Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/uuhsPHvoXmskPxo1TbqZ_TbKTJY.roa
File: uuhsPHvoXmskPxo1TbqZ_TbKTJY.roa (raw, json)
Hash identifier: TF6XzbutNyhEbUwK6jlA/WF7lb5jPfJfIp7p8HbFAr8=
Subject key identifier: BA:E8:6C:3C:7B:E8:5E:6B:24:3F:1A:35:4D:BA:99:FD:36:CA:4C:96
Certificate issuer: /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial: 08E792
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/uuhsPHvoXmskPxo1TbqZ_TbKTJY.roa
Signing time: Sat 01 Jan 2022 00:54:07 +0000
ROA not before: Sat 01 Jan 2022 00:54:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202223
IP address blocks: 185.49.164.0/22 maxlen: 22
185.49.164.0/24 maxlen: 24
185.49.166.0/24 maxlen: 24
185.49.165.0/24 maxlen: 24
185.49.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583570 (0x8e792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Validity
Not Before: Jan 1 00:54:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bae86c3c7be85e6b243f1a354dba99fd36ca4c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:05:9e:00:1f:20:b7:ef:64:db:0b:19:9c:
85:6f:f2:29:e3:28:fa:55:61:5f:b9:da:fc:6d:30:
e4:f5:6e:d5:60:48:af:79:54:b8:06:23:87:98:2d:
7c:82:a1:e2:fe:29:2d:42:fd:19:e2:25:31:6e:af:
34:ea:48:0c:de:2f:7a:e3:92:53:0a:57:2f:50:81:
0e:f1:61:3a:85:b8:28:6c:c2:90:eb:c9:0a:57:05:
aa:0f:4e:b1:13:cb:84:38:21:95:18:a1:0c:13:f0:
fe:76:8c:a3:7d:88:fb:9e:0f:3f:40:e9:f7:9b:6d:
0d:84:d9:f8:46:27:1a:86:18:ad:d9:c8:ce:1f:bb:
49:bf:c0:e9:b4:37:8e:b5:b1:cf:3c:59:c9:4c:cd:
df:1e:11:03:e5:fa:ac:de:4e:d4:97:41:7f:ce:f6:
81:b5:10:74:58:26:b2:6c:de:88:c8:6a:da:ce:a7:
c5:d0:ce:ef:b0:3b:d8:b2:76:e2:54:f5:90:ae:a2:
db:8f:fb:df:d7:24:3e:61:69:5b:82:5a:d4:f4:76:
90:5d:85:57:33:b0:86:3c:fd:cd:64:7a:88:83:fc:
d8:d5:39:77:2d:21:48:86:5e:1a:5f:00:46:49:45:
da:e5:b6:be:65:c4:f0:8a:ab:0a:2a:b5:24:cb:60:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:6C:3C:7B:E8:5E:6B:24:3F:1A:35:4D:BA:99:FD:36:CA:4C:96
X509v3 Authority Key Identifier:
keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/uuhsPHvoXmskPxo1TbqZ_TbKTJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.164.0/22
Signature Algorithm: sha256WithRSAEncryption
18:3d:f9:fe:ff:33:57:fb:14:1f:72:be:06:86:1a:60:e8:1d:
3d:db:2b:44:80:fa:5c:a6:b4:f5:d5:54:ba:e2:aa:af:92:43:
37:98:db:2c:8e:0c:6d:f7:f5:be:05:25:9d:5d:00:06:53:8e:
55:e2:64:df:d4:ce:3d:1e:81:1d:27:9e:0f:97:5b:1d:d2:38:
2c:6b:16:6e:69:78:b1:39:59:55:b5:17:64:7d:c1:14:3e:ff:
ac:6a:b1:e9:45:d9:da:be:a5:43:23:c4:b7:22:20:6e:67:49:
aa:b3:77:ae:db:42:3f:06:80:ec:65:0c:68:f3:aa:81:ef:de:
dc:ad:7f:47:39:ac:49:e8:e4:60:6c:75:d6:cb:bd:be:55:4e:
e3:85:d3:3f:8b:76:45:fb:21:e1:32:14:39:e6:d9:7e:1e:45:
07:65:77:20:ff:bc:f3:71:5b:0d:42:ec:eb:82:e1:1d:bc:d2:
b3:87:d6:1e:ad:00:8b:07:fb:98:01:7c:76:e9:0f:8d:89:46:
55:6b:a6:82:45:56:12:2f:c8:39:fa:21:f2:db:5e:3a:3c:7f:
81:30:7c:0e:2a:f0:6e:c3:31:97:23:18:f7:6e:b2:97:6f:b0:
1a:9c:15:41:c1:74:f2:59:56:89:8a:de:4d:48:70:a6:8c:57:
ae:d1:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:45 2023 by rpki-client on console-ams.rpki-client.org