Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/uiiTEjCnuCLkBIW3K-m_qKNHeQc.roa
File: uiiTEjCnuCLkBIW3K-m_qKNHeQc.roa (raw, json)
Hash identifier: 5hUohyq529UgVmLyDupK49NMTkaEBYvLUv9QmKcixfk=
Subject key identifier: BA:28:93:12:30:A7:B8:22:E4:04:85:B7:2B:E9:BF:A8:A3:47:79:07
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: BF4F72
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/uiiTEjCnuCLkBIW3K-m_qKNHeQc.roa
Signing time: Sat 01 Jan 2022 05:57:34 +0000
ROA not before: Sat 01 Jan 2022 05:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12297
IP address blocks: 87.241.128.0/18 maxlen: 24
178.160.192.0/18 maxlen: 18
212.73.64.0/19 maxlen: 24
178.160.252.0/22 maxlen: 22
178.160.248.0/22 maxlen: 22
178.160.251.0/24 maxlen: 24
46.70.0.0/15 maxlen: 24
2a00:f38:0:111c::/64 maxlen: 64
2a00:f38:0:111d::/64 maxlen: 64
2a00:f38::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12537714 (0xbf4f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jan 1 05:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba28931230a7b822e40485b72be9bfa8a3477907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:f2:29:a7:42:99:fc:14:35:cc:d7:ca:e0:
61:6b:44:a3:3c:2b:20:60:80:a0:63:be:0f:c6:a5:
65:ee:81:7d:e1:6e:99:79:b5:fb:ef:fb:de:84:da:
98:5e:34:7c:ee:7f:36:4c:7d:7f:16:36:a6:82:c7:
32:9f:10:5f:d4:cc:b5:ca:45:c8:c2:72:b4:d8:96:
3d:51:a1:f0:44:d2:aa:bd:e6:40:11:bb:43:ff:3b:
d7:06:af:0a:90:00:1a:8c:1b:16:c1:6d:14:c2:ae:
a0:6e:18:9d:6a:87:90:9a:28:22:d1:b6:68:37:9c:
09:75:5c:35:15:66:1d:2f:51:71:db:96:28:0e:80:
1d:dd:72:9c:54:19:3d:b7:a8:47:0e:34:7f:08:68:
d7:a5:97:c5:73:05:40:88:da:5a:59:17:84:ae:91:
ae:58:b4:72:56:56:d4:6d:c3:5a:92:f5:6f:b2:e5:
75:13:f3:0c:0a:b4:70:25:92:2f:1b:ba:08:c6:f4:
bd:ad:2d:b2:b1:51:e5:21:9a:d6:74:d5:22:c8:62:
96:31:86:2e:38:19:f2:29:c3:da:a3:df:d8:82:d9:
a0:8e:48:4d:fd:f4:2a:8e:d1:8b:07:8c:df:19:9f:
04:23:3e:b6:35:49:f6:cd:ff:8a:f6:65:0c:90:f9:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:28:93:12:30:A7:B8:22:E4:04:85:B7:2B:E9:BF:A8:A3:47:79:07
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/uiiTEjCnuCLkBIW3K-m_qKNHeQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.0.0/15
87.241.128.0/18
178.160.192.0/18
212.73.64.0/19
IPv6:
2a00:f38::/32
Signature Algorithm: sha256WithRSAEncryption
88:d3:c3:d8:a6:36:49:90:f3:fd:e7:48:59:3f:8d:25:b7:cd:
22:53:60:78:61:df:57:9a:71:f4:30:19:25:36:9f:94:37:63:
1d:35:c8:86:54:cf:a3:2b:c2:b4:f3:2d:d3:f9:95:31:c5:41:
d1:6a:f4:83:4e:44:75:c7:6f:b1:d3:0f:72:82:9b:b7:17:54:
57:82:b7:3f:81:c5:b4:c4:51:56:81:a7:f8:8b:be:46:51:e8:
cd:7f:e0:86:1b:b6:2a:b2:c4:b1:f8:ac:6d:a6:a6:ae:42:c2:
e5:65:24:f7:9e:8c:7a:78:23:4a:c8:1a:75:31:3f:4c:4b:b5:
1b:0e:11:95:1d:ae:69:31:53:8d:72:5d:a2:3e:1e:b5:c0:f1:
c7:f7:94:f2:ec:ec:e3:08:e3:c2:88:02:50:5e:36:7d:66:16:
15:0c:26:81:25:f3:58:c6:38:6c:2d:11:ab:49:56:74:b2:52:
ee:6b:61:86:63:69:bf:07:eb:6a:0e:23:1a:fa:30:be:28:26:
cd:5d:71:65:d3:5f:3b:34:3c:0e:3d:fb:3c:fa:6c:e5:cd:02:
be:97:28:04:82:29:7c:6b:41:fe:7c:2e:e9:b6:7b:4b:60:f1:
75:2d:36:d4:e8:8a:d7:ab:55:05:a7:1a:85:5c:20:e0:57:1d:
93:da:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:15 2024 by rpki-client on console-ams.rpki-client.org