Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/U4Lr-I9JWucbc7wM19_oNUPwEh0.roa
File: U4Lr-I9JWucbc7wM19_oNUPwEh0.roa (raw, json)
Hash identifier: E5VbOYa36oxEm2CsGPmIqWZ5ZY9Pqu8tmyyIHT6IMZg=
Subject key identifier: 53:82:EB:F8:8F:49:5A:E7:1B:73:BC:0C:D7:DF:E8:35:43:F0:12:1D
Certificate issuer: /CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Certificate serial: 02A94F77
Authority key identifier: 7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/U4Lr-I9JWucbc7wM19_oNUPwEh0.roa
Signing time: Sat 01 Jan 2022 10:55:21 +0000
ROA not before: Sat 01 Jan 2022 10:55:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206173
IP address blocks: 185.145.246.0/24 maxlen: 24
2a10:1e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44650359 (0x2a94f77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Validity
Not Before: Jan 1 10:55:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5382ebf88f495ae71b73bc0cd7dfe83543f0121d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:55:4a:b3:b4:86:1a:ac:b7:1f:9c:f1:40:
d4:1b:43:1e:3b:ce:5b:1d:25:82:33:2a:77:91:da:
39:6d:dc:7c:11:4b:59:11:b7:97:96:17:4d:50:a8:
fd:6a:bf:4e:30:53:03:81:da:7b:52:6a:82:03:1e:
53:ae:42:91:d1:b3:48:6d:58:cc:0c:91:31:c0:8c:
f1:fb:a2:53:7d:48:1e:ed:cc:55:2a:dc:a6:ad:e1:
69:f7:00:e0:8e:28:13:d7:46:b7:70:0d:0b:74:48:
1e:f3:e9:7f:ef:00:95:16:18:03:81:9f:28:1c:83:
52:84:58:00:57:bd:7d:67:49:a7:d1:2f:67:71:45:
c9:a9:bd:8a:ad:1c:94:cd:33:43:01:44:4c:dd:ce:
df:3a:3f:51:f7:a6:73:46:ed:15:ea:37:8e:2a:92:
cd:ea:d9:af:3f:dc:4c:3d:88:10:ed:7d:f5:d3:8d:
a0:a3:1c:7f:63:e7:97:18:5e:a4:bc:75:7b:0f:a3:
2b:61:5f:1b:70:12:a9:46:89:83:cf:6d:48:0a:9f:
04:41:89:7f:e6:2c:b9:99:bc:3f:e6:62:b4:be:81:
a6:88:ec:0a:da:a1:1c:29:8a:af:fc:39:e7:60:d5:
cb:dc:7e:32:a4:9d:e5:59:77:9f:f3:d8:d5:7b:2d:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:82:EB:F8:8F:49:5A:E7:1B:73:BC:0C:D7:DF:E8:35:43:F0:12:1D
X509v3 Authority Key Identifier:
keyid:7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/U4Lr-I9JWucbc7wM19_oNUPwEh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.246.0/24
IPv6:
2a10:1e40::/29
Signature Algorithm: sha256WithRSAEncryption
90:8e:f0:8f:ba:48:d3:89:93:bd:5b:76:03:e4:47:37:92:8f:
35:77:3c:4b:a9:76:cf:84:75:39:61:08:d6:3f:28:0f:d7:9b:
b4:32:8e:8a:ec:bb:44:4b:3c:6f:cf:07:e7:3e:cc:4e:2e:a3:
4c:9c:8c:92:69:31:34:2d:9e:eb:a8:af:c3:71:77:76:54:33:
76:06:61:a9:b4:45:b1:56:63:69:24:91:38:10:ae:a4:f2:88:
85:88:b4:29:18:3f:31:38:e0:dc:6f:85:85:c6:91:f1:88:4c:
b3:87:d5:69:53:77:6a:76:09:75:1d:7e:98:11:19:c6:64:90:
ee:c6:88:67:ae:07:1f:2f:4c:86:fc:eb:ba:20:97:2f:83:56:
93:6a:d0:ef:3d:4a:80:15:a3:66:71:10:0d:32:1f:ce:fa:9c:
83:c9:af:ab:37:9c:e3:17:c3:0e:73:0f:9f:56:1d:38:75:91:
97:17:53:93:aa:6b:bb:bf:f4:01:fc:87:0d:2e:d2:7a:d4:57:
b3:cb:fe:6b:d6:2a:6e:7f:55:40:e8:18:29:44:8e:21:f7:01:
d5:00:d1:eb:7d:06:f0:14:be:8d:b5:7e:ae:0e:26:76:1c:2a:
fc:af:f6:12:90:82:ac:db:05:da:0e:dc:97:87:70:3a:3d:69:
87:82:52:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:31 2024 by rpki-client on console-fra.rpki-client.org