Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/uGIu1yLkmO_IOIwC8B0SXcFgYwM.roa
File: uGIu1yLkmO_IOIwC8B0SXcFgYwM.roa (raw, json)
Hash identifier: Oaifc0hzBTQCjnuy47h9I5TxLfLWxDvFKpUxXz+ZWoc=
Subject key identifier: B8:62:2E:D7:22:E4:98:EF:C8:38:8C:02:F0:1D:12:5D:C1:60:63:03
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 0183126D66FEE03DB1098A53398F8C1B9596
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/uGIu1yLkmO_IOIwC8B0SXcFgYwM.roa
Signing time: Tue 06 Sep 2022 10:51:43 +0000
ROA not before: Tue 06 Sep 2022 10:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.130.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:6d:66:fe:e0:3d:b1:09:8a:53:39:8f:8c:1b:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: Sep 6 10:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8622ed722e498efc8388c02f01d125dc1606303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:9f:e5:6e:f0:7f:2c:79:fa:23:aa:a5:18:
12:de:3f:65:20:bc:70:aa:e5:d7:35:f6:6c:18:60:
6a:50:f5:e1:2d:44:d8:04:74:a1:9d:80:8a:d9:35:
f2:19:95:09:ae:e7:43:6b:30:41:54:43:e8:6f:86:
56:91:14:da:20:5c:ad:3f:da:0a:1f:d4:5f:09:e9:
6e:02:b9:cb:15:f5:b7:02:0a:e3:df:b2:9a:72:89:
f0:9c:76:38:38:80:5a:1d:0c:ea:da:b3:34:e9:cb:
06:82:79:ef:ab:d1:11:1c:a2:b0:0f:7d:9c:32:f1:
a9:43:c0:3d:6b:5f:9f:dc:24:af:04:7f:b3:ac:ab:
77:1a:6a:02:f3:96:5e:54:8f:db:00:07:a9:98:61:
39:31:d5:7f:f4:bf:6e:5e:c6:ed:2c:04:1e:e6:00:
c9:3e:50:f2:92:19:ff:21:b9:d7:54:ed:de:3e:38:
b8:ee:98:24:85:ef:64:b5:2d:a7:b4:f1:38:44:54:
34:77:65:76:16:60:ef:f5:76:23:e2:8c:68:14:6b:
ed:d6:43:9a:0d:42:3a:b4:4d:4b:89:93:9c:41:d7:
a6:e6:89:3a:f7:8e:38:92:dc:b8:09:50:f9:d4:5f:
b8:61:e2:87:46:6c:a7:4f:c1:6f:5d:0a:d4:01:3e:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:62:2E:D7:22:E4:98:EF:C8:38:8C:02:F0:1D:12:5D:C1:60:63:03
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/uGIu1yLkmO_IOIwC8B0SXcFgYwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.29.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fa:94:04:df:f1:70:f4:b2:8e:6d:6e:48:28:da:cb:c6:37:
e5:b6:60:b0:66:90:8b:28:26:3e:f3:16:31:32:17:37:16:f8:
dc:e3:f4:af:a4:7b:98:58:10:d5:bc:4f:e6:ef:b2:de:51:21:
06:76:3f:91:7a:84:38:71:21:31:28:a8:b1:1c:76:7f:3a:e6:
9b:5a:2c:89:12:d3:56:7d:e5:27:5e:9f:3d:dd:d5:85:2a:ed:
03:94:86:65:db:14:99:19:24:8e:88:18:d8:b3:fd:92:90:d5:
78:02:a0:94:70:58:fc:63:58:b0:30:4e:f9:b0:58:48:80:b3:
8c:07:8d:1d:fb:90:2b:b3:7f:b4:db:09:d3:b2:3a:33:4a:a2:
53:0a:57:86:c7:c1:00:b9:a8:6d:21:74:31:51:37:f5:95:f4:
96:35:89:8b:87:98:3d:49:65:d3:d5:cd:7d:f7:56:e1:43:e2:
1f:d2:d0:51:d0:1b:5f:6e:81:bb:96:bc:33:e6:a3:7e:d5:e3:
85:29:d1:0f:90:e2:ce:bd:b9:98:56:61:ae:d0:16:0d:c6:15:
31:f0:8f:28:1e:ce:ca:53:17:4e:25:08:3e:0a:a3:2e:28:6a:
e4:28:4a:db:82:15:ae:09:4a:3e:bb:6f:15:55:a0:c6:6c:98:
98:a9:0b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:15 2024 by rpki-client on console-ams.rpki-client.org