Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Uxyd6SItUr-qHqDvyy-eRF5-d1U.roa
File: Uxyd6SItUr-qHqDvyy-eRF5-d1U.roa (raw, json)
Hash identifier: IVSIX8QzJiUsdacQimF0J8YcatT3X5gZIAhdl/9i/nY=
Subject key identifier: 53:1C:9D:E9:22:2D:52:BF:AA:1E:A0:EF:CB:2F:9E:44:5E:7E:77:55
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 03E81856
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Uxyd6SItUr-qHqDvyy-eRF5-d1U.roa
Signing time: Thu 30 Jun 2022 12:02:02 +0000
ROA not before: Thu 30 Jun 2022 12:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204300
IP address blocks: 94.131.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65542230 (0x3e81856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jun 30 12:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=531c9de9222d52bfaa1ea0efcb2f9e445e7e7755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:98:d8:86:77:c3:e4:a0:5e:bc:82:3f:95:3d:
c0:c6:f7:4a:d2:39:ee:db:f2:43:bd:fe:6d:15:b5:
bc:10:31:fb:20:61:31:34:fe:4b:66:e3:34:5c:99:
62:68:c4:ec:b4:e8:23:72:81:ae:52:91:80:1d:77:
a5:08:a3:62:14:b0:5d:30:16:3b:94:91:1c:11:3e:
de:01:f8:c4:29:0a:ec:79:48:4e:da:2b:90:11:13:
dd:f3:aa:b8:2f:fd:ca:08:a6:4c:72:f8:20:5f:f9:
af:17:a5:23:3b:09:4d:91:3b:d7:9f:19:c2:85:54:
40:9e:f2:60:e1:8d:0d:cf:04:ec:65:79:85:fb:d4:
f3:b3:7d:dc:32:11:5a:0b:e5:e2:4c:79:fd:7b:fa:
43:49:74:47:d4:68:4f:1d:b7:bc:c1:af:e1:0e:f2:
71:66:45:2e:ba:a6:fb:24:3d:c8:a7:95:53:10:1a:
d4:bf:24:be:1d:d6:24:c9:39:1b:67:d6:8e:85:10:
5d:0c:4d:22:57:50:f1:94:da:44:71:5d:f3:61:b7:
22:10:f8:ef:dc:77:c9:a7:d0:b2:f3:8e:9c:98:3d:
38:ab:17:ef:c6:5b:99:41:4c:4c:e8:d6:6f:4c:d6:
9f:12:ed:0a:2c:29:6a:fe:ca:0c:ca:94:53:c5:28:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1C:9D:E9:22:2D:52:BF:AA:1E:A0:EF:CB:2F:9E:44:5E:7E:77:55
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Uxyd6SItUr-qHqDvyy-eRF5-d1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.28.0/22
Signature Algorithm: sha256WithRSAEncryption
73:3b:73:85:93:a1:8e:fd:a8:0d:6f:c6:fe:fe:e8:5e:41:72:
f4:c2:96:33:72:8f:52:84:b9:ec:8e:bc:c5:40:e0:54:d4:0d:
be:1f:7b:df:c6:35:69:22:11:6d:ad:c9:8a:14:8f:9a:88:8c:
8a:7e:24:39:1b:a5:c0:26:b8:75:b7:e1:b6:ec:74:a8:78:c2:
00:d1:20:53:ca:54:f3:70:90:4e:bb:2d:cf:a0:a2:41:71:0f:
77:ad:a1:39:dc:a6:19:82:58:b2:b1:1a:cf:2a:75:dd:98:ff:
d8:f2:12:3d:96:dd:9c:34:01:37:2c:b6:ee:5f:ff:5d:bf:4b:
7a:4e:83:63:37:eb:da:32:6b:b8:d6:9e:65:59:f7:44:a6:81:
95:07:c2:7d:5d:7b:85:a3:43:36:d8:ba:e6:b9:e5:e6:26:58:
a9:cd:34:50:23:39:55:11:db:86:6f:6a:ef:c8:18:37:95:6d:
d9:7f:27:21:cc:a9:4b:2c:1e:e5:ae:dd:49:2f:bd:09:85:fb:
f6:e6:65:73:2c:c7:b4:e1:c7:1d:ce:e9:ca:5e:c6:83:2f:2f:
67:20:5e:78:d1:e3:dc:c3:3e:61:87:8e:13:97:ac:e9:06:b3:
1e:a8:24:2e:ff:f3:a0:62:a0:c8:ba:3d:c2:78:07:14:38:4c:
6a:78:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org