Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uogrX7weo8Rt65lo0kDLGH18MKg.roa
File: uogrX7weo8Rt65lo0kDLGH18MKg.roa (raw, json)
Hash identifier: ev2+OU/CPDPz94QGcnO8F89qMO5HhxX2OAYbEpX25UM=
Subject key identifier: BA:88:2B:5F:BC:1E:A3:C4:6D:EB:99:68:D2:40:CB:18:7D:7C:30:A8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018412FE73C8AE7E206A0504431B3A7B8F83
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uogrX7weo8Rt65lo0kDLGH18MKg.roa
Signing time: Wed 26 Oct 2022 06:32:56 +0000
ROA not before: Wed 26 Oct 2022 06:32:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142578
IP address blocks: 213.176.76.0/22 maxlen: 24
213.176.80.0/21 maxlen: 24
213.176.96.0/20 maxlen: 24
213.176.8.0/21 maxlen: 24
213.176.16.0/22 maxlen: 24
213.176.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:12:fe:73:c8:ae:7e:20:6a:05:04:43:1b:3a:7b:8f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 26 06:32:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba882b5fbc1ea3c46deb9968d240cb187d7c30a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:ac:99:89:82:81:07:13:7a:a6:0e:f7:79:
85:45:bc:69:f6:ce:78:d8:60:7b:bd:91:c7:4d:49:
9d:63:66:f7:75:ad:4b:0c:73:11:d5:40:1d:1a:67:
2a:f6:ad:e2:3a:31:28:bb:c5:91:25:4b:0b:9b:0b:
d9:4e:5e:d1:27:2c:f3:a4:08:66:55:02:40:5b:0b:
17:aa:fe:c2:50:26:6f:91:25:48:aa:7b:f7:5d:7e:
0c:7d:23:00:fe:b9:3c:83:b7:e5:ae:fb:67:ea:12:
1d:95:ae:62:17:0f:a1:02:e2:15:1c:12:e1:14:69:
ae:27:ab:fa:8b:1c:8e:d5:fe:01:85:d6:1f:39:4b:
c0:ab:86:69:83:3d:0a:14:72:79:8e:a6:ab:18:d4:
7e:29:df:40:5f:f7:44:57:10:1d:29:11:04:c4:16:
d4:c0:6a:6f:c6:49:83:0c:bd:99:bc:69:cd:23:c8:
4a:b4:68:7a:5f:ac:2f:56:db:0b:d3:19:a4:e3:ed:
87:c4:c5:dd:a1:5c:fe:f2:fe:e5:2b:0a:43:a8:e9:
33:27:ca:25:1f:9c:67:f0:c1:7f:64:a2:36:98:ae:
5c:32:89:dc:46:6e:74:06:56:98:56:8d:c5:25:97:
1f:7c:a5:74:94:f2:b9:de:ad:b4:d8:3a:f1:bd:85:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:88:2B:5F:BC:1E:A3:C4:6D:EB:99:68:D2:40:CB:18:7D:7C:30:A8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/uogrX7weo8Rt65lo0kDLGH18MKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.8.0-213.176.19.255
213.176.32.0/19
213.176.76.0-213.176.87.255
213.176.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:51:42:e8:a8:b3:5f:ce:9e:33:3c:b6:75:31:0d:01:d7:3d:
29:1d:45:7c:6e:69:80:bd:1c:24:a5:8b:c8:f2:84:0e:bc:26:
18:c8:ff:30:79:ea:ef:28:f0:f8:b8:6d:b8:98:ba:be:c3:2e:
b9:cf:21:17:1f:a6:f5:5c:24:19:64:c4:d7:c3:7c:d5:1f:92:
6b:f2:1d:bb:47:a5:da:00:53:14:47:46:30:10:35:34:f2:3c:
77:f2:40:da:1b:26:2b:a8:1e:ac:16:40:52:fc:ca:a7:b8:6b:
46:91:8e:bc:d2:64:ff:d0:c5:69:ee:f7:38:aa:e5:b0:70:2e:
5b:1c:bb:d1:19:51:8f:22:c7:ba:66:f8:ea:73:0a:ff:90:85:
8c:a9:9e:33:3b:1c:46:8e:b9:dd:96:e7:9e:f0:81:bf:04:cc:
6a:78:41:5f:a5:d5:9f:bd:80:a9:cd:0f:cd:ee:29:46:92:d0:
29:18:8d:63:ed:ab:95:00:27:4f:60:3b:6c:fd:08:e2:0b:13:
e9:33:b0:94:f0:28:ff:31:c6:7b:f2:8d:75:04:51:7d:f0:84:
d6:16:2b:79:74:da:5a:85:46:83:30:78:df:43:df:10:09:b4:
56:f5:c4:24:f0:02:fc:98:ba:ec:92:ff:83:c1:a2:12:cb:a5:
0e:ce:63:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org