Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/uqHXacwSYqeuE6TGkyUvXj9D6Qk.roa
File: uqHXacwSYqeuE6TGkyUvXj9D6Qk.roa (raw, json)
Hash identifier: jd6kgTB5KnEF6HIsCoWghUhTCYiKg1Mzf+v424Y/K1s=
Subject key identifier: BA:A1:D7:69:CC:12:62:A7:AE:13:A4:C6:93:25:2F:5E:3F:43:E9:09
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 0E855E91
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/uqHXacwSYqeuE6TGkyUvXj9D6Qk.roa
Signing time: Sat 01 Jan 2022 15:57:20 +0000
ROA not before: Sat 01 Jan 2022 15:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57391
IP address blocks: 185.67.101.0/24 maxlen: 24
185.132.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243621521 (0xe855e91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Jan 1 15:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baa1d769cc1262a7ae13a4c693252f5e3f43e909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:0d:d2:0a:fe:aa:5a:d7:78:44:48:84:61:
12:24:bd:0a:45:33:c5:3a:a0:4c:16:24:1b:e8:e2:
01:54:6b:9a:05:2b:07:68:eb:c9:60:4f:aa:94:a0:
12:82:2b:e9:09:b5:f4:b0:a7:0a:6b:62:d3:11:72:
6c:71:83:71:47:5c:9f:53:d1:77:07:9d:d9:a0:51:
40:36:ba:09:9a:fd:3d:fc:48:0c:a1:d2:cf:c7:d1:
e5:f2:dc:3f:2f:c4:96:1a:e9:6d:c2:12:ef:f5:11:
38:cc:fe:15:12:e9:5d:af:98:d3:d1:25:3d:fe:ff:
ef:c7:54:7a:f1:da:c1:f8:23:e4:8f:c5:63:46:24:
56:53:fd:b1:28:8f:41:97:26:d1:ee:54:38:b4:73:
b3:66:ab:0b:3f:8c:8b:42:5a:ca:de:8a:9a:4e:89:
db:fa:7b:2d:9f:b5:63:6f:9a:22:73:ad:ae:4a:18:
32:a1:a3:57:7d:06:24:df:12:d9:56:b6:a1:06:59:
af:6a:3d:26:19:25:ec:5f:91:43:f0:86:10:8c:01:
a8:24:22:77:5e:14:af:8f:30:a7:ff:8f:31:e6:cd:
41:06:21:f3:60:ee:96:38:66:8a:47:c7:b9:df:c8:
94:2a:6b:7e:e7:b6:64:76:ab:f4:05:ee:6e:76:ce:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:D7:69:CC:12:62:A7:AE:13:A4:C6:93:25:2F:5E:3F:43:E9:09
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/uqHXacwSYqeuE6TGkyUvXj9D6Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.101.0/24
185.132.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d1:fa:ef:d3:df:ee:4f:61:04:03:f0:d4:db:cd:5a:a7:50:
63:08:1f:4a:ae:44:44:b9:20:69:fd:5e:3f:39:21:dd:e4:89:
b0:ec:a2:07:c5:02:22:33:62:92:fd:6c:10:c1:6f:9f:16:30:
e9:2b:2a:bc:f6:52:69:ac:d8:18:2d:4b:27:2b:90:43:b1:8f:
2b:5e:73:19:e0:55:62:07:7d:a8:f4:43:df:e2:ff:b7:2b:25:
f4:93:26:48:43:35:35:54:7e:2f:6a:98:a6:26:63:6c:0f:17:
14:83:96:8e:a2:d3:3c:1b:58:9c:ef:32:f0:46:67:82:79:05:
77:5a:de:77:2c:3a:fd:49:5a:94:33:88:0f:80:01:e4:83:6f:
d8:00:d6:4c:54:fa:06:ac:82:9f:a8:97:23:ab:3a:44:73:01:
5f:2e:9c:a5:ab:8e:aa:4c:b5:d1:9a:20:a5:74:6d:a3:39:db:
3c:8d:db:b6:de:31:81:84:b6:a5:1e:75:5f:85:1a:ba:50:08:
f8:7b:c5:00:e3:ef:bd:c2:4e:2d:bb:30:a0:25:84:40:78:2f:
41:49:87:0a:a9:4d:5f:c3:35:04:c6:8a:40:a8:13:d3:c7:e4:
96:f2:df:65:a8:69:1a:64:3d:cc:49:a7:8b:f7:3c:5b:38:c0:
be:e3:b3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:35 2024 by rpki-client on console-ams.rpki-client.org