Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/uEYa_1Pu0ITehfefHjpFhdVCPhg.roa
File: uEYa_1Pu0ITehfefHjpFhdVCPhg.roa (raw, json)
Hash identifier: xfzFlHAhO6f+3iIfrb4AhEAjN6waXo+PeBVa3uRwxWM=
Subject key identifier: B8:46:1A:FF:53:EE:D0:84:DE:85:F7:9F:1E:3A:45:85:D5:42:3E:18
Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial: 069882B4
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/uEYa_1Pu0ITehfefHjpFhdVCPhg.roa
Signing time: Sat 01 Jan 2022 09:06:07 +0000
ROA not before: Sat 01 Jan 2022 09:06:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59455
IP address blocks: 194.147.255.0/24 maxlen: 24
194.149.89.0/24 maxlen: 24
185.80.12.0/22 maxlen: 22
194.147.241.0/24 maxlen: 24
194.147.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110658228 (0x69882b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Validity
Not Before: Jan 1 09:06:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8461aff53eed084de85f79f1e3a4585d5423e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:70:03:db:b3:1e:8b:c9:11:ab:cc:57:a6:
0b:c6:8c:b2:06:47:64:c0:aa:42:a3:ac:2c:17:b1:
b0:31:18:9d:85:f8:2a:0f:d6:ac:1d:3f:80:92:c7:
36:5b:b7:d1:80:8a:ab:de:8c:ad:db:ad:4e:0b:ab:
17:f5:de:90:4a:50:60:05:64:8b:a3:f3:0b:14:6e:
c2:47:c3:8e:a9:27:35:9b:db:03:d9:58:48:1e:41:
2c:9a:fb:47:36:f5:84:7c:e8:e0:a4:fe:3f:f2:51:
a6:89:80:95:50:b0:45:b9:83:c9:9b:39:21:7a:d6:
71:04:f1:6e:78:6e:f3:92:0b:00:94:75:de:3b:11:
b4:0d:f7:3b:42:67:04:a1:6f:15:eb:24:0e:23:dd:
fd:1e:d0:69:9a:c3:cf:7d:4b:8d:cd:12:c0:94:59:
84:27:34:69:e5:33:5d:1d:e9:19:8b:0a:06:63:84:
22:36:2e:2b:83:ed:6d:e0:18:ac:d0:c4:fd:a2:dd:
32:46:45:98:a9:5a:b2:2b:e1:70:6c:fa:ec:c2:20:
e3:17:fc:58:4e:aa:f5:cb:5e:4e:54:31:05:d5:1a:
f3:12:de:77:59:4e:42:c8:a1:04:3e:21:49:2b:b2:
07:bd:ec:ed:c8:5b:25:7e:a1:f1:5f:d3:5b:d5:f0:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:46:1A:FF:53:EE:D0:84:DE:85:F7:9F:1E:3A:45:85:D5:42:3E:18
X509v3 Authority Key Identifier:
keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/uEYa_1Pu0ITehfefHjpFhdVCPhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.12.0/22
194.147.241.0/24
194.147.244.0/24
194.147.255.0/24
194.149.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f0:84:87:c7:3b:ad:da:83:4e:84:00:06:df:e8:1f:10:ba:
d3:40:a7:a8:d4:b9:53:16:dc:e4:b1:da:fb:bf:87:ed:8f:41:
a1:05:30:42:2a:99:4f:ba:37:c1:29:62:01:84:62:2a:64:8d:
22:b5:4d:1a:09:1e:fd:55:07:ae:0d:b7:83:fb:3b:71:a7:9d:
4a:ce:ee:d9:3f:b3:c3:60:17:e7:7c:dc:a5:e2:3d:2e:70:94:
3b:08:58:25:fe:09:3c:b4:b4:9d:7a:43:6a:3f:63:81:f9:4b:
03:ef:e0:6c:ff:bc:23:86:49:bc:cb:30:28:c4:4d:3c:c8:3c:
ba:d2:22:ac:73:14:c9:93:20:d1:14:d1:89:63:45:d6:3f:c6:
cc:38:a2:29:e3:30:99:71:d7:2d:7e:50:92:3c:eb:8b:15:e0:
f0:d8:3c:1b:2b:fe:dd:5a:5a:06:4d:bb:19:20:ce:78:63:f9:
74:e1:81:84:e9:dd:c0:ad:ca:b2:ea:23:40:21:6d:da:04:6a:
eb:2b:1c:e7:49:7d:51:35:ac:d9:73:2f:92:c0:a3:37:da:71:
58:6f:c2:06:7e:2e:35:4b:3e:11:dd:7f:c8:39:13:c8:1e:b5:
5e:56:4c:0f:13:91:6c:31:f4:91:b9:19:08:23:c8:f8:9e:47:
be:ed:d9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:01 2024 by rpki-client on console-ams.rpki-client.org