Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/Uc5EjfDe_Yz3zRBJYSyIJepIx5w.roa
File: Uc5EjfDe_Yz3zRBJYSyIJepIx5w.roa (raw, json)
Hash identifier: o+Zn2jqEnD5vfcISBSc3lKcWlcXYqrsxE+5PkIMvX2M=
Subject key identifier: 51:CE:44:8D:F0:DE:FD:8C:F7:CD:10:49:61:2C:88:25:EA:48:C7:9C
Certificate issuer: /CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Certificate serial: 0182BFD66367AFA6B66ECF6C4C659B7B323F
Authority key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/Uc5EjfDe_Yz3zRBJYSyIJepIx5w.roa
Signing time: Sun 21 Aug 2022 09:57:54 +0000
ROA not before: Sun 21 Aug 2022 09:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205057
IP address blocks: 185.231.94.0/24 maxlen: 24
185.231.95.0/24 maxlen: 24
185.231.92.0/24 maxlen: 24
185.231.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bf:d6:63:67:af:a6:b6:6e:cf:6c:4c:65:9b:7b:32:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf
Validity
Not Before: Aug 21 09:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51ce448df0defd8cf7cd1049612c8825ea48c79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:16:b3:7d:b8:bc:f3:5c:58:83:f1:97:bd:
12:7a:66:4d:1f:b4:a1:8c:22:92:2d:03:2b:43:4d:
3b:86:37:00:df:7c:78:96:eb:5f:45:36:b3:2c:bf:
0e:2f:90:3e:04:8a:ac:2a:1f:4f:41:0b:45:03:64:
0f:88:9f:95:91:9e:9b:7d:47:22:d2:07:2c:73:60:
d0:db:7c:d9:9c:d6:9b:b8:9a:bb:e8:36:90:04:1e:
89:b7:5e:67:e7:d9:ed:f1:c9:fa:9c:df:2f:c4:ed:
cd:b7:b5:a9:49:de:3a:32:21:dd:bf:1b:42:14:84:
b5:3b:45:4d:e9:a0:6f:0e:fc:53:94:b7:e0:60:bf:
87:28:16:b3:a8:2d:a1:f2:b2:59:39:d0:0f:fe:5b:
f3:64:b1:09:c2:3f:4f:73:a3:16:86:31:50:9a:75:
4a:c9:98:6a:ac:ed:9a:97:68:c3:cc:fc:a4:ce:8d:
aa:0d:35:57:9f:15:2e:a8:b0:96:72:53:c4:46:5d:
9d:14:d9:bd:38:d8:70:95:b0:1e:08:33:65:75:ad:
85:9d:49:69:19:ae:9d:fd:a6:ee:f9:8a:ab:c5:20:
d1:1b:02:c3:d8:2f:ae:11:91:e2:f4:ef:f8:95:ee:
ef:ce:47:d8:58:dc:de:a5:63:c2:76:16:0d:b1:22:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:44:8D:F0:DE:FD:8C:F7:CD:10:49:61:2C:88:25:EA:48:C7:9C
X509v3 Authority Key Identifier:
keyid:4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/Uc5EjfDe_Yz3zRBJYSyIJepIx5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:e9:4f:fc:a7:81:d6:1e:18:96:a7:38:92:17:aa:59:97:13:
01:76:bd:a2:de:0e:30:81:e9:ca:24:ad:61:06:d2:0f:6b:e3:
9d:f3:f1:dd:f0:e6:7b:e1:97:a5:7f:fb:32:54:da:c7:f1:c3:
ed:2e:3c:7e:a5:77:15:96:2a:23:c3:47:3f:aa:06:53:6d:43:
a5:88:46:aa:1a:03:a5:fe:40:99:65:d0:24:87:40:d5:01:d5:
6a:92:ed:92:32:8b:12:d6:60:d9:a2:8f:29:fc:dc:26:84:96:
38:5e:9d:9a:d2:2a:41:4b:6a:d6:91:09:d6:81:20:4e:12:86:
ce:b4:5d:a4:de:39:60:ad:e5:a8:b9:36:08:43:30:b5:15:24:
45:c7:0d:81:64:85:6a:cf:b8:f8:0a:ac:9d:c2:cf:fb:7e:9b:
d0:9e:1e:bd:f8:bf:e6:2d:14:b5:04:ba:8e:8c:4a:46:61:36:
1b:c2:60:2d:0c:f9:65:01:36:5a:b8:90:75:32:c4:56:72:df:
66:84:43:dc:f7:c3:d6:26:e8:f2:54:85:15:51:ce:fb:24:09:
81:68:3e:02:7a:66:04:9f:9e:8f:88:e0:3e:e2:8f:07:be:c9:
ce:c8:ec:02:16:27:47:36:1a:81:c1:98:56:5f:3f:f1:a6:29:
da:5c:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:08 2024 by rpki-client on console-ams.rpki-client.org