Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/UnDgBK7WQzc9qqhxhVD6Z7o8s64.roa
File: UnDgBK7WQzc9qqhxhVD6Z7o8s64.roa (raw, json)
Hash identifier: IutvNdRG7fdXZiaDUtc0EjTLWkIlUiRk88Wy6XViNn0=
Subject key identifier: 52:70:E0:04:AE:D6:43:37:3D:AA:A8:71:85:50:FA:67:BA:3C:B3:AE
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 06640FF8
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/UnDgBK7WQzc9qqhxhVD6Z7o8s64.roa
Signing time: Sat 01 Jan 2022 14:58:50 +0000
ROA not before: Sat 01 Jan 2022 14:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50925
IP address blocks: 185.188.236.0/24 maxlen: 24
185.188.239.0/24 maxlen: 24
185.188.238.0/24 maxlen: 24
185.188.237.0/24 maxlen: 24
185.188.238.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107220984 (0x6640ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: Jan 1 14:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5270e004aed643373daaa8718550fa67ba3cb3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:ca:8f:5c:9a:64:3a:fa:cd:77:5c:bb:84:
97:a9:44:a8:c4:d8:89:4b:93:51:76:4a:27:a6:08:
3f:c8:72:6b:22:eb:18:eb:12:01:e2:16:a2:aa:56:
15:96:4d:1c:8e:41:e1:cc:aa:ea:f2:14:9e:fd:2e:
85:e5:8f:07:bf:d3:44:13:96:86:09:c8:b9:3c:75:
32:3c:70:e9:62:fc:8c:b5:58:34:57:c1:f8:32:c6:
ba:30:f5:78:d0:41:83:a9:f7:89:b3:b3:7e:3f:e6:
62:a0:be:c6:39:5f:af:4d:9b:e8:24:55:3c:e2:42:
92:b5:38:58:d9:c3:4a:6a:a6:d4:26:7d:e1:92:ef:
eb:9d:18:b6:24:4e:87:cf:99:ec:3e:80:cd:20:fe:
de:f3:c3:d1:a9:d3:15:cf:91:e4:37:63:14:70:01:
18:d0:43:3d:60:3d:d2:22:38:a3:6a:8f:43:98:df:
48:92:9d:36:98:36:62:39:7c:b7:15:db:db:d4:61:
bb:21:2a:43:d2:34:af:45:c3:ad:fc:45:c9:97:d8:
2a:83:67:f0:f4:62:b2:4f:30:51:8b:cc:48:73:89:
00:ad:e0:24:1c:79:c6:78:82:7e:11:51:f0:f7:07:
eb:1b:fb:f7:4a:3c:6b:38:c9:52:e7:38:18:68:34:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:E0:04:AE:D6:43:37:3D:AA:A8:71:85:50:FA:67:BA:3C:B3:AE
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/UnDgBK7WQzc9qqhxhVD6Z7o8s64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:2b:12:a3:7b:44:ae:1b:09:52:cd:40:a0:be:1f:6d:9c:29:
7e:d9:f2:2e:e1:75:2a:33:86:12:4f:3e:ed:b6:29:df:1a:d7:
b6:66:43:32:5a:b9:45:a8:0c:c4:41:56:05:87:24:b6:bc:8a:
88:cc:2d:2e:62:51:77:3a:5e:94:65:fc:af:29:31:26:27:98:
68:96:e9:8b:d0:fc:71:88:10:19:2f:88:6a:67:a9:bf:85:ee:
72:20:47:e8:10:f7:55:81:d2:a2:7c:cc:fa:45:78:6c:01:3a:
67:c9:c4:80:92:0b:e4:ba:c9:b7:ec:02:b9:86:58:4d:dc:4c:
3a:b7:f5:23:d7:b8:0d:ff:1a:69:2d:59:25:d4:06:53:7f:48:
a3:2b:cb:84:a2:52:01:b8:85:c7:bc:99:df:55:04:78:05:db:
1f:ac:be:4e:3c:c5:4a:de:ec:c4:9b:f1:c2:9d:76:a7:fc:b9:
9b:85:de:82:2d:e2:f0:56:14:e3:78:ee:5a:2f:3d:03:a6:cb:
74:98:76:46:c0:90:f9:ea:fb:0e:ae:42:50:c5:e1:47:5b:04:
4d:fa:47:4f:bc:e5:a3:b4:df:b9:d5:4c:f1:62:6a:cb:77:ae:
cb:19:5b:90:32:30:7f:96:d8:a4:bd:9e:17:b7:17:5a:51:27:
c2:5f:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:25 2024 by rpki-client on console-fra.rpki-client.org