Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/uQKLF4AA-v5v2X9XyAH382Du0mc.roa
File: uQKLF4AA-v5v2X9XyAH382Du0mc.roa (raw, json)
Hash identifier: u/tMQCeXC/7bouBxBmgwd4B7p0T+8pb1Jq9xGcSLu6w=
Subject key identifier: B9:02:8B:17:80:00:FA:FE:6F:D9:7F:57:C8:01:F7:F3:60:EE:D2:67
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 0182909BBF30C0177AA696760625FCF1A6A4
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/uQKLF4AA-v5v2X9XyAH382Du0mc.roa
Signing time: Fri 12 Aug 2022 05:51:42 +0000
ROA not before: Fri 12 Aug 2022 05:51:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 45.14.174.0/24 maxlen: 24
80.94.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:9b:bf:30:c0:17:7a:a6:96:76:06:25:fc:f1:a6:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Aug 12 05:51:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9028b178000fafe6fd97f57c801f7f360eed267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:d9:ad:a0:6b:d2:3a:c5:0c:3c:60:3c:8a:
72:a6:5d:55:06:0a:a9:93:f5:79:f2:a3:fe:e3:48:
ff:1f:e4:64:49:5c:ca:2d:4e:bc:0e:d9:f4:32:bc:
3e:a0:3c:8b:f0:32:72:f4:e7:d2:49:c5:3a:40:ad:
81:f1:8b:27:a8:87:6a:ff:5d:2b:48:93:89:42:16:
35:d6:62:53:98:53:9a:b3:53:09:f5:73:8f:ff:c2:
d1:46:d2:f2:ca:20:5a:16:c9:eb:89:7f:b5:6b:f7:
22:1c:f5:cb:b7:60:b5:13:c8:34:5f:a0:b6:61:be:
5f:1d:9d:8b:aa:89:0b:29:47:5f:a8:53:ec:2f:68:
9e:40:08:c6:6c:12:d3:85:c8:f1:00:80:c7:36:33:
4f:3d:c4:56:71:cc:1a:ee:77:d0:dc:ea:72:16:9c:
00:32:51:a7:7d:7f:7b:a0:a9:da:65:11:49:c5:0e:
15:2f:e1:cf:7e:8d:71:b8:3b:9c:ea:35:3c:e9:d8:
ca:fd:99:b8:6e:74:57:1a:aa:e9:42:de:e3:7e:01:
e4:86:1f:5f:ad:ee:d1:dc:cc:14:25:a1:b0:df:5d:
2e:36:bf:d9:58:f0:0c:15:8c:8c:d7:66:6f:07:17:
e7:3a:7b:55:9f:68:54:f7:b9:59:d1:3c:43:93:6a:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:8B:17:80:00:FA:FE:6F:D9:7F:57:C8:01:F7:F3:60:EE:D2:67
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/uQKLF4AA-v5v2X9XyAH382Du0mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.174.0/24
80.94.83.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ae:6f:c9:ba:1e:38:85:b9:d7:41:6f:41:a0:32:61:2c:e3:
7e:7b:e6:53:90:07:9c:6f:5e:fd:8a:cb:ed:c3:3b:f8:16:21:
6a:9a:08:77:a5:cf:ff:b6:0c:fd:aa:c3:68:86:fe:5c:dd:7b:
fb:bc:04:fd:26:c4:68:50:74:31:5f:8e:8d:ab:49:31:92:1e:
00:b5:f2:99:79:a8:8a:f3:3a:cb:78:50:a4:09:2a:ca:c7:c6:
10:97:39:f5:bf:20:85:cb:9f:f9:41:de:5f:b5:e1:62:48:f0:
b5:81:b6:56:a7:74:4e:0b:e1:e5:f6:32:44:a3:5d:57:0f:b8:
2d:f1:ac:b2:d5:f2:c8:75:03:53:bf:56:95:f5:97:88:02:f1:
3b:8a:fe:07:fd:fe:32:b5:25:30:3c:39:81:e3:6e:f0:b1:a6:
aa:0b:a3:3b:2d:09:ce:5f:64:3f:d0:76:09:f8:0e:80:a4:0a:
d5:9c:05:1d:31:a1:42:58:63:07:ff:03:9e:12:78:98:2a:ae:
b0:1e:2e:e2:02:09:16:1b:ed:ec:72:52:0e:ae:17:b1:f4:bd:
e1:59:8e:28:3a:5a:13:80:df:8a:c3:15:37:5e:71:b5:0f:6b:
98:6d:11:ba:21:43:83:89:be:41:b1:4d:a0:9e:ef:b5:00:10:
a9:c3:88:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:25 2024 by rpki-client on console-ams.rpki-client.org