Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/UAZvsogsLiEyhhdAwHCUHGHFv38.roa
File: UAZvsogsLiEyhhdAwHCUHGHFv38.roa (raw, json)
Hash identifier: pmmmhzjnAWv9kIoK9jdvhaGlE1Z+cWJ3Zh1v/5KxH9A=
Subject key identifier: 50:06:6F:B2:88:2C:2E:21:32:86:17:40:C0:70:94:1C:61:C5:BF:7F
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 1523B778
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/UAZvsogsLiEyhhdAwHCUHGHFv38.roa
Signing time: Sat 01 Jan 2022 09:58:15 +0000
ROA not before: Sat 01 Jan 2022 09:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205430
IP address blocks: 91.106.28.0/24 maxlen: 24
94.240.41.0/24 maxlen: 24
94.240.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354662264 (0x1523b778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 09:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50066fb2882c2e2132861740c070941c61c5bf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:59:61:5f:b2:c7:cc:ad:21:be:c2:bb:62:
c5:92:19:be:db:d6:75:de:76:5a:12:19:c5:2b:d8:
fa:44:70:cf:bf:4b:d8:e9:4c:9e:2d:28:ff:ff:2a:
60:e5:5d:7e:a2:b1:e8:38:7f:92:54:c3:c0:65:98:
59:0a:86:8e:8c:5e:35:dc:49:51:85:c0:3a:e0:9c:
aa:5d:96:41:3d:58:53:00:0b:23:69:ae:ae:d4:13:
7e:59:92:3e:bd:92:03:2f:75:20:e9:c1:be:3b:d0:
6f:6d:11:fe:d3:a3:1a:df:a8:29:a9:4e:07:d7:9b:
cb:6c:71:64:92:b4:9d:27:55:0e:33:45:20:db:c7:
22:c1:b1:65:47:88:6d:00:53:6a:4c:8d:ca:eb:76:
72:1e:14:d4:72:96:e0:86:9b:2c:e7:c2:b3:de:c3:
6c:e7:f1:9c:14:ed:93:d4:11:96:2a:2a:81:f5:1f:
48:e6:94:4b:bf:bd:23:6a:92:58:bc:d2:23:f4:29:
63:b2:4b:f8:05:c5:ce:c4:de:1a:98:30:ae:f1:7a:
6c:70:41:18:95:9e:9b:42:73:76:20:17:e8:72:78:
24:18:96:f6:5e:c6:62:bb:28:11:6b:71:d1:b0:b8:
fd:9f:19:89:ad:ea:06:b3:3c:8f:f2:c3:59:cf:7a:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:6F:B2:88:2C:2E:21:32:86:17:40:C0:70:94:1C:61:C5:BF:7F
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/UAZvsogsLiEyhhdAwHCUHGHFv38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.28.0/24
94.240.41.0/24
94.240.43.0/24
Signature Algorithm: sha256WithRSAEncryption
37:dc:5d:77:33:3e:85:52:16:3e:8a:cd:ea:a6:5b:ad:42:9c:
28:31:88:77:19:e0:6b:ee:38:23:6f:1a:64:43:25:b8:47:1f:
19:31:38:9b:c6:44:87:60:38:83:78:ef:c9:65:6b:a5:22:1b:
5b:8d:cd:63:72:69:0c:1d:90:bd:77:34:df:7c:78:cb:84:1e:
49:58:93:d4:9d:d2:ee:cb:27:2d:94:6b:e0:3f:f9:47:d2:db:
14:37:24:67:9e:e5:47:85:b5:16:49:ce:eb:1e:d3:af:32:40:
50:fa:93:b4:a0:ff:b5:ac:d1:f0:c6:b6:13:7c:52:d8:83:d5:
1f:87:16:6c:32:ef:75:06:f5:80:d5:a3:c4:a9:e1:14:2c:ca:
83:0c:7a:d4:88:08:7e:d6:51:65:a7:08:29:dd:af:b1:60:f4:
c3:98:ae:26:a8:07:88:5d:e5:ee:db:f6:f9:d1:80:9b:82:a5:
db:ad:94:55:4e:e6:34:d8:c6:15:5b:33:09:48:4c:a3:1d:ed:
41:5d:a9:ea:c4:f2:68:f1:50:7f:cd:81:6f:da:1d:3a:ee:c3:
5f:1f:98:a0:79:e7:1c:0f:a3:ed:86:ae:24:3b:89:64:58:6b:
60:fd:81:75:ba:f6:76:60:c7:83:23:9a:d3:ba:73:0d:77:1f:
ce:1f:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:12 2024 by rpki-client on console-ams.rpki-client.org