Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/uilIiXkfVVKFR0K3rHSn3QomxXo.roa
File: uilIiXkfVVKFR0K3rHSn3QomxXo.roa (raw, json)
Hash identifier: LPrya1BsMyye1Y3P9TP4lU8EiA9n8htgY5qSF7Hwx2A=
Subject key identifier: BA:29:48:89:79:1F:55:52:85:47:42:B7:AC:74:A7:DD:0A:26:C5:7A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 0182CA5135F7739D23DB90BA7B345E29D544
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/uilIiXkfVVKFR0K3rHSn3QomxXo.roa
Signing time: Tue 23 Aug 2022 10:48:16 +0000
ROA not before: Tue 23 Aug 2022 10:48:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205020
IP address blocks: 94.142.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:51:35:f7:73:9d:23:db:90:ba:7b:34:5e:29:d5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Aug 23 10:48:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba294889791f5552854742b7ac74a7dd0a26c57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:df:89:c5:32:95:62:b4:0c:d2:00:58:82:
a9:12:24:29:81:d3:82:4d:f6:aa:3c:33:88:4e:63:
8b:9b:62:9f:8c:d5:0e:00:77:4a:5e:ce:25:9f:b8:
bb:4c:1c:e2:cb:a9:1e:3e:77:87:ed:13:40:18:dd:
a1:0d:db:28:4f:ad:c0:37:5a:ca:ad:79:21:ca:75:
f4:3a:ed:57:1c:64:35:72:59:4f:14:e8:c3:65:e9:
13:e8:bf:9d:7a:96:38:89:ff:ae:b1:66:6a:4c:94:
f6:a3:bf:6f:b8:8e:3c:ad:b4:30:b1:bb:c5:b4:b1:
e0:04:b0:13:3b:16:67:2c:8b:0b:84:40:3a:3c:4d:
1a:59:3f:9b:04:af:0b:cd:3b:9f:8d:d0:ec:38:a3:
f6:30:4c:10:ca:53:aa:b0:b9:2e:3a:63:f4:9e:a4:
a4:5d:c9:73:f4:09:df:c4:1e:6a:a2:22:bf:33:ec:
e3:38:a0:76:1a:4a:03:c5:5f:e8:df:64:10:b4:ac:
d7:ec:b4:51:1f:fa:5f:4d:17:f4:60:c0:ab:a5:d6:
ea:59:eb:e4:88:d5:55:b4:3a:9b:d3:fc:6a:81:de:
0f:cc:f1:25:47:37:d6:2f:89:09:ff:dc:9f:31:02:
73:10:9a:65:d2:fc:be:f3:3f:54:94:60:45:53:a8:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:48:89:79:1F:55:52:85:47:42:B7:AC:74:A7:DD:0A:26:C5:7A
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/uilIiXkfVVKFR0K3rHSn3QomxXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.252.0/24
Signature Algorithm: sha256WithRSAEncryption
02:27:62:8d:bf:1a:51:35:dc:9a:91:56:a1:c0:05:ac:2b:d3:
08:a3:83:bf:0e:0e:83:9b:2b:fc:3f:be:13:56:ba:f9:6e:79:
3d:d1:25:82:37:10:74:92:af:a3:05:f6:ee:08:1e:da:53:dc:
06:83:7a:96:06:53:11:3a:63:dc:cc:bb:21:34:80:83:7e:37:
84:f5:80:9d:3c:d5:48:cc:11:a3:da:82:cc:8f:bc:75:5e:3e:
aa:e8:31:78:cc:61:2f:e4:46:dc:52:7a:1a:66:34:3b:19:8b:
21:59:ca:55:35:5d:0c:26:1f:30:01:0f:1e:c8:a8:da:10:e5:
5e:52:f8:b0:2e:3b:72:9a:2c:c2:7b:04:46:80:af:4f:f9:f0:
99:05:ac:55:86:c6:61:67:cc:26:9f:1a:d5:ba:a1:96:59:85:
fa:c1:92:15:14:4a:fd:cd:9d:b1:7b:9b:f7:7b:00:f5:cb:b8:
19:ac:68:df:91:95:95:6d:be:93:c8:b0:26:6a:29:fd:5f:3b:
e0:66:3f:8b:59:04:0d:54:3f:8a:17:46:20:da:b4:fb:ca:6e:
7f:8b:b2:42:48:63:ac:b2:3d:f0:52:23:29:d3:6c:c8:28:ae:
4c:54:60:4f:75:f5:cf:67:df:66:ef:44:ed:99:ef:53:96:5f:
8c:9a:4d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:23 2024 by rpki-client on console-fra.rpki-client.org