Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/uUbXDiJd-HwJw998qU5GiAmeBRs.roa
File: uUbXDiJd-HwJw998qU5GiAmeBRs.roa (raw, json)
Hash identifier: cHzXfio91q2rnFEaSRUy+47SRwJ8HalqW6Tvdhnzm/8=
Subject key identifier: B9:46:D7:0E:22:5D:F8:7C:09:C3:DF:7C:A9:4E:46:88:09:9E:05:1B
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 0182C00650EA33758B70DCE735D5A13C8DF4
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/uUbXDiJd-HwJw998qU5GiAmeBRs.roa
Signing time: Sun 21 Aug 2022 10:50:15 +0000
ROA not before: Sun 21 Aug 2022 10:50:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203982
IP address blocks: 185.118.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c0:06:50:ea:33:75:8b:70:dc:e7:35:d5:a1:3c:8d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Aug 21 10:50:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b946d70e225df87c09c3df7ca94e4688099e051b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:7e:58:a6:05:4f:84:dc:28:c7:a4:7c:5c:
68:43:23:dd:9d:81:f2:1b:fb:99:bb:c4:e6:8c:70:
c1:cb:3a:c1:24:76:a7:fc:29:9b:86:2c:cb:11:76:
48:60:e7:38:bb:12:85:5e:8f:15:cd:57:00:b2:f9:
f6:76:56:ee:6f:6a:ed:b4:e9:a7:f9:6a:5d:76:24:
3d:f9:cb:28:a4:bb:99:b2:8a:9f:2c:e2:9f:03:b4:
de:8d:59:a3:b6:5c:f1:2c:97:8d:02:81:53:a6:7f:
19:51:e9:f2:3f:af:e9:cb:91:18:c9:d5:b8:1e:4d:
cc:b0:cc:35:22:d6:c3:1d:9d:65:11:cd:d8:7c:3f:
3f:46:ea:c6:33:e2:7c:bc:d2:2c:8a:70:15:d7:ea:
08:a2:19:76:c7:ab:32:08:8e:c9:33:25:bf:22:bb:
8c:26:46:e6:73:20:2b:10:38:dc:62:71:06:4e:0f:
92:37:fc:43:b7:ae:e8:f5:31:c4:a8:90:be:ee:74:
13:a3:54:47:e0:86:27:7e:aa:79:93:26:b4:90:bd:
b3:3d:21:6e:c4:2a:9a:d7:a6:91:e4:58:b7:73:2a:
b2:b3:00:93:14:50:5d:ef:ec:53:a9:cb:8a:fd:74:
4c:3e:a8:11:05:47:ba:3a:89:db:18:1e:2e:a8:61:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:D7:0E:22:5D:F8:7C:09:C3:DF:7C:A9:4E:46:88:09:9E:05:1B
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/uUbXDiJd-HwJw998qU5GiAmeBRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.8.0/22
Signature Algorithm: sha256WithRSAEncryption
58:cb:ab:20:b0:d2:de:c4:0e:97:0a:25:d7:96:74:e2:ab:0b:
12:f0:d8:e0:21:cf:09:a5:bf:c8:3f:9b:48:de:bd:dc:2b:b6:
69:7b:6b:5a:00:82:c0:f7:1f:0e:61:ed:82:54:03:88:10:b6:
c1:4f:45:d1:d8:41:b8:b2:6f:e8:6e:70:fd:6d:21:05:4d:86:
56:32:e4:4f:f5:4b:57:7a:c6:87:4d:85:32:de:e8:bf:db:71:
d1:2a:60:44:aa:80:52:ea:ee:e6:c5:84:3d:93:54:4e:77:b4:
97:5b:c2:ee:df:55:48:35:dd:0a:8f:58:ea:06:21:2b:2a:7f:
0b:e4:1a:81:07:0e:16:23:01:e2:6b:5a:fd:e6:fb:99:b3:d7:
57:7a:ba:1f:48:ac:c6:2e:b5:f4:13:a6:a4:18:1c:9d:07:b4:
39:3d:10:e1:f5:0d:1c:27:f4:c2:31:e8:ab:e4:8b:a2:66:76:
bf:b5:fb:07:bd:02:8a:a3:92:df:ab:64:2f:7e:19:2b:49:ea:
0e:b5:ba:51:0f:7c:11:a8:80:fc:79:83:1c:50:8a:c3:b2:b5:
10:c4:fc:5b:5a:90:1b:2b:e6:fc:4d:05:e7:99:75:47:19:e2:
4e:c6:4c:a0:1a:ec:ca:5f:21:b0:b4:96:53:e4:35:23:03:c3:
88:dd:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:07 2024 by rpki-client on console-fra.rpki-client.org