Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/uNGikVDF7bDQDcrzqTe2kzjB2aE.roa
File: uNGikVDF7bDQDcrzqTe2kzjB2aE.roa (raw, json)
Hash identifier: FOhDzVwkPVCBN1birfYWHXOg2Qx4A6ZQ/C8wvQ1v1Jg=
Subject key identifier: B8:D1:A2:91:50:C5:ED:B0:D0:0D:CA:F3:A9:37:B6:93:38:C1:D9:A1
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 131D52B6
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/uNGikVDF7bDQDcrzqTe2kzjB2aE.roa
Signing time: Sat 01 Jan 2022 06:55:29 +0000
ROA not before: Sat 01 Jan 2022 06:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198440
IP address blocks: 185.102.148.0/22 maxlen: 22
37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
188.74.64.0/19 maxlen: 19
217.168.248.0/21 maxlen: 21
2a05:87c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320688822 (0x131d52b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Jan 1 06:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8d1a29150c5edb0d00dcaf3a937b69338c1d9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:1f:10:f3:ee:51:64:28:88:59:70:cd:10:
f5:fd:c8:b0:08:aa:3d:b7:1a:0a:09:bf:44:72:79:
b6:2a:8e:b8:3f:66:f3:ea:d8:9a:d9:2c:6b:92:26:
cd:68:a4:55:fa:f5:ea:6c:6f:5f:cf:98:30:a1:fe:
de:e7:e0:12:c1:8e:41:6f:4d:48:9e:fa:7d:58:46:
13:42:77:34:4f:98:e6:5e:f7:2b:5d:1a:30:e2:96:
a9:ef:73:32:6b:c4:d2:c9:0f:8a:6c:a1:bf:a0:2b:
d2:76:c0:66:b7:da:a1:15:bd:94:c8:9f:5e:44:a2:
db:3e:f4:bf:9b:5f:19:b3:26:1f:77:a7:4b:aa:4e:
88:cc:43:c6:86:80:42:1c:3d:77:f8:85:e6:b4:5a:
80:0a:35:8c:26:ad:4b:0d:79:d8:22:e0:68:47:b2:
ca:fc:64:6f:a2:01:1a:b3:c1:9b:5e:aa:56:0c:d5:
8f:7c:f2:f9:d4:5d:07:7a:47:c2:b0:34:ee:bd:04:
67:19:ab:98:32:44:54:12:d7:22:31:91:e4:58:46:
2f:77:0e:db:1c:e9:3f:8a:32:33:09:03:91:03:a4:
5d:7d:f7:93:63:f5:e1:3b:9d:d9:b3:8d:00:da:9d:
9f:7a:b3:68:b2:9b:80:7b:63:5a:db:1b:23:1d:28:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D1:A2:91:50:C5:ED:B0:D0:0D:CA:F3:A9:37:B6:93:38:C1:D9:A1
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/uNGikVDF7bDQDcrzqTe2kzjB2aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.224.0/24
37.48.229.0-37.48.230.255
185.102.148.0/22
188.74.64.0/19
217.168.248.0/21
IPv6:
2a05:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:dd:50:20:03:d1:6b:9f:51:b7:17:68:09:c2:10:ef:f8:e0:
b8:ea:98:14:81:14:fe:6b:75:4c:8d:5c:73:6a:3d:d7:91:22:
f3:17:ed:80:d1:b2:b9:3c:6f:be:22:02:e3:76:10:ac:2a:47:
d4:5e:04:ce:75:f0:b0:32:f0:88:54:a8:9d:b0:c4:09:dc:d9:
c9:43:cb:4f:15:db:b4:31:96:2f:83:72:4a:7a:78:b4:c3:b5:
c9:3e:c2:c2:2a:c0:9d:85:8e:0c:73:2b:70:76:07:f1:83:45:
33:35:0d:9b:f6:c7:29:de:b6:23:3e:db:a4:b3:08:96:2b:a4:
34:9f:93:fa:e4:3c:da:6d:04:50:98:62:3f:5a:e9:5a:91:86:
19:32:2a:98:f9:3a:11:6e:9f:93:6e:81:cd:f7:03:c2:fd:4d:
31:21:31:c1:32:23:30:31:61:8b:8e:01:3b:24:98:ec:15:0b:
ce:54:35:d0:70:f5:36:fb:4a:39:24:ff:46:29:39:2b:a0:ec:
d3:03:f2:1d:9b:52:56:a1:f2:32:3b:ac:05:a1:69:7a:91:66:
4c:33:22:3a:d1:a8:4a:f0:01:eb:16:c5:93:a4:6a:41:68:bd:
e7:9c:5f:57:f5:8f:9c:b6:11:8d:6e:07:74:df:c7:fe:ec:be:
3d:86:1c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:24 2024 by rpki-client on console-ams.rpki-client.org