Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ui-aRYULc_PgNf8BU9VbSShMScw.roa
File: ui-aRYULc_PgNf8BU9VbSShMScw.roa (raw, json)
Hash identifier: 5V1QvQGIkr9hIYEhfmCUpwfFsXotJiqCU5YKarfx75Y=
Subject key identifier: BA:2F:9A:45:85:0B:73:F3:E0:35:FF:01:53:D5:5B:49:28:4C:49:CC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1DC6F114
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ui-aRYULc_PgNf8BU9VbSShMScw.roa
Signing time: Thu 07 Apr 2022 06:41:35 +0000
ROA not before: Thu 07 Apr 2022 06:41:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 185.221.66.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499577108 (0x1dc6f114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 7 06:41:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba2f9a45850b73f3e035ff0153d55b49284c49cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:50:6e:bc:a6:19:b9:ca:f8:3c:7a:26:f5:
cc:ef:1a:c2:27:ee:e6:2e:4c:49:d5:4d:e2:3c:1b:
84:f9:1a:12:17:d3:83:10:53:3d:37:ca:64:8e:e5:
ec:70:75:80:24:4b:02:10:9d:66:c1:1c:71:f4:84:
77:ae:ec:3a:b8:a0:ff:92:f8:0d:57:9c:22:57:71:
78:36:b7:02:e0:7e:19:76:11:8c:ac:b8:9d:ce:b8:
b7:11:62:d9:e4:64:42:d6:af:f8:9a:37:54:c7:2b:
fa:6e:67:49:13:6b:94:20:bf:ab:0d:5b:a2:7d:d9:
02:5e:a5:b4:ab:09:31:0c:47:f9:87:a2:57:be:76:
42:a7:a8:14:2a:98:8d:64:6f:b9:d9:20:ec:a5:85:
f1:26:51:fa:2f:ce:ac:fb:9c:ca:4c:74:2c:88:74:
d7:c3:29:3a:da:2f:dc:80:e9:ae:da:16:75:e4:b9:
ce:d5:3a:14:b1:ea:92:63:80:f2:6d:f3:f0:56:a2:
6a:de:b8:75:28:16:66:25:b2:2b:24:c1:e4:01:7e:
da:48:6f:3e:92:0f:7d:10:47:18:f6:83:ad:01:cd:
56:8c:e3:92:b0:42:97:2d:c3:1c:e6:ff:f4:84:6c:
53:81:d0:ae:ab:71:5a:88:32:07:02:64:8b:fb:5b:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:9A:45:85:0B:73:F3:E0:35:FF:01:53:D5:5B:49:28:4C:49:CC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ui-aRYULc_PgNf8BU9VbSShMScw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.66.0/24
194.55.186.0/24
Signature Algorithm: sha256WithRSAEncryption
92:35:c9:ad:7d:b2:86:bd:ca:7d:32:ed:19:cf:80:cd:7d:a7:
e5:4e:b5:0a:af:62:b2:69:45:6b:11:db:18:c0:2d:d8:fc:8f:
07:ad:e5:64:ae:26:95:07:aa:a9:12:94:2d:78:a5:ef:06:65:
36:fd:22:42:0e:43:43:1a:1f:af:90:0c:14:a5:d9:22:36:04:
bd:fc:c4:f1:13:e0:55:99:8e:29:d1:21:a7:92:13:9b:64:2e:
bb:46:f7:39:6e:08:f4:ee:81:91:c3:e8:c7:c7:f2:41:22:8a:
84:2f:eb:4f:43:53:4a:1b:80:5b:23:6c:5d:aa:97:d1:0e:d5:
ba:e1:72:10:14:db:58:17:82:47:f2:a2:c4:4e:c1:f7:b4:71:
f4:82:fb:03:08:e3:5b:e7:5b:8a:9b:7c:8c:e6:69:86:59:f9:
9f:e2:48:f4:63:21:27:cc:62:0b:ac:a9:97:93:e5:ba:75:69:
da:b6:fe:55:97:c8:07:fc:e2:f6:11:76:b2:07:44:7d:d9:cd:
49:22:1e:0c:d1:22:2d:31:0f:a6:13:83:b6:b1:ad:ca:35:9e:
fc:ae:1a:db:c3:a9:95:55:1e:03:05:1d:9e:bf:e8:2c:20:0f:
e7:64:41:22:ff:c1:b7:88:ae:08:58:95:f3:95:0b:6e:82:d1:
18:4c:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org