Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uEstHv1BuPuoDtXnLy7MieH8Z5I.roa
File: uEstHv1BuPuoDtXnLy7MieH8Z5I.roa (raw, json)
Hash identifier: kZl+1TGoJ7b25NgGTbt1iGSfyT4BW5Ujx+65FLYRWfI=
Subject key identifier: B8:4B:2D:1E:FD:41:B8:FB:A8:0E:D5:E7:2F:2E:CC:89:E1:FC:67:92
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0183D6EB1E355090D5A8C79630F2ABFC9D41
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uEstHv1BuPuoDtXnLy7MieH8Z5I.roa
Signing time: Fri 14 Oct 2022 14:34:36 +0000
ROA not before: Fri 14 Oct 2022 14:34:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 188.209.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:eb:1e:35:50:90:d5:a8:c7:96:30:f2:ab:fc:9d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 14 14:34:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b84b2d1efd41b8fba80ed5e72f2ecc89e1fc6792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:9b:20:14:d9:02:dc:af:03:aa:0b:89:8d:
f4:ae:9e:01:d5:bd:ea:25:bd:55:5d:d8:a4:12:96:
a8:87:ab:de:ac:39:5f:65:ef:06:da:f8:a1:79:e8:
e1:25:fd:6a:9b:7b:ed:aa:fd:b8:50:41:b4:2b:81:
80:2b:f3:ac:9e:99:98:0e:b7:00:a8:88:fe:15:db:
ec:13:93:96:f5:a2:88:58:f9:38:a6:c4:80:fc:d2:
0c:c2:d3:7a:53:bc:37:4b:4c:85:6d:8b:10:5d:87:
29:17:0b:b5:96:92:47:c9:6c:14:03:15:1b:6f:ee:
13:b0:5e:3d:1a:7b:f2:96:51:88:df:db:16:6f:58:
2e:4c:bf:b6:0e:cd:8d:a5:a8:f0:2b:76:e3:3a:1d:
8e:a6:de:75:22:bb:dc:93:93:02:28:c3:b7:0d:49:
78:b9:cf:3d:17:f5:a3:4d:20:d7:8c:86:37:88:07:
f1:57:66:55:ff:72:62:40:4c:06:d8:79:1e:2f:98:
71:02:cc:4e:cb:27:eb:66:d5:45:58:c4:56:1f:a8:
25:ee:49:45:72:30:64:fd:bf:a5:b1:14:73:80:2c:
6e:f9:a2:1e:a7:a7:79:26:97:7e:fb:af:0a:86:f8:
87:8b:57:e1:2e:9c:8e:62:86:74:a3:0d:01:a7:d2:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4B:2D:1E:FD:41:B8:FB:A8:0E:D5:E7:2F:2E:CC:89:E1:FC:67:92
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/uEstHv1BuPuoDtXnLy7MieH8Z5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.136.0/22
Signature Algorithm: sha256WithRSAEncryption
84:a5:7d:9d:71:44:bb:9a:2d:bc:61:bd:c8:47:55:a9:1e:62:
4e:24:9b:77:3e:01:f8:97:62:4f:ec:4a:3f:8c:27:c9:89:99:
9c:de:a7:38:54:bd:a1:a6:93:0c:dc:57:7f:f4:87:50:c1:cd:
5f:83:04:eb:78:d8:e9:3f:a7:5a:78:5f:ed:53:b4:ed:89:3d:
2c:d7:b5:f2:74:32:55:5a:3d:4e:a7:87:21:e0:d7:40:a8:07:
65:ac:80:a8:f0:97:39:70:68:7a:f2:aa:59:98:05:7d:3e:41:
f6:55:4b:10:02:da:f8:8e:fe:7d:af:39:31:7f:5b:95:1f:53:
bc:57:8f:46:19:ae:7b:24:02:cd:27:e7:e4:d1:a8:ce:5b:ce:
cc:1e:28:4e:4a:71:17:6d:29:d1:9e:d8:1b:49:aa:72:55:c0:
6b:a3:3f:2e:27:d0:87:cc:59:64:aa:76:78:55:1c:07:d9:69:
af:e6:80:5a:37:06:e3:aa:a4:8f:bb:6e:1a:72:c2:31:d9:d6:
7c:1d:be:06:2e:70:bc:44:6e:07:36:2b:d1:36:b8:cc:92:bd:
3a:78:a0:db:65:32:65:e6:e9:78:e4:05:f1:09:71:c0:cb:7f:
24:2a:78:8a:8e:c3:63:92:57:a0:d5:57:5e:ac:5c:40:14:92:
78:da:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org