Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Uf-vXXTlgIJ6aKcEQgrF-0pnZXI.roa
File: Uf-vXXTlgIJ6aKcEQgrF-0pnZXI.roa (raw, json)
Hash identifier: nmuiL2T66QHAtV4Q0jM7z4dw/nnS/UE1zZp+6vzP2h8=
Subject key identifier: 51:FF:AF:5D:74:E5:80:82:7A:68:A7:04:42:0A:C5:FB:4A:67:65:72
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 08DF14B3
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Uf-vXXTlgIJ6aKcEQgrF-0pnZXI.roa
Signing time: Mon 21 Mar 2022 09:33:46 +0000
ROA not before: Mon 21 Mar 2022 09:33:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 185.243.114.0/24 maxlen: 24
185.243.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148837555 (0x8df14b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 21 09:33:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51ffaf5d74e580827a68a704420ac5fb4a676572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:12:a8:56:84:32:01:bf:b4:f7:0c:8c:6c:
74:60:44:b3:70:c4:e2:fe:b8:b7:78:12:da:dd:4d:
3b:5c:d6:df:3a:03:70:c2:77:ba:25:b9:40:67:d9:
16:fc:c9:9d:f6:2a:d0:9b:a4:1f:d6:bf:ad:f9:66:
31:05:32:cd:9c:c2:e2:cb:4f:aa:fb:cc:85:6a:0c:
05:99:d0:76:43:1c:00:f0:db:91:ea:b3:62:8d:31:
6d:f9:a3:32:f7:37:b8:e8:41:a7:01:a0:11:12:33:
df:8e:1f:13:1a:fd:0a:5c:e9:84:05:c6:7b:79:91:
ed:35:16:70:e4:0d:b7:85:d6:96:b1:e1:1b:44:f4:
85:3d:a1:08:4f:64:a2:e5:1c:b7:ab:ad:88:7d:b6:
0f:c7:60:1c:6d:69:2a:2e:44:5c:6d:33:51:5a:1c:
ef:ae:97:4d:ae:d6:a6:de:1e:be:31:9f:a6:ee:ee:
12:d5:69:e9:4f:40:a8:82:2f:02:bf:c4:f2:a0:2f:
df:dd:65:24:8c:0c:51:87:bd:8c:35:a0:23:78:01:
4d:bd:d3:a2:4a:b6:a5:94:f8:c5:b6:84:b4:43:97:
89:e0:3a:ae:96:bb:1c:90:9f:f8:1e:59:a0:ec:ea:
74:fa:5c:4a:ce:3a:ad:a7:d8:d8:39:06:94:5a:64:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:AF:5D:74:E5:80:82:7A:68:A7:04:42:0A:C5:FB:4A:67:65:72
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Uf-vXXTlgIJ6aKcEQgrF-0pnZXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.114.0/23
Signature Algorithm: sha256WithRSAEncryption
91:0e:f3:38:2f:1b:18:c1:4d:56:b4:8b:88:3b:6d:50:6a:77:
74:9c:9f:6e:f3:f5:c2:2b:19:dd:13:64:86:0b:a2:d1:a2:ab:
d2:93:c9:c9:c9:60:35:ca:cd:57:41:a0:03:80:a3:e2:0f:c1:
73:39:df:60:29:a9:3b:7c:ed:b1:3c:eb:d8:c7:50:ad:1d:75:
c6:69:49:1f:32:68:88:50:91:77:8a:35:92:fb:d0:12:5f:12:
93:54:2b:f7:3d:87:73:e9:01:fe:e8:0f:12:be:84:c8:56:4e:
57:60:10:a0:7a:d6:81:fe:42:67:dc:aa:d7:44:69:71:c9:4e:
01:db:ae:9d:39:5e:d3:34:19:ef:5d:35:4b:9c:7a:bb:75:b2:
17:a3:fa:77:62:0a:45:2f:35:80:a1:63:24:5a:3d:59:77:3c:
25:bd:ac:86:2f:41:53:13:ee:c8:47:e8:a8:bd:f6:c9:06:0e:
5a:99:2a:64:74:ed:dd:37:5d:ea:65:ba:64:13:4e:c9:25:41:
ff:62:21:bd:7c:33:ed:87:dc:94:d2:a6:90:d8:cd:02:75:71:
d8:0b:10:e1:d8:a4:97:c5:3e:47:07:17:3e:2b:6e:77:9e:19:
bc:0a:67:82:92:da:9a:08:a7:45:99:ea:a9:98:7a:bf:db:d7:
5d:8a:ef:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org