Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/uNuCRmqBrhqy-1xLU898sTWTo58.roa
File: uNuCRmqBrhqy-1xLU898sTWTo58.roa (raw, json)
Hash identifier: oJk8T2jI9TXV8h9gBrVCxNsbzMYN03ua7HQ59aY1eWY=
Subject key identifier: B8:DB:82:46:6A:81:AE:1A:B2:FB:5C:4B:53:CF:7C:B1:35:93:A3:9F
Certificate issuer: /CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Certificate serial: 01890286D1E0F4F6273464D6764D924CC6C0
Authority key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/uNuCRmqBrhqy-1xLU898sTWTo58.roa
Signing time: Wed 28 Jun 2023 15:02:17 +0000
ROA not before: Wed 28 Jun 2023 15:02:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 185.155.198.0/23 maxlen: 23
185.155.198.0/24 maxlen: 24
185.155.196.0/24 maxlen: 24
37.99.212.0/24 maxlen: 24
37.99.213.0/24 maxlen: 24
37.99.209.0/24 maxlen: 24
37.99.210.0/24 maxlen: 24
37.99.208.0/24 maxlen: 24
37.99.208.0/21 maxlen: 21
37.99.211.0/24 maxlen: 24
37.99.214.0/24 maxlen: 24
37.99.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:86:d1:e0:f4:f6:27:34:64:d6:76:4d:92:4c:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Validity
Not Before: Jun 28 15:02:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8db82466a81ae1ab2fb5c4b53cf7cb13593a39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:c0:a8:48:fc:52:d4:6c:86:cd:34:09:79:
6d:09:46:e3:b4:8a:e7:70:db:0a:a1:0f:bc:f8:49:
71:33:2f:3f:e0:fd:db:9a:56:6e:91:e7:bc:54:ff:
46:c3:3a:5b:57:6c:7c:64:44:d8:e8:18:bb:e5:71:
4a:ae:54:66:70:b5:a0:04:62:f9:e8:3d:32:21:53:
3a:36:5a:81:ce:44:84:d5:a8:da:31:e9:4e:95:04:
42:fa:4a:2b:77:86:83:7a:a5:ac:ee:78:46:62:7a:
e8:8a:54:86:aa:07:30:25:21:f9:8a:1a:b9:d3:a5:
22:ed:9d:67:e6:ef:4c:b5:69:a9:db:ce:7a:45:da:
59:10:1b:21:c6:c9:5b:5e:8e:ec:c0:9e:fb:e5:7e:
7b:24:f2:32:d8:97:0d:bb:be:af:41:34:3d:f9:b5:
7a:79:2d:8f:1b:14:0f:e3:25:0f:88:09:13:10:cc:
d1:9a:93:30:8a:6f:a7:da:9f:19:5e:11:3b:15:4b:
96:3d:c8:fa:1e:f7:77:7f:6c:4c:76:bd:fe:bf:9c:
13:1c:ae:0b:d1:ff:56:d8:b2:5e:ca:1c:56:5f:bf:
30:c7:d5:4b:ed:7d:3f:5f:b0:30:8f:12:95:6a:98:
3c:24:70:77:fa:c0:76:d1:27:fe:27:58:63:02:0f:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:82:46:6A:81:AE:1A:B2:FB:5C:4B:53:CF:7C:B1:35:93:A3:9F
X509v3 Authority Key Identifier:
keyid:89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/uNuCRmqBrhqy-1xLU898sTWTo58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.208.0/21
185.155.196.0/24
185.155.198.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:c2:c4:72:e1:51:77:3f:d2:e2:59:48:e6:6b:e2:fe:1b:94:
be:90:51:8c:35:c8:65:74:4b:24:98:1b:22:2f:39:84:67:b7:
db:2a:a8:f4:0d:88:29:10:14:7d:5d:5a:2a:6a:b8:d8:dc:54:
56:2c:92:b7:d9:3c:02:3c:82:b2:ef:f3:cd:2e:8b:c9:ed:16:
ca:bf:1e:e1:83:e6:37:00:18:40:ef:80:d7:ff:ce:f3:8e:25:
98:52:bd:37:74:c5:43:37:0b:5e:40:f5:4c:63:f5:06:4a:c8:
16:15:6f:ad:48:b2:de:ed:39:4e:d2:3e:08:31:74:cc:72:a4:
0c:a8:15:d7:81:d0:12:be:b4:97:96:21:82:87:c2:28:60:5f:
5a:d4:c1:b0:fe:0c:85:25:a0:ce:bd:ad:ff:88:30:b8:11:82:
6b:90:79:5e:32:8c:e8:0d:aa:ce:9e:9b:6a:07:4a:4a:75:b8:
40:ee:fc:39:59:78:c7:a0:b4:95:06:92:b3:ee:9a:5d:78:91:
d7:2c:71:70:f3:a7:1b:9c:f2:b3:67:8d:58:0f:7b:a3:25:7c:
85:3a:ee:1e:6f:25:50:7a:9b:1e:c8:d9:27:01:3d:e7:3d:12:
5c:0b:7d:a5:a3:04:07:42:70:1a:06:2b:cc:a1:52:2d:3d:87:
45:2a:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:56 2025 by rpki-client