Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/uKkouR5CVx4cjWjJERaT9lMsjss.roa
File: uKkouR5CVx4cjWjJERaT9lMsjss.roa (raw, json)
Hash identifier: bvbZGSyNmTUb8hEh7ByDDZBrewccygLVP9BkBs+7wZk=
Subject key identifier: B8:A9:28:B9:1E:42:57:1E:1C:8D:68:C9:11:16:93:F6:53:2C:8E:CB
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 1AA618AB
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/uKkouR5CVx4cjWjJERaT9lMsjss.roa
Signing time: Sat 01 Jan 2022 13:00:42 +0000
ROA not before: Sat 01 Jan 2022 13:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211316
IP address blocks: 147.12.16.0/20 maxlen: 24
185.101.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447092907 (0x1aa618ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Jan 1 13:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8a928b91e42571e1c8d68c9111693f6532c8ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:cf:41:78:62:8f:7f:7d:ff:de:30:ae:98:
a2:66:25:cc:0c:fe:b8:84:27:c7:ef:b5:09:18:e8:
43:46:a0:c3:13:d4:6b:d8:20:3c:d5:e5:e0:d2:0c:
70:6e:04:6f:6b:38:16:16:54:e8:56:07:2b:1f:00:
7c:64:f2:04:fb:75:6b:07:6c:64:dd:5c:c4:54:6a:
b0:28:63:fa:13:61:2d:72:36:43:09:9e:b7:1d:5c:
1d:67:ce:32:44:ae:2c:f8:4b:79:3d:b6:d7:14:86:
ca:cb:62:d2:ef:11:d0:94:f9:c7:2c:9a:ac:29:3f:
fd:d0:e2:4e:01:0e:ee:1d:80:e1:6c:98:69:e6:a6:
05:82:52:64:58:57:a0:75:cb:01:90:b5:c2:22:fb:
25:7c:6d:3b:20:d1:de:c8:1b:32:35:4b:5d:f3:cb:
53:c0:3f:fe:e9:59:75:32:52:bb:2c:58:d8:fb:24:
f1:d9:41:8f:78:05:31:10:46:8e:b1:83:bd:a4:b3:
e3:d4:dd:90:3d:c0:31:03:84:bb:7d:1a:e8:5b:1a:
84:58:5e:b5:a7:99:ff:1e:bd:74:85:4c:1e:ff:22:
a8:44:c5:ba:f2:3d:4a:c8:17:98:5a:44:d9:6e:33:
5c:7a:85:6c:f6:04:e2:0e:6c:86:f9:0b:8e:06:5f:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A9:28:B9:1E:42:57:1E:1C:8D:68:C9:11:16:93:F6:53:2C:8E:CB
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/uKkouR5CVx4cjWjJERaT9lMsjss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.12.16.0/20
185.101.196.0/22
Signature Algorithm: sha256WithRSAEncryption
61:4c:2d:4e:e0:c6:6d:38:f9:b9:1d:93:ea:43:a0:ec:3f:d8:
91:9e:f8:ca:4b:25:1b:15:23:5a:69:31:aa:22:83:af:1d:ae:
74:82:13:d1:54:4d:df:96:e0:ab:90:b3:40:4a:d8:d7:94:f3:
d0:8e:6c:e4:77:98:f3:6d:34:99:ad:ed:70:ae:be:c5:70:1f:
34:16:c0:66:1c:a6:c8:16:44:7c:c6:e9:20:1e:e8:92:f0:3a:
a1:e2:23:00:34:8a:ac:b4:44:60:b5:ac:e0:0a:04:10:a1:75:
b4:66:2e:1b:20:0e:18:73:9b:e7:e2:db:f4:38:89:6f:76:b5:
4a:70:d4:9e:1a:85:83:a3:37:6e:f0:58:49:c7:8d:19:15:a3:
da:c7:d9:5d:97:86:05:e3:ab:4b:90:af:2c:83:0a:0a:98:b9:
a6:53:ff:0b:0e:b3:7a:25:cb:8f:e7:6c:c0:84:0b:bb:06:d2:
73:c0:39:3d:a8:ed:c0:0d:6f:bd:61:0d:0e:f5:73:14:dd:d6:
1f:8f:6b:79:b8:04:04:61:f4:03:a3:47:3d:55:79:32:17:51:
22:af:cb:ea:ab:8d:a3:fa:b5:df:4e:52:f4:d4:08:48:86:f7:
25:4a:95:d3:ed:ca:66:16:64:d0:ed:79:b6:54:70:cc:e7:73:
ff:7a:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:20 2024 by rpki-client on console-ams.rpki-client.org