Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/UMlLQEPGMCjW0qPrW0wYEwh_KZ0.roa
File: UMlLQEPGMCjW0qPrW0wYEwh_KZ0.roa (raw, json)
Hash identifier: Mry8cpiX6HjboAp/jekTYu5XVHP3E29I7H+Lw/nL0/k=
Subject key identifier: 50:C9:4B:40:43:C6:30:28:D6:D2:A3:EB:5B:4C:18:13:08:7F:29:9D
Certificate issuer: /CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Certificate serial: 18BB8BBD
Authority key identifier: 95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/UMlLQEPGMCjW0qPrW0wYEwh_KZ0.roa
Signing time: Sat 01 Jan 2022 04:01:57 +0000
ROA not before: Sat 01 Jan 2022 04:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212889
IP address blocks: 185.164.30.0/24 maxlen: 24
185.203.111.0/24 maxlen: 24
185.203.108.0/24 maxlen: 24
185.203.109.0/24 maxlen: 24
185.203.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414944189 (0x18bb8bbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959efe6ef97728a4282ae2c7b05a240506571f1c
Validity
Not Before: Jan 1 04:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50c94b4043c63028d6d2a3eb5b4c1813087f299d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:64:5d:e1:bf:ef:91:f6:c8:46:0b:a7:07:
53:25:1e:32:fa:85:66:9a:d8:b2:fc:46:87:7b:2f:
af:12:29:61:5b:95:10:3e:d4:99:77:d9:86:52:24:
92:4b:1c:d4:a2:89:64:bf:7a:5a:93:06:8c:ce:06:
36:9e:df:04:b2:11:c7:5b:2f:ce:39:f5:5d:20:99:
3b:40:f3:0c:b5:d3:d8:59:7c:1c:45:26:67:87:e3:
59:69:a7:f3:61:fc:a8:d6:5b:af:cd:2c:36:34:1e:
33:56:f6:39:67:c5:7d:e8:97:cd:e2:2a:ea:34:42:
25:20:f9:06:32:a7:8a:bc:7d:53:53:d8:33:b7:6a:
9b:9f:46:52:f7:62:b8:31:cc:e8:78:3d:71:ba:83:
96:7b:d6:ba:72:1a:5c:32:be:e4:fd:1a:e7:b8:b8:
dd:26:be:a8:af:97:ca:45:1c:66:b7:14:0a:a3:e1:
7c:48:6c:4b:b3:39:36:58:24:bc:6c:f7:c8:84:0e:
82:b7:30:d5:4d:a8:a6:61:ba:39:21:e4:33:60:8b:
f3:bf:5c:84:db:eb:4c:86:90:9d:4b:fe:c9:50:b2:
21:e7:bf:c8:f4:2e:90:63:7b:47:1e:9e:d1:a3:48:
dc:e9:6c:77:b5:fd:a6:34:06:62:d9:00:c6:a6:b3:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:4B:40:43:C6:30:28:D6:D2:A3:EB:5B:4C:18:13:08:7F:29:9D
X509v3 Authority Key Identifier:
keyid:95:9E:FE:6E:F9:77:28:A4:28:2A:E2:C7:B0:5A:24:05:06:57:1F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ7-bvl3KKQoKuLHsFokBQZXHxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/UMlLQEPGMCjW0qPrW0wYEwh_KZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8c1e49-7dd1-448d-8815-a09266bb4d8c/1/lZ7-bvl3KKQoKuLHsFokBQZXHxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.30.0/24
185.203.108.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:14:1a:01:81:f3:ab:c2:b1:78:5c:15:df:6e:72:20:78:2c:
87:2f:f2:bb:0a:fb:74:e6:d8:21:80:88:8a:d2:d5:bb:04:12:
17:22:d6:01:ee:51:7d:b8:7c:d4:5b:90:dd:29:ed:cc:39:a8:
fa:b6:20:f4:ab:84:44:47:e9:9e:cd:95:05:93:b4:8b:99:e9:
5f:79:2a:63:44:a4:b8:64:a5:a7:3a:4b:dc:9d:29:96:b6:9d:
c8:ef:95:8d:e0:25:60:1a:99:4c:c7:e8:9b:31:6f:88:a7:22:
ff:ee:4f:85:4a:41:75:c8:9f:a0:1e:9f:ff:bc:db:ea:97:5c:
8e:19:3b:39:c5:a0:a9:50:06:78:43:04:fd:99:d2:44:78:20:
92:ea:4f:d4:54:37:42:7e:03:f9:b9:3b:27:af:8b:83:13:24:
75:ad:01:9b:2e:51:55:29:cd:93:54:dd:86:f6:4a:dd:26:73:
8f:73:b6:c5:7f:e3:96:c5:90:9c:a7:bf:49:17:e8:7d:dc:70:
c0:d3:56:a5:37:fb:45:f7:14:a0:ef:80:09:52:64:8b:05:7f:
cd:6f:ef:85:1d:82:7f:58:5f:11:de:f2:c9:3c:71:07:b0:60:
77:4b:d9:49:63:5f:a2:9e:ac:0d:a9:5d:a3:0b:9b:b9:15:91:
4f:e5:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:26 2024 by rpki-client on console-fra.rpki-client.org