Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/RucTEJ_SH_upbouQ0ezXH1Fm6iY.roa
File: RucTEJ_SH_upbouQ0ezXH1Fm6iY.roa (raw, json)
Hash identifier: qhF9K5T64X/DG8a4cpuqaMvmRmDSmc37Pjy6sAuNWnI=
Subject key identifier: 46:E7:13:10:9F:D2:1F:FB:A9:6E:8B:90:D1:EC:D7:1F:51:66:EA:26
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 1592FA91
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/RucTEJ_SH_upbouQ0ezXH1Fm6iY.roa
Signing time: Sat 01 Jan 2022 01:03:23 +0000
ROA not before: Sat 01 Jan 2022 01:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8823
IP address blocks: 185.45.240.0/22 maxlen: 22
213.137.192.0/19 maxlen: 19
212.63.64.0/19 maxlen: 19
213.214.0.0/19 maxlen: 19
77.76.192.0/18 maxlen: 18
2001:ad8::/29 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361953937 (0x1592fa91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Jan 1 01:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46e713109fd21ffba96e8b90d1ecd71f5166ea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:0c:73:77:1f:77:87:39:ed:99:e6:50:58:
65:23:a0:61:7a:36:31:b1:9f:c4:af:89:cf:4d:94:
de:79:78:46:6c:4c:5a:70:9f:f5:56:d1:85:14:12:
35:fd:02:dc:c7:3b:85:65:ae:a0:bf:28:26:d1:e2:
cc:3b:8e:02:a6:55:9c:a0:90:ee:b4:56:6a:94:0b:
f8:30:fd:ae:07:42:77:f2:6e:7a:89:28:23:b7:71:
61:0c:bb:b8:fe:00:95:ff:f0:3e:ad:a0:9f:7c:18:
1a:58:46:00:6d:3f:b6:e4:8e:c3:27:d8:f3:e6:b0:
54:20:ed:fd:5d:b1:76:d0:d9:9a:4f:89:b7:ca:75:
4d:09:0f:b3:2e:77:6b:35:93:8b:96:7d:45:e5:f7:
c9:4f:82:e7:a2:9f:e7:66:07:69:7b:f3:fc:cc:b4:
95:df:47:10:39:41:f8:bd:91:5b:40:61:e1:e2:ad:
6e:a5:d5:fc:7d:1d:88:f9:ec:5d:ab:a2:19:13:dd:
70:8d:04:11:e7:e7:7d:c0:43:b5:d4:89:20:ed:e7:
59:a1:fe:b0:36:9c:64:3d:f0:d7:6d:48:4e:d4:5e:
fb:eb:f9:f1:58:d3:e1:33:92:f6:d8:48:1b:ee:8b:
df:fd:54:2e:05:c7:36:05:14:37:df:12:34:38:59:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:13:10:9F:D2:1F:FB:A9:6E:8B:90:D1:EC:D7:1F:51:66:EA:26
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/RucTEJ_SH_upbouQ0ezXH1Fm6iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.192.0/18
185.45.240.0/22
212.63.64.0/19
213.137.192.0/19
213.214.0.0/19
IPv6:
2001:ad8::/29
Signature Algorithm: sha256WithRSAEncryption
99:17:44:31:69:f3:c9:e0:13:71:b1:7b:75:de:7f:1a:3d:04:
c6:78:94:c6:3c:06:82:f6:ef:11:c9:11:b2:0d:cd:02:96:0d:
aa:7b:08:ba:74:8d:70:b2:8c:60:ba:98:31:5b:1a:a6:2b:33:
39:44:bc:92:a5:2f:e0:ad:db:cd:17:8b:b1:5a:5a:28:a8:26:
a7:ed:40:95:ed:16:88:f7:6b:ab:f7:a1:c0:b0:48:b5:3b:37:
36:87:98:69:83:15:ad:a3:c4:26:9b:c1:31:c9:93:2b:07:3f:
c9:3f:aa:9c:66:ed:36:41:e9:07:f3:3e:45:0e:4e:32:90:90:
85:6d:e4:7d:59:d9:1e:a7:03:1b:ec:92:71:80:13:bc:34:96:
ff:7e:dc:b0:94:80:df:5a:2f:0b:c3:11:20:58:9c:43:58:61:
c2:80:a6:1d:85:fd:00:be:e2:4e:2b:31:bc:4c:c8:ab:9d:0b:
0d:af:65:c2:e2:d3:91:f1:1b:af:8c:aa:9a:c3:d5:26:1b:84:
bb:3f:7f:56:ee:da:3b:03:dc:09:21:e0:8e:14:84:26:04:b8:
33:53:50:08:f4:38:e0:dd:67:7e:e4:18:50:8b:a9:1f:d5:71:
f9:c2:20:66:72:84:55:f9:50:07:f4:46:62:75:4a:f6:20:20:
42:4a:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:25 2024 by rpki-client on console-ams.rpki-client.org