Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/uurmKRXL93XeD5FVIv19AIzaN_k.roa
File: uurmKRXL93XeD5FVIv19AIzaN_k.roa (raw, json)
Hash identifier: TQBx7Ubpd5fn/k/DdNloMprLnyJ2VaNj4jf+BiDZjJc=
Subject key identifier: BA:EA:E6:29:15:CB:F7:75:DE:0F:91:55:22:FD:7D:00:8C:DA:37:F9
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 018201590F6299A16CB2CF8F07589221FEA5
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/uurmKRXL93XeD5FVIv19AIzaN_k.roa
Signing time: Fri 15 Jul 2022 10:13:09 +0000
ROA not before: Fri 15 Jul 2022 10:13:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205334
IP address blocks: 185.211.41.0/24 maxlen: 24
185.214.169.0/24 maxlen: 24
185.193.172.0/24 maxlen: 24
185.193.175.0/24 maxlen: 24
185.193.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:59:0f:62:99:a1:6c:b2:cf:8f:07:58:92:21:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Jul 15 10:13:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baeae62915cbf775de0f915522fd7d008cda37f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:ef:5f:1a:59:f7:83:84:7e:46:f2:9d:30:
c1:3d:e0:94:80:99:01:26:7a:7d:42:f2:7b:8d:2e:
ee:58:68:8e:1a:1d:16:72:ed:e8:d8:0a:cb:17:c9:
86:4c:c1:5e:bc:1c:64:b4:fc:72:e6:a3:c4:f5:50:
24:0a:82:25:81:1c:63:fe:e2:1d:c2:f7:17:67:b5:
0c:c2:42:4a:97:50:e3:cd:3f:df:e9:4a:28:24:3e:
de:82:2c:85:4f:49:8f:61:5c:26:bc:fe:0b:c2:68:
6f:93:1a:3f:57:a8:36:73:04:c5:95:e8:0b:1d:96:
ce:6d:3e:dc:e8:31:03:e2:19:cc:ac:03:0f:b3:ad:
2a:e4:02:44:57:2f:e0:d1:a8:0b:18:b9:ed:8d:33:
ed:ec:a5:f2:9b:03:81:88:81:84:a7:eb:27:a0:f8:
ea:7d:49:e8:37:cb:ac:f5:84:b0:2b:9a:a0:f4:8a:
55:87:cb:6f:1e:d1:6f:09:9e:54:04:cb:9d:77:1c:
e9:32:c9:51:95:22:5e:64:f0:e7:a9:3b:5f:c0:d2:
7e:e7:f8:0e:6a:af:db:63:4f:6c:2e:9b:d9:de:4d:
c3:fb:9a:26:93:f4:96:48:79:2c:a4:93:67:8d:21:
4e:08:64:1e:45:bd:e1:4b:c5:42:13:b0:63:8a:ff:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:E6:29:15:CB:F7:75:DE:0F:91:55:22:FD:7D:00:8C:DA:37:F9
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/uurmKRXL93XeD5FVIv19AIzaN_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.172.0/24
185.193.174.0/23
185.211.41.0/24
185.214.169.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2a:37:08:61:79:3e:81:07:78:38:b0:f9:e4:6c:c7:03:e3:
34:94:59:6e:60:42:05:4b:8e:5d:0c:b2:73:dd:bd:1d:7c:0b:
e6:4e:6d:75:13:3f:1f:6a:83:fc:5d:e6:fa:c0:96:a2:6b:3e:
59:65:e6:95:c1:48:59:00:c1:6f:14:15:95:fa:ff:5e:a7:73:
38:5c:90:5e:ff:6b:e4:3c:16:82:b5:72:de:28:4c:91:d7:6f:
4e:03:ac:74:73:96:05:dc:ae:69:d6:55:18:07:c3:7d:f3:df:
e1:f8:54:9b:14:e1:34:c4:0c:42:55:8b:c4:7c:4a:33:9e:10:
e4:71:5c:61:63:cb:21:dd:ac:1c:30:2b:35:5e:37:ae:a7:59:
29:95:f2:fd:6a:a6:4d:78:2b:ee:ba:5e:f1:01:13:6a:ab:20:
96:0f:6f:75:af:8a:7a:1d:cc:dc:c9:c7:bc:ad:41:4e:0a:d6:
58:e2:85:37:1a:1b:45:96:96:aa:cc:c4:c5:5e:d1:d6:ec:63:
84:0e:49:d7:9e:1b:73:00:28:13:42:8a:1c:e0:a9:a5:4f:44:
78:ef:38:ed:89:4c:12:45:be:cb:2b:b1:20:c1:91:f4:b9:46:
0e:61:52:32:84:49:02:4d:b8:d6:02:2a:42:dc:6a:7a:28:f5:
e2:44:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:57 2024 by rpki-client on console-ams.rpki-client.org