Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/UELHzBfEmupaxPA7uyIdjwWnJRc.roa
File: UELHzBfEmupaxPA7uyIdjwWnJRc.roa (raw, json)
Hash identifier: 0Lh7xVnswicg2KwrfCToAfqEajgu5UfsQlV3hqV9IUI=
Subject key identifier: 50:42:C7:CC:17:C4:9A:EA:5A:C4:F0:3B:BB:22:1D:8F:05:A7:25:17
Certificate issuer: /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial: 0862111E
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/UELHzBfEmupaxPA7uyIdjwWnJRc.roa
Signing time: Sat 01 Jan 2022 01:01:15 +0000
ROA not before: Sat 01 Jan 2022 01:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16297
IP address blocks: 217.118.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140644638 (0x862111e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Validity
Not Before: Jan 1 01:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5042c7cc17c49aea5ac4f03bbb221d8f05a72517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:a4:ba:f5:b9:dc:e6:81:46:c2:fc:19:4d:
2f:64:8e:f3:18:56:50:5d:48:9c:c4:70:c1:79:7f:
6c:4c:bf:ef:07:a8:43:bf:eb:0c:95:68:88:dd:81:
c4:36:45:9b:75:1c:9b:b9:bb:98:91:2d:ee:0d:47:
79:01:c4:06:4e:f9:e7:e1:f8:48:51:37:f5:95:56:
73:5b:91:72:76:94:a9:83:a7:28:4e:18:ba:b7:9e:
f3:52:27:c2:52:b4:6d:4a:99:64:e1:13:db:ec:7a:
ab:e1:37:83:d1:c5:fc:80:69:36:f2:7d:e6:32:5b:
dc:ff:ca:98:8d:50:c4:3a:a3:b2:70:05:fe:ab:12:
e0:7b:40:9e:7b:e0:36:fa:1d:a4:25:15:e0:4d:9a:
48:b2:13:13:65:58:93:34:8b:89:3d:bf:3a:f5:9a:
49:23:c5:72:5e:c8:3d:50:70:37:23:3d:85:e1:c4:
aa:02:cd:78:04:59:b3:95:77:af:02:55:b6:0f:e0:
f2:e5:65:09:bb:a9:6b:e6:1f:5b:7e:1a:0c:5a:41:
53:a4:9b:03:f4:7a:dc:6c:f9:c0:e8:c9:fb:35:8a:
2d:53:f4:c8:3f:52:a8:d0:44:de:59:51:c8:0c:4d:
28:e7:53:5b:28:1e:77:18:a5:75:70:f7:dc:ee:71:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:42:C7:CC:17:C4:9A:EA:5A:C4:F0:3B:BB:22:1D:8F:05:A7:25:17
X509v3 Authority Key Identifier:
keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/UELHzBfEmupaxPA7uyIdjwWnJRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.118.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:2b:2e:7c:ea:09:ad:89:43:39:b8:f7:54:ad:a8:c3:3c:95:
1c:3d:02:90:23:92:94:94:34:11:d5:61:1e:3c:de:56:0d:12:
a4:62:b4:a7:69:08:98:82:89:c8:b6:fd:2e:72:d4:4a:41:08:
fd:56:94:8b:43:c5:63:7b:af:fe:0c:8a:b3:8a:0a:48:98:06:
7a:84:97:41:df:4d:53:aa:b5:6a:d8:28:9f:f4:51:e8:16:18:
78:09:b1:82:4a:79:c5:e6:11:a5:fd:42:3c:10:09:76:5a:16:
aa:7c:0e:a5:07:bb:9a:ff:ba:6a:68:5b:90:68:58:2c:2f:f7:
67:36:e9:fb:ec:a0:63:75:d3:fc:09:73:dc:d1:70:d1:d2:67:
cb:58:64:91:6b:d5:f6:44:92:11:83:c1:3d:ed:4d:88:54:46:
1c:bf:cb:a4:da:8c:af:a6:26:6f:de:73:5a:6c:a4:3e:65:a5:
be:d0:e2:f2:20:9e:28:3d:2a:f7:94:30:30:7e:1a:7f:87:6a:
86:e9:18:a8:d9:e0:c6:90:2c:27:03:7e:d2:69:c3:fe:ba:10:
ad:b8:8d:e5:0f:9b:55:d1:02:12:c4:7f:c3:6f:74:35:e8:12:
a7:fa:44:21:1c:1d:73:66:39:dc:28:f4:5e:45:99:69:85:7b:
13:b7:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:39 2024 by rpki-client on console-ams.rpki-client.org