Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/qUciXBKh0-QUStoPAk8KqWe1_uk.roa
File: qUciXBKh0-QUStoPAk8KqWe1_uk.roa (raw, json)
Hash identifier: FHdmzEx+BDRf1RHBR/vWmEZu/8Eoebs0IupAQ9rzhSM=
Subject key identifier: A9:47:22:5C:12:A1:D3:E4:14:4A:DA:0F:02:4F:0A:A9:67:B5:FE:E9
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 03439868
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/qUciXBKh0-QUStoPAk8KqWe1_uk.roa
Signing time: Sat 01 Jan 2022 10:01:40 +0000
ROA not before: Sat 01 Jan 2022 10:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207725
IP address blocks: 45.137.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54761576 (0x3439868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Jan 1 10:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a947225c12a1d3e4144ada0f024f0aa967b5fee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:c6:82:12:1a:dd:94:3c:00:2b:19:05:69:
5a:1a:65:da:75:5e:6f:fd:61:a5:0b:8b:39:37:f3:
40:c9:2c:af:11:2d:b9:63:c6:c0:b6:0b:cf:09:d0:
41:32:de:81:0e:d7:87:24:e3:38:c0:d7:da:2e:7a:
99:5f:c9:64:31:49:2b:37:f3:21:97:d2:7a:f5:e2:
51:cb:c8:85:a8:af:0f:38:df:69:e2:88:e8:8f:77:
a4:a9:00:af:9d:c0:dc:51:ed:dd:db:ae:2a:35:7e:
a8:86:18:66:c9:d3:15:a5:db:d0:54:37:b7:fe:52:
49:6f:7a:6d:ea:20:8f:e5:42:1d:a2:f0:d2:01:84:
59:89:d7:e2:50:4d:86:aa:da:d4:45:a5:fe:ea:ef:
36:d9:0d:e6:8c:13:54:e2:a3:f4:e1:2c:ff:28:a5:
a4:77:57:14:9b:2f:f4:50:9b:a8:c3:3b:89:59:06:
20:9b:a2:1c:81:a0:3b:15:41:e4:0d:f4:f5:29:cf:
27:0f:73:82:ff:99:16:7a:aa:2b:04:fb:8e:d9:ab:
8f:85:b3:1b:0f:b6:bd:e0:75:00:84:4c:38:ed:df:
96:c6:c2:0f:f7:e1:69:c4:2c:cb:ee:1f:cc:a3:36:
20:34:9d:91:00:8a:d0:54:32:9d:b2:c8:ba:19:a4:
40:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:47:22:5C:12:A1:D3:E4:14:4A:DA:0F:02:4F:0A:A9:67:B5:FE:E9
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/qUciXBKh0-QUStoPAk8KqWe1_uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.232.0/22
Signature Algorithm: sha256WithRSAEncryption
70:b7:75:df:b7:69:e2:17:a5:c5:f9:fd:ab:93:d4:26:a0:db:
5a:ef:2e:64:39:64:8b:5a:f7:24:20:2b:88:b0:71:f0:8e:c5:
38:a6:d0:c5:69:c9:12:a3:dc:03:c3:a0:98:fd:32:e5:78:98:
5d:16:90:33:49:7a:f6:60:8f:88:4d:30:a9:05:a6:c1:97:b5:
b0:f7:ed:02:0c:20:24:00:3d:f3:90:be:96:1a:e5:d2:6a:5c:
99:89:bf:42:e3:1e:94:94:e3:3c:8b:15:3c:76:f0:b5:98:8c:
da:6c:54:20:ff:a2:63:d9:7e:af:e2:22:3c:54:fb:51:a4:15:
e8:b9:88:fb:cb:cd:5f:a0:c1:9b:dd:bd:c9:7e:64:f1:65:f8:
55:95:f3:3c:9f:d2:f5:c4:41:32:4c:b8:65:25:b3:b5:57:25:
b5:bc:c1:51:8d:fa:92:2a:67:92:db:0f:4d:d1:fe:94:f3:45:
e1:c5:a5:6b:a2:42:66:bb:dc:ef:c4:05:00:cb:8d:92:44:a4:
d9:3f:ae:cf:10:37:64:8b:7a:9a:7a:a4:3b:bf:ad:66:a9:6e:
83:6c:29:38:6a:37:af:3c:6f:af:60:59:9b:ed:73:a8:33:27:
9a:fe:e0:11:b1:f3:b3:7c:19:6c:11:c7:b6:0f:38:90:07:3a:
de:7e:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:48 2023 by rpki-client on console-ams.rpki-client.org