Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/uHvcd53gGCTG_D8cdlMRvdvTmew.roa
File: uHvcd53gGCTG_D8cdlMRvdvTmew.roa (raw, json)
Hash identifier: A/hkDISmwpfmu9QUEr1Vuq0t3lGoCOTZ7y0/Xb6BimY=
Subject key identifier: B8:7B:DC:77:9D:E0:18:24:C6:FC:3F:1C:76:53:11:BD:DB:D3:99:EC
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 04FFB158
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/uHvcd53gGCTG_D8cdlMRvdvTmew.roa
Signing time: Mon 16 May 2022 16:44:29 +0000
ROA not before: Mon 16 May 2022 16:44:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16552
IP address blocks: 46.31.232.0/21 maxlen: 24
185.165.54.0/24 maxlen: 28
185.165.52.0/24 maxlen: 28
185.165.55.0/24 maxlen: 28
185.165.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83865944 (0x4ffb158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: May 16 16:44:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b87bdc779de01824c6fc3f1c765311bddbd399ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:95:01:3b:66:f3:1c:fe:97:65:9e:4c:35:
f7:e0:14:b1:44:a3:f4:25:de:12:60:3b:5d:5a:14:
ba:c5:58:4e:bf:6a:e9:b0:b3:21:69:dd:dc:57:58:
d6:d8:cf:3d:ae:dd:35:a6:51:77:c7:84:02:71:28:
d1:81:50:38:01:ef:40:7e:51:ec:be:fd:9b:54:85:
57:e1:91:ab:d6:9b:d7:a2:ae:b0:b8:bc:8b:bb:90:
d7:c3:47:6e:36:a1:72:8d:6b:ec:79:ab:d1:57:40:
0f:fc:ac:a3:2a:3f:a5:b9:23:f5:1f:56:ee:a5:71:
b1:7d:ba:59:c0:34:f2:81:f9:2c:86:95:33:6c:51:
31:c1:51:40:4f:de:82:f1:c1:f3:ff:1d:96:5e:2f:
45:de:00:8c:ef:5f:aa:e1:0d:9e:85:5f:d0:51:84:
10:4f:7c:3d:50:7c:a2:6f:c6:1b:c6:45:37:26:66:
f6:7c:0a:1c:93:8a:60:47:d0:4f:67:f5:5c:cb:95:
b1:dc:29:f1:28:b1:44:3a:13:2e:24:55:f5:fb:e7:
26:62:7e:1f:05:69:74:1d:db:ba:c5:6a:a9:be:ef:
76:32:ce:25:89:4a:d2:e9:3c:e9:20:f4:e0:80:3a:
6c:0c:73:26:7b:18:b2:11:c6:a7:9f:2b:4c:38:11:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7B:DC:77:9D:E0:18:24:C6:FC:3F:1C:76:53:11:BD:DB:D3:99:EC
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/uHvcd53gGCTG_D8cdlMRvdvTmew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.232.0/21
185.165.52.0/22
Signature Algorithm: sha256WithRSAEncryption
34:60:a1:d9:7b:53:73:6d:50:e0:69:84:b5:fc:e7:eb:97:de:
a1:dd:1a:80:42:60:ab:00:28:aa:0a:ff:c9:c4:d2:1c:dd:06:
71:0e:3e:0c:fc:40:d5:65:57:a2:5e:8a:a8:f8:82:5e:8f:a0:
3b:3b:e8:e2:62:f4:27:b7:4b:82:ac:ee:be:10:cd:7b:13:d8:
ba:aa:e3:ad:01:e7:73:9b:f4:d1:ac:50:74:6f:bf:ed:dd:eb:
ec:0a:6b:60:a6:c8:cd:57:40:d9:85:95:dd:b9:45:25:80:ff:
1a:de:40:90:a2:0e:45:d2:c7:a7:cd:92:fd:58:42:f4:c0:c1:
18:03:39:c5:d0:c4:99:89:dd:79:50:68:af:16:cc:05:dd:ad:
9e:61:57:40:f2:49:b8:90:ab:6e:ec:82:18:ba:f0:87:cb:ab:
90:c9:40:1d:9d:14:58:69:f8:a8:a8:1b:6f:d5:0e:a2:32:8a:
ec:6e:28:f0:b9:a0:d2:44:19:d0:a8:46:28:80:78:14:73:d9:
53:ca:98:8c:c0:04:9c:d6:d4:7e:a1:57:35:c4:6c:ef:70:c1:
c4:a3:4d:75:76:18:c9:d8:7a:15:53:16:ae:f9:d9:e2:12:6b:
53:34:00:80:3f:1a:57:07:1a:a3:6b:a1:ac:4b:73:4f:ff:54:
f6:5f:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:28 2024 by rpki-client on console-ams.rpki-client.org