Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/uh5kS_f-2R4ehhZGI1uXLNrAWFw.roa
File: uh5kS_f-2R4ehhZGI1uXLNrAWFw.roa (raw, json)
Hash identifier: gXYuCNe2QHz59h8nJa9NaSHWAVKk7u2lJcpXIaa3ub8=
Subject key identifier: BA:1E:64:4B:F7:FE:D9:1E:1E:86:16:46:23:5B:97:2C:DA:C0:58:5C
Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial: 0985065E
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/uh5kS_f-2R4ehhZGI1uXLNrAWFw.roa
Signing time: Sat 01 Jan 2022 11:58:31 +0000
ROA not before: Sat 01 Jan 2022 11:58:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204577
IP address blocks: 185.54.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159712862 (0x985065e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Validity
Not Before: Jan 1 11:58:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba1e644bf7fed91e1e861646235b972cdac0585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:cf:ea:55:c3:86:77:2c:5e:c2:50:1f:f2:
a3:03:ad:07:b9:13:ad:93:5f:31:2b:58:5d:75:50:
46:c7:2d:98:c5:c2:72:ea:04:27:51:91:e0:ef:99:
3c:65:89:2e:46:10:30:6a:9c:4b:f4:59:1a:0a:13:
cd:70:3e:ef:36:25:ca:16:02:cf:44:aa:99:ff:f6:
39:3c:62:59:fb:7d:e9:0d:62:57:ef:f6:bb:9f:ed:
7d:cb:17:40:5f:9c:3f:4b:9f:fc:b6:4a:ff:92:68:
c0:e2:e1:ac:90:db:8e:74:12:f5:30:13:51:c6:33:
1d:37:2f:e9:3f:c5:ff:7c:a6:1e:3c:ff:ef:ac:f2:
a3:09:df:59:4e:9d:4d:f5:1f:7b:13:ac:b8:d0:97:
2d:87:89:28:11:26:a2:23:fc:72:75:89:9c:90:6c:
bb:50:54:54:be:65:bf:69:6e:17:69:a5:1b:17:de:
b7:6f:df:0b:8b:50:ac:8a:6a:73:fb:b1:d3:86:2c:
b1:bb:40:51:ee:2a:5d:92:04:bf:2d:ab:e0:e2:5c:
e1:47:9f:9d:6a:a8:ae:b1:82:1e:5f:11:3c:86:d4:
79:e2:07:dd:f5:b3:21:1d:d2:fe:a0:7b:b6:a0:81:
44:92:d5:db:7e:1a:f8:8e:b2:b7:b8:c1:96:2e:ed:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1E:64:4B:F7:FE:D9:1E:1E:86:16:46:23:5B:97:2C:DA:C0:58:5C
X509v3 Authority Key Identifier:
keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/uh5kS_f-2R4ehhZGI1uXLNrAWFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.210.0/24
Signature Algorithm: sha256WithRSAEncryption
20:cc:df:a1:7d:ce:67:a9:92:32:90:8e:9b:9c:cb:1f:d8:60:
cc:f1:28:58:9a:f5:58:d7:ce:a5:65:52:97:01:3b:17:cd:07:
dc:d5:f1:fa:1d:36:ba:d3:e6:d7:8e:7c:10:09:89:2a:b9:c0:
01:6e:19:7f:0a:f2:a8:09:92:bd:fb:8e:4e:c7:28:27:29:d1:
7c:f2:ea:cd:18:b4:40:48:35:a4:95:fa:bb:24:03:31:0c:91:
62:79:7e:5e:c2:b5:ad:1f:24:0f:9d:0f:23:81:85:16:38:34:
b7:a6:db:5a:2d:67:f6:85:2c:d6:da:6d:4b:56:0b:1b:ee:32:
14:89:5e:95:f6:57:d7:01:64:8e:be:bd:0d:bf:59:f3:f1:ff:
b7:61:46:9c:a6:e0:0a:40:55:40:ab:a1:6e:d9:f8:25:94:ad:
ed:e7:f5:78:8c:9e:30:f9:39:b2:88:b4:d6:8f:4e:ca:b7:2b:
4b:47:45:12:b3:33:40:51:a4:46:5a:74:d2:ee:c6:97:1e:ad:
2e:7f:7e:7a:89:e6:1a:fd:23:ac:00:c0:01:ba:41:c6:f2:6f:
10:fa:cc:07:2d:60:a5:be:a0:f4:88:d0:75:58:66:54:7a:c6:
e9:97:82:4a:49:fe:be:59:a0:54:ec:52:fe:10:6a:a4:fa:f9:
72:69:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:36 2024 by rpki-client on console-ams.rpki-client.org