Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/uhRuwHEI-rzh7qaNA6cM4n0Hxjg.roa
File: uhRuwHEI-rzh7qaNA6cM4n0Hxjg.roa (raw, json)
Hash identifier: L07dCUy5aqZjNHKSMc30MeYuvoXZ3mzYIPspFiLU4Og=
Subject key identifier: BA:14:6E:C0:71:08:FA:BC:E1:EE:A6:8D:03:A7:0C:E2:7D:07:C6:38
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 03C66B1A
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/uhRuwHEI-rzh7qaNA6cM4n0Hxjg.roa
Signing time: Sat 01 Jan 2022 09:02:42 +0000
ROA not before: Sat 01 Jan 2022 09:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199552
IP address blocks: 146.66.218.0/24 maxlen: 24
188.119.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63335194 (0x3c66b1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 09:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba146ec07108fabce1eea68d03a70ce27d07c638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:ef:04:70:6e:c0:fb:ea:00:e4:f7:30:00:
fe:91:f1:0f:ae:b0:10:4c:6c:96:97:e7:76:39:ba:
76:f0:a1:ba:90:a0:96:68:4a:9a:b7:8f:58:1d:35:
a8:3d:41:f2:91:46:ef:cd:54:08:1a:c3:ea:5a:b8:
83:8f:a2:a0:bb:e4:91:dc:03:2f:c1:99:14:ab:c8:
fb:18:f6:75:98:56:76:33:23:fc:dd:e5:15:c0:5c:
51:8b:90:cd:c1:98:0d:99:dd:26:fc:0b:dc:89:03:
89:f2:56:65:fa:c7:b7:e0:eb:f6:4e:18:e8:d1:75:
a4:6e:a2:df:33:a8:bd:fb:3f:7f:c1:e0:1f:94:db:
e4:75:87:9b:cd:49:b1:88:2d:1e:9e:22:70:ee:41:
e1:76:dc:1a:e8:ff:13:2a:0c:f1:8f:d7:bd:1c:b8:
26:9c:e7:73:ad:88:29:94:fd:b3:5c:85:2b:1f:b4:
89:6d:1e:af:dc:ec:53:c4:3d:3d:9c:94:35:31:73:
f6:d9:b0:61:a9:01:9b:b1:d1:57:5d:6f:72:c3:61:
a1:dc:6f:18:90:f5:82:cf:86:48:db:08:34:2c:6d:
63:05:90:c4:4d:d7:e9:6c:4d:9b:69:2d:be:41:45:
ee:1d:c6:df:fa:07:5f:71:41:7b:d1:59:37:a5:46:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:14:6E:C0:71:08:FA:BC:E1:EE:A6:8D:03:A7:0C:E2:7D:07:C6:38
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/uhRuwHEI-rzh7qaNA6cM4n0Hxjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.218.0/24
188.119.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:2f:22:8f:08:3e:d7:72:34:76:86:d8:43:7c:39:48:96:5c:
5d:75:f2:8c:2d:dd:e8:cb:e1:62:02:a4:d5:a4:5a:c5:86:05:
9e:e2:bd:b6:f1:aa:44:dd:a3:53:2c:10:fa:cc:bc:16:0e:46:
91:03:3d:f5:44:30:31:35:8d:89:43:0d:25:dd:3b:07:a2:c8:
9d:d1:e7:2b:ba:68:56:cf:20:ea:81:5d:c9:b6:73:88:df:69:
35:c3:af:ef:58:ee:f0:6e:a4:bf:5f:45:1c:ea:cb:f9:da:05:
26:3e:10:85:03:18:ac:de:ad:1e:49:b3:7a:f4:3c:0c:8f:0e:
ca:15:11:e6:14:82:1d:ff:c1:1c:0d:98:5e:ba:6f:71:cf:97:
ce:c3:be:87:f5:0b:c8:3e:3f:e8:53:76:3f:36:63:cb:9a:34:
bc:c7:62:15:cb:70:ac:91:86:ea:00:02:fb:ba:8e:8b:d4:ca:
ef:6c:ff:03:37:bf:d1:e7:cf:57:2b:80:41:3d:96:f8:0b:65:
ec:39:5c:04:03:8d:d3:0b:e4:82:9d:3f:ea:4b:f0:d8:3a:5f:
4c:19:f2:75:37:67:95:ab:fd:90:5f:86:ad:f3:47:bf:0a:c9:
8c:97:79:01:69:4c:fe:ba:34:15:bf:95:a9:5c:83:c4:0d:78:
59:06:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:25 2023 by rpki-client on console-fra.rpki-client.org