Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/uqpe4zKP9JhQzZ1RB302JJM6RA8.roa
File: uqpe4zKP9JhQzZ1RB302JJM6RA8.roa (raw, json)
Hash identifier: kR/+YHXQnrWqCTLZjYfXbU7DJROpb/W4zEdb3oSBTNA=
Subject key identifier: BA:AA:5E:E3:32:8F:F4:98:50:CD:9D:51:07:7D:36:24:93:3A:44:0F
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 0654B105
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/uqpe4zKP9JhQzZ1RB302JJM6RA8.roa
Signing time: Sat 01 Jan 2022 10:06:06 +0000
ROA not before: Sat 01 Jan 2022 10:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 185.103.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106213637 (0x654b105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Jan 1 10:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baaa5ee3328ff49850cd9d51077d3624933a440f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:2e:98:d6:17:a3:05:78:93:8c:65:88:f1:
4e:78:5b:e3:e7:b1:65:6f:02:93:3e:cf:64:8b:aa:
17:25:76:e6:bf:ab:32:75:63:3e:85:8e:d8:fc:15:
bc:72:f4:54:7c:8b:06:46:7a:7f:60:45:59:f5:94:
05:1d:56:ae:14:0c:cd:e8:93:6b:80:a8:85:49:56:
5f:6c:cd:0d:ee:de:14:05:54:fb:77:e3:10:da:68:
ee:11:59:33:51:6f:cd:c6:b8:66:83:9a:dc:96:23:
33:05:df:e5:8b:10:c3:46:7a:69:67:1c:9e:2f:54:
f1:d4:8d:ef:ca:38:9e:15:f1:1e:2b:b6:f0:57:4b:
af:cf:c8:7f:22:bb:f4:de:98:d2:5c:89:37:c5:37:
58:09:34:a9:bb:ed:62:8f:3f:c8:53:89:b6:a3:7b:
5e:aa:85:78:f2:c9:ee:7d:d3:5d:cd:8c:f1:88:1b:
72:0f:8e:71:bd:e9:52:1d:2a:b4:4c:91:b8:05:0a:
5e:9c:04:29:a1:cd:59:9d:15:1c:fa:8d:b7:5b:5b:
46:40:d3:b4:32:c4:b8:a4:d8:31:20:54:5b:75:cf:
92:36:46:cb:4d:f3:28:b5:9d:6b:63:ac:a1:c8:2f:
50:dd:d3:40:2b:a2:3c:79:a2:16:e5:77:39:d9:77:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:5E:E3:32:8F:F4:98:50:CD:9D:51:07:7D:36:24:93:3A:44:0F
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/uqpe4zKP9JhQzZ1RB302JJM6RA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.6.0/24
Signature Algorithm: sha256WithRSAEncryption
53:da:c1:b2:95:6b:b8:3e:10:ec:8d:ed:8b:9f:dd:03:ba:fe:
77:02:ad:bf:12:b6:87:69:cf:47:e3:25:83:b2:40:62:00:46:
85:54:cd:60:80:ee:59:6c:7e:5e:b1:2d:b8:9d:07:75:61:f5:
6f:88:58:0a:1b:0b:35:ed:b8:e9:e6:ac:ec:f9:9e:60:49:17:
37:e5:1e:1d:d7:55:22:ee:13:21:8d:94:8a:1d:51:33:2b:1f:
a3:b6:e7:5b:db:6a:a8:58:8b:ed:90:0e:4b:16:70:89:42:55:
6f:1a:2d:37:39:9b:e5:98:2a:b3:c6:09:c4:fe:f7:3f:97:44:
7b:c3:ed:e3:91:9d:1a:60:a9:e2:1c:af:7a:74:f4:5e:ea:92:
96:26:63:f2:05:82:85:63:6c:0c:b9:af:08:d2:e3:aa:65:b0:
d9:9c:fe:d2:38:a4:4d:f5:de:dd:a2:36:65:06:b9:64:79:f2:
5d:80:0d:19:65:82:a3:f3:5e:43:9a:72:c1:1b:3a:e6:55:94:
a6:71:0f:40:48:25:ed:dd:e3:4d:94:9c:1b:3a:a2:53:3e:9e:
61:8b:60:af:31:a4:8d:dc:89:a9:b8:52:1f:8b:3a:9c:13:e1:
81:c5:5e:46:b9:5d:f8:d7:5e:d9:a8:9d:46:56:2f:5e:bb:33:
a0:58:5c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-ams.rpki-client.org