b0f2848edb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:d2:54:64:ad:e3:9c:24:e7:dc:cc:fe:e8:
6c:35:c7:d0:20:08:c5:d3:3c:84:71:47:5f:cb:3e:
03:9a:87:4d:fd:e5:cd:c7:dc:7d:8d:9f:4e:74:4b:
59:0e:a1:c1:c9:62:ab:8f:7a:a9:4d:16:ec:3b:2b:
f5:2a:28:75:20:2f:20:28:df:5c:ec:8e:56:13:4e:
34:dd:91:e7:b1:f0:ca:10:2e:e4:79:aa:68:12:90:
83:34:31:03:5c:8c:8a:4f:96:9b:e5:95:1a:71:e8:
f9:d3:b4:54:16:cd:02:a1:cf:2c:74:7f:c9:47:e4:
7a:7f:dd:af:46:03:0e:96:42:09:f0:69:aa:be:b2:
46:d2:97:f8:bb:3d:dd:4f:de:e9:a4:58:ad:d9:76:
a4:d8:89:54:dc:d1:ce:a7:b0:fc:c1:ab:34:8b:1f:
b5:a9:8f:f8:09:cf:45:a8:67:27:1c:8c:63:f1:a4:
ef:63:76:bf:e5:5a:1d:81:ea:0f:0a:9f:a2:76:c1:
70:6c:79:c8:59:ab:17:70:70:74:51:3c:53:6e:00:
c0:f9:a1:49:86:b5:f2:b7:ae:d3:28:4c:60:ab:0d:
ee:02:95:73:07:29:0e:af:d5:38:4d:81:2e:7e:61:
c1:a6:e3:b8:7c:c8:31:ea:73:7f:4e:dd:d7:7f:d7:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5E:61:C7:B1:70:9D:90:F3:C0:89:F6:C4:F3:6B:0F:28:48:ED:B9
X509v3 Authority Key Identifier:
keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/UV5hx7FwnZDzwIn2xPNrDyhI7bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:3f:5f:42:5e:f7:ea:c6:20:f0:58:28:bb:22:1a:7f:76:2c:
51:26:1c:5c:73:81:89:6f:db:f9:5a:8d:98:5d:4b:cb:2f:09:
43:42:ac:b9:66:9b:0b:f6:c6:2c:07:2d:73:17:16:88:bf:73:
f1:99:70:8c:ab:a0:f0:30:38:f9:86:d0:99:43:bd:0d:bf:04:
d0:11:08:b2:26:ad:7e:de:4e:a9:76:e5:8b:75:8b:8b:f4:30:
de:b6:76:62:06:88:22:97:b7:bb:1c:bf:3e:0a:e3:55:88:6d:
d0:87:80:36:e2:0b:2a:32:bc:d0:c9:fb:37:aa:be:5c:03:12:
4a:95:a8:86:b9:ac:15:fc:b3:d5:f5:bf:29:7d:d1:03:e4:77:
26:3b:e6:a1:1f:76:32:6d:0b:a2:10:ad:63:95:e4:f1:5d:c1:
3f:1e:aa:7b:0e:fd:84:42:92:b5:13:19:a8:ab:80:6a:0c:61:
71:4e:7e:5a:8d:10:5b:da:be:ff:3a:24:c2:bd:88:f2:48:3c:
88:10:0c:39:09:b2:98:4e:49:49:11:23:a3:05:bf:1b:77:67:
c2:84:4c:07:df:58:6c:b4:6b:79:67:fa:8f:13:cf:2c:3f:05:
22:c4:79:68:19:52:db:af:4e:33:53:52:ef:ce:c9:92:51:36:
15:a3:9c:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYS9usYmG2hKYYKNElG+jVYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTQ5ZDJiZDY0ZWUxN2VmNWQ0N2Y5NjNlM2Q1ZDdhOTgy
YjEyYWYwHhcNMjIxMTI4MTAxNDA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTVlNjFjN2IxNzA5ZDkwZjNjMDg5ZjZjNGYzNmIwZjI4NDhlZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+HSVGSt45wk59zM/uhsNcfQIAjF
0zyEcUdfyz4DmodN/eXNx9x9jZ9OdEtZDqHByWKrj3qpTRbsOyv1Kih1IC8gKN9c
7I5WE0403ZHnsfDKEC7keapoEpCDNDEDXIyKT5ab5ZUacej507RUFs0Coc8sdH/J
R+R6f92vRgMOlkIJ8GmqvrJG0pf4uz3dT97ppFit2Xak2IlU3NHOp7D8was0ix+1
qY/4Cc9FqGcnHIxj8aTvY3a/5VodgeoPCp+idsFwbHnIWasXcHB0UTxTbgDA+aFJ
hrXyt67TKExgqw3uApVzBykOr9U4TYEufmHBpuO4fMgx6nN/Tt3Xf9cMfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFFeYcexcJ2Q88CJ9sTzaw8oSO25MB8GA1UdIwQY
MBaAFGyUnSvWTuF+9dR/lj49XXqYKxKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpTZEs5Wk80WDcxMUgtV1BqMWRlcGdyRXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mODY1MWItYzEyYi00MmQ0LWFmZGEt
MjMyZjQ3MDM0OTFmLzEvVVY1aHg3RnduWkR6d0luMnhQTnJEeWhJN2JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mODY1MWItYzEyYi00MmQ0LWFmZGEtMjMyZjQ3MDM0OTFm
LzEvYkpTZEs5Wk80WDcxMUgtV1BqMWRlcGdyRXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW6EMA0G
CSqGSIb3DQEBCwUAA4IBAQCzP19CXvfqxiDwWCi7Ihp/dixRJhxcc4GJb9v5Wo2Y
XUvLLwlDQqy5ZpsL9sYsBy1zFxaIv3PxmXCMq6DwMDj5htCZQ70NvwTQEQiyJq1+
3k6pduWLdYuL9DDetnZiBogil7e7HL8+CuNViG3Qh4A24gsqMrzQyfs3qr5cAxJK
laiGuawV/LPV9b8pfdED5HcmO+ahH3YybQuiEK1jleTxXcE/Hqp7Dv2EQpK1Exmo
q4BqDGFxTn5ajRBb2r7/OiTCvYjySDyIEAw5CbKYTklJESOjBb8bd2fChEwH31hs
tGt5Z/qPE88sPwUixHloGVLbr04zU1LvzsmSUTYVo5wk
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:22 2023 by rpki-client on console.sobornost.net