Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/UemhlFc8WnEvfG9XcPA3Qme6WiA.roa
File: UemhlFc8WnEvfG9XcPA3Qme6WiA.roa (raw, json)
Hash identifier: MX5cSYvXz52uSMotret7j8pY9wq1FAjQQtXECKRG4yk=
Subject key identifier: 51:E9:A1:94:57:3C:5A:71:2F:7C:6F:57:70:F0:37:42:67:BA:5A:20
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 06B0B85A
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/UemhlFc8WnEvfG9XcPA3Qme6WiA.roa
Signing time: Fri 29 Apr 2022 14:09:27 +0000
ROA not before: Fri 29 Apr 2022 14:09:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212221
IP address blocks: 91.132.4.0/23 maxlen: 23
89.45.206.0/23 maxlen: 23
89.45.200.0/23 maxlen: 23
89.45.203.0/24 maxlen: 24
89.45.200.0/21 maxlen: 21
89.45.204.0/23 maxlen: 23
89.45.202.0/23 maxlen: 23
212.102.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112244826 (0x6b0b85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Apr 29 14:09:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51e9a194573c5a712f7c6f5770f0374267ba5a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a4:a1:27:f4:b1:a4:14:d0:9e:95:ed:84:f5:
f4:17:e1:e1:b2:f8:77:18:3e:b4:92:cd:be:2a:d4:
38:e7:6a:50:82:34:16:9c:0d:2c:1d:a9:79:b4:52:
9e:e2:bb:09:f0:f3:cc:16:1f:0e:0b:f2:90:56:bf:
0b:1f:08:70:19:36:1c:af:14:4c:79:77:ec:c1:bb:
0b:01:66:ea:27:21:62:ab:bd:5c:89:43:c0:90:fd:
d9:2b:74:19:50:eb:bf:6c:ea:cd:b6:d7:96:ac:90:
29:80:d4:f7:fb:60:2b:00:43:ea:65:f7:f2:9b:5d:
f4:2a:e4:58:3e:22:83:fe:85:2e:08:b9:73:a2:ce:
84:d8:02:35:27:ce:96:e2:78:74:fc:a5:05:ce:c8:
67:50:e1:a7:d6:18:f9:b3:ae:2f:51:b0:35:04:46:
bb:9d:e0:50:2b:85:3a:d0:df:61:c0:6e:e3:19:d8:
d1:90:ed:bc:df:31:2d:3e:b3:bf:81:d3:97:84:84:
78:ae:90:ce:87:3b:de:c9:92:01:a4:47:b0:e0:86:
d9:f8:6c:b8:e5:20:d1:08:a1:50:bb:7f:8b:e2:02:
89:48:1b:79:80:49:9c:9e:62:4c:a9:f6:06:1c:a4:
92:d4:81:f8:ca:67:20:88:18:09:e3:55:48:3e:76:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:A1:94:57:3C:5A:71:2F:7C:6F:57:70:F0:37:42:67:BA:5A:20
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/UemhlFc8WnEvfG9XcPA3Qme6WiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.200.0/21
91.132.4.0/23
212.102.106.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1a:c4:b6:26:b2:af:59:15:5f:a5:46:69:48:5e:a9:f9:0f:
d6:d2:8e:1e:68:ff:7b:cb:10:9f:bd:92:1a:0e:65:7e:2a:12:
b6:d6:25:0f:f6:ed:61:88:04:b9:71:83:e3:9e:4e:b6:e5:79:
62:70:5e:91:d8:31:c6:72:f6:6d:51:58:37:51:33:04:80:b8:
4a:9c:e6:3e:dc:7f:50:08:bf:46:09:fa:cd:a8:c7:45:ac:96:
1a:42:f4:3d:3c:b4:02:7d:ad:8f:d8:ac:92:be:3d:6e:c7:7a:
fa:55:94:2b:0b:1b:83:c0:d4:64:27:c9:15:69:fb:79:4e:f4:
72:1f:4d:6c:1f:96:aa:f7:91:a6:6e:87:19:8f:57:c9:89:ac:
7f:65:3b:98:7c:92:e1:9c:6c:6d:59:ff:86:fc:58:0c:69:53:
6e:b6:c1:2f:b6:72:b6:5c:fd:3a:99:3a:51:1a:d7:71:3a:c4:
11:f4:b1:14:64:ed:de:af:ad:60:f9:89:d4:51:6d:1d:07:15:
c3:17:8f:60:42:05:0e:ef:2d:07:f2:94:c7:8a:63:42:bc:c2:
f6:6c:65:00:00:7c:1d:1a:8e:f6:e6:08:be:22:a5:2b:2a:8e:
32:6a:81:e3:77:26:33:7a:88:aa:c2:38:7a:00:08:e0:4d:7b:
37:92:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:28 2024 by rpki-client on console-ams.rpki-client.org