Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/UaNPsZYJMABPoBh2toCinAF1d-k.roa
File: UaNPsZYJMABPoBh2toCinAF1d-k.roa (raw, json)
Hash identifier: x/5jIQqejskOMAsIepI/UjeSxdlBOL82LcimE+nP8vg=
Subject key identifier: 51:A3:4F:B1:96:09:30:00:4F:A0:18:76:B6:80:A2:9C:01:75:77:E9
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018302736DE357048C2F2951D0CEA9CC42F7
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/UaNPsZYJMABPoBh2toCinAF1d-k.roa
Signing time: Sat 03 Sep 2022 08:24:22 +0000
ROA not before: Sat 03 Sep 2022 08:24:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.37.196.0/22 maxlen: 24
178.239.28.0/22 maxlen: 22
2.58.232.0/22 maxlen: 22
45.67.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:02:73:6d:e3:57:04:8c:2f:29:51:d0:ce:a9:cc:42:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 3 08:24:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51a34fb1960930004fa01876b680a29c017577e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2c:88:da:a9:7e:8d:4a:1f:fb:e8:e9:5e:91:
89:c2:f2:5d:90:68:82:6a:68:9f:39:3a:2d:1c:92:
21:80:8e:65:90:e2:48:bd:7f:65:e7:77:3d:54:52:
47:d0:32:72:c2:8a:38:bb:4e:c7:e7:89:0f:e3:13:
2a:a9:b5:c2:b3:c4:eb:6b:03:6b:1e:c5:ed:50:81:
78:78:c9:88:cd:39:3e:6b:20:a6:1a:55:cf:b0:bd:
0f:ec:bf:91:74:b6:32:25:2c:26:29:67:09:53:3e:
91:69:86:6f:06:9b:0e:3e:72:8d:f1:0f:53:b8:3f:
a8:9b:06:2e:8e:94:63:3a:e9:ed:6f:90:d9:73:3f:
8a:2d:91:2b:da:f4:7a:ae:63:30:39:84:43:10:27:
38:fe:41:de:04:a2:c3:b7:b6:4d:81:6c:14:07:37:
29:7f:f0:e4:a3:f6:57:33:9d:86:aa:f2:9a:54:d5:
b5:9d:d6:3d:a4:9d:8a:fe:85:32:ca:77:04:0d:55:
16:d0:fd:31:58:70:31:7f:67:68:88:a6:d6:47:dc:
11:2f:b1:e2:08:e9:2b:f0:6b:78:d0:5d:3b:ef:63:
9b:9e:87:b6:0d:3b:9a:fc:44:5c:41:e8:cb:b7:c0:
da:d2:9f:5f:48:2f:9e:df:27:ac:0f:34:87:72:87:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A3:4F:B1:96:09:30:00:4F:A0:18:76:B6:80:A2:9C:01:75:77:E9
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/UaNPsZYJMABPoBh2toCinAF1d-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.232.0/22
45.67.200.0/22
178.239.28.0/22
193.37.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:14:bc:db:37:22:6c:e6:7a:9b:d1:a2:8c:14:c5:16:3f:e6:
b7:97:e9:21:f1:57:82:37:18:82:77:85:83:b3:52:cb:09:6c:
8f:97:08:78:8e:ac:64:15:61:a5:3f:9e:11:5e:3c:fe:61:dd:
30:32:55:b1:c9:8e:83:1b:88:c5:03:a0:49:58:a6:02:bd:09:
5a:05:ee:c4:7c:75:d5:6a:b5:81:2c:27:cf:35:e6:df:b0:f5:
cc:bf:a0:b4:6a:4f:2d:c0:19:d8:e4:b4:72:7d:3a:70:2a:57:
51:e7:b3:f1:d3:e6:d2:35:04:5f:64:d4:86:a2:fc:8f:e1:49:
45:f1:9e:e2:cf:f0:65:30:95:de:c4:f7:ea:46:6d:88:e7:62:
1a:86:ab:fb:d9:54:33:25:43:08:39:01:ce:e7:e0:9d:ef:28:
25:e5:e8:b1:58:91:6a:26:b0:aa:28:00:92:4f:92:ce:ec:22:
e7:d3:0a:17:58:5e:50:87:02:ba:50:77:ff:bc:fa:af:72:8d:
ca:84:76:e1:46:07:3a:78:86:9a:a5:65:0e:7b:3a:a5:47:8d:
4e:c4:c2:ae:e4:09:e9:ea:94:f8:07:90:ef:a1:fb:ae:1b:31:
18:57:b2:cf:cb:14:c8:17:37:07:a4:92:d1:cb:54:fe:2f:b6:
93:de:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org