Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/uUeCVJ8ekrsqRv1VBeskKoNNtUw.roa
File: uUeCVJ8ekrsqRv1VBeskKoNNtUw.roa (raw, json)
Hash identifier: zqAXiC/Xq+WM5rcObEG0dOw3XEENOBYudXzkF/QTv68=
Subject key identifier: B9:47:82:54:9F:1E:92:BB:2A:46:FD:55:05:EB:24:2A:83:4D:B5:4C
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 081AD071
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/uUeCVJ8ekrsqRv1VBeskKoNNtUw.roa
Signing time: Thu 14 Apr 2022 12:29:35 +0000
ROA not before: Thu 14 Apr 2022 12:29:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.154.192.0/24 maxlen: 24
185.154.194.0/24 maxlen: 24
185.154.195.0/24 maxlen: 24
185.154.193.0/24 maxlen: 24
85.234.110.0/24 maxlen: 24
85.234.109.0/24 maxlen: 24
85.234.107.0/24 maxlen: 24
85.234.108.0/24 maxlen: 24
85.234.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135975025 (0x81ad071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Apr 14 12:29:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b94782549f1e92bb2a46fd5505eb242a834db54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:2f:d0:0a:49:ec:73:65:03:9f:36:cc:7d:
4b:f2:fe:f1:2a:69:cf:14:32:37:e5:0a:9f:55:13:
6e:b2:55:5e:dd:e0:4f:48:3c:7e:54:b7:16:00:84:
bd:fc:2f:95:f0:cb:d3:b6:59:f5:49:e1:ec:30:1a:
95:b8:7c:48:1b:9e:0e:8d:51:3b:77:77:2c:4c:71:
3f:ac:d3:cd:96:03:b0:6d:4d:ca:ad:74:50:06:9c:
41:01:b9:ed:f9:c8:65:e6:d3:af:f0:fb:58:a6:9a:
ab:ba:b8:9e:a8:25:ae:27:a3:57:f4:c1:9c:6f:c1:
e2:d1:22:ab:2e:73:86:5b:82:51:f2:01:10:f4:71:
c6:d9:87:10:13:9b:ed:d8:1c:92:82:91:e7:69:f6:
49:ad:63:3d:59:5f:88:c0:b2:bf:82:ab:27:cd:42:
23:b8:6c:e2:97:6b:16:66:1a:fd:68:80:95:90:9d:
57:94:d5:88:28:b4:59:3a:c0:7f:d1:54:d2:30:2e:
9b:e2:9d:df:2a:5a:1e:15:3e:cc:ec:89:ac:d1:3d:
ae:0e:82:a5:bf:9c:06:47:86:b1:1d:49:b7:eb:32:
32:82:ff:27:68:4e:96:11:e7:cd:bd:ef:1c:2e:40:
9f:fa:ec:04:3d:bf:f8:90:4f:59:29:f7:c1:a8:a5:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:47:82:54:9F:1E:92:BB:2A:46:FD:55:05:EB:24:2A:83:4D:B5:4C
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/uUeCVJ8ekrsqRv1VBeskKoNNtUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.106.0-85.234.110.255
185.154.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:03:d3:15:33:da:d3:bb:93:33:1b:c4:ee:64:ca:c3:12:12:
64:d7:6a:4c:1b:db:b6:d0:bd:ad:8a:52:9f:e1:6d:2d:70:7f:
e7:b7:2a:a5:79:f4:34:6e:9a:c6:93:e1:be:a8:05:5d:9d:b2:
b5:e5:e1:fd:53:ca:d1:1f:bf:cf:3e:fe:d0:0e:dc:47:08:c4:
b6:83:86:63:f4:30:e6:d5:91:2f:41:d7:99:5a:7b:2c:42:21:
13:75:bf:20:17:8d:78:dd:92:0b:c8:f6:1f:c3:54:fc:1d:20:
94:81:de:ce:e3:a8:d9:36:c0:68:60:21:e7:52:92:cc:33:50:
4c:aa:c5:75:9d:c7:59:70:71:8f:86:d9:e4:0b:c0:20:b5:95:
f7:b6:cf:16:79:96:6d:e2:56:6a:93:d2:66:c5:ba:37:09:01:
2e:92:33:01:ca:05:a4:20:e8:59:54:8d:a0:a0:f4:3e:d9:a1:
f1:b7:c6:ca:b3:0f:1c:7f:f3:dc:7c:ac:60:6b:8c:07:ed:a5:
d6:2e:27:e2:0f:13:fb:a7:0a:2a:07:a5:68:49:e2:a5:ba:92:
86:e9:19:c4:34:a7:2e:6b:e0:71:17:d6:34:ac:5b:24:a8:f8:
ed:06:26:62:be:5e:72:03:d7:ab:e9:26:a2:20:c8:a2:6d:a3:
1e:97:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org