Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/uHVwuv4BVtvPwN0GEVCYDF5PMpY.roa
File: uHVwuv4BVtvPwN0GEVCYDF5PMpY.roa (raw, json)
Hash identifier: 3wjUNhTDu7f0z81gM0F9EDPWlBtmR9ntfnfR1buQDC8=
Subject key identifier: B8:75:70:BA:FE:01:56:DB:CF:C0:DD:06:11:50:98:0C:5E:4F:32:96
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 01838804F0A87EB441A772F021676F31FA92
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/uHVwuv4BVtvPwN0GEVCYDF5PMpY.roa
Signing time: Thu 29 Sep 2022 06:52:48 +0000
ROA not before: Thu 29 Sep 2022 06:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39790
IP address blocks: 81.91.80.0/20 maxlen: 20
185.14.224.0/22 maxlen: 22
2001:1568::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:04:f0:a8:7e:b4:41:a7:72:f0:21:67:6f:31:fa:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Sep 29 06:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b87570bafe0156dbcfc0dd061150980c5e4f3296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:8c:5a:b4:aa:63:1d:84:d8:53:fe:fb:bf:
c7:e5:e0:d0:66:71:d4:2d:49:d7:bc:8c:78:3b:0b:
e0:87:08:87:10:35:97:69:28:19:48:7b:39:e0:3f:
5d:c3:e3:66:ae:d1:3e:c9:6b:e1:84:31:56:c5:24:
ff:c4:0c:e3:5f:fb:f6:14:d2:b3:ee:5e:bf:4a:1e:
80:c9:47:12:34:31:d2:43:de:a1:00:c0:57:a3:22:
51:a1:a6:0a:b2:ca:e1:5a:bb:c4:30:c5:97:9e:ad:
82:ab:c2:e7:3b:79:cb:af:31:6c:6e:07:af:84:5c:
91:65:a2:d0:f4:d9:8f:74:8d:d3:4e:8a:6e:c9:6c:
fe:f7:28:ef:6b:0a:78:9b:1b:18:ff:dd:7b:39:82:
54:3b:fb:31:44:29:4e:81:a3:51:05:ef:90:ac:72:
49:72:b5:22:cc:e5:2c:0b:b6:8c:a7:20:5b:e1:1c:
61:7e:96:5f:2a:fa:9c:7b:3b:e7:cf:64:cb:e4:2b:
3a:04:cb:b7:38:5b:3f:91:66:98:34:e4:9c:c8:6d:
5e:c1:14:d8:4f:6f:b0:2f:64:ec:2e:0e:7f:9a:2f:
76:71:26:f5:c4:03:8b:cf:23:2c:fc:80:53:a0:8b:
80:f6:ee:e9:43:05:94:60:0c:e6:bd:aa:d5:8d:04:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:75:70:BA:FE:01:56:DB:CF:C0:DD:06:11:50:98:0C:5E:4F:32:96
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/uHVwuv4BVtvPwN0GEVCYDF5PMpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.80.0/20
185.14.224.0/22
IPv6:
2001:1568::/32
Signature Algorithm: sha256WithRSAEncryption
50:8a:b6:81:bc:85:71:ce:99:ba:18:e9:ee:3e:d1:5e:ae:3b:
12:b6:36:30:49:0a:fb:3c:84:f0:c8:f5:a6:b0:ab:be:2d:63:
85:f2:00:25:39:84:04:1c:6a:01:65:19:b2:dd:b0:a2:b0:23:
4b:1a:d2:5c:cd:23:38:2e:b0:28:67:3f:e7:f1:bd:d0:27:c7:
42:73:80:5f:4f:3d:df:c9:c2:c7:73:b4:a0:fd:37:18:61:51:
70:87:f5:b1:df:7d:bb:cb:94:ec:b8:f3:6c:e6:d1:6e:3b:03:
11:27:e3:ca:7c:ad:b0:4b:29:ff:04:7a:60:96:e0:1a:e4:6d:
24:4b:8c:33:aa:99:ee:51:9e:a2:95:81:fc:70:38:82:af:07:
8d:54:ed:d6:82:72:f4:ce:df:7b:7e:8a:f1:e1:7b:fa:af:c2:
d1:b0:da:27:e9:f7:ec:28:1e:b2:8a:3a:66:7c:45:dd:b3:c3:
83:8f:77:e9:8d:31:f6:e1:b5:30:a2:f7:6a:d7:e6:4c:42:00:
3f:f1:23:7c:bf:ef:ff:b8:d8:57:de:ff:39:ef:82:d0:2c:fb:
f2:67:4c:ad:ef:ad:b3:15:70:80:d4:c2:c4:78:14:5a:3c:4f:
dd:63:08:1f:81:d2:ed:73:c2:8c:9b:ed:00:cd:16:d0:e1:f7:
65:f7:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:21 2024 by rpki-client on console-ams.rpki-client.org