Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/uvkCvf34MmHW8irx7Yp2eKWUAMU.roa
File: uvkCvf34MmHW8irx7Yp2eKWUAMU.roa (raw, json)
Hash identifier: BXWhsYlcF4R+fltVwMoqB9KaCZIp0If34PRgo32xT9w=
Subject key identifier: BA:F9:02:BD:FD:F8:32:61:D6:F2:2A:F1:ED:8A:76:78:A5:94:00:C5
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0184CC98985E6F19977665F4971400096D36
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/uvkCvf34MmHW8irx7Yp2eKWUAMU.roa
Signing time: Thu 01 Dec 2022 07:31:03 +0000
ROA not before: Thu 01 Dec 2022 07:31:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.146.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:98:98:5e:6f:19:97:76:65:f4:97:14:00:09:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Dec 1 07:31:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baf902bdfdf83261d6f22af1ed8a7678a59400c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:ce:59:36:4f:d8:e6:83:b6:b1:67:6b:74:
c8:35:1a:f8:4d:73:7f:03:71:1b:9b:d6:82:f2:66:
6c:b6:03:d2:2b:e3:85:93:37:92:7e:20:d7:9d:e0:
98:0a:07:6f:b8:5e:76:e1:2c:3d:c4:d9:23:99:fb:
37:61:ea:c8:de:78:ba:a6:60:c9:bb:1a:b4:e2:d7:
fa:49:f9:f2:de:2a:51:bb:c4:bf:00:6b:29:ab:1c:
d3:69:78:b5:51:21:12:49:39:76:60:7c:4f:71:58:
a8:67:ef:12:6a:9d:b3:5d:d7:fa:ae:0a:f4:51:d0:
b1:b9:5c:19:c4:8f:b1:05:de:3e:29:7e:3e:45:d6:
4a:04:08:08:67:5f:1e:f8:c6:cd:31:b2:c2:51:91:
d3:a0:49:62:28:91:48:65:c5:de:da:68:9e:61:14:
29:50:9a:7b:1a:88:b0:3e:e3:68:7b:4d:58:bd:73:
ee:c2:c3:8e:b4:36:ef:e2:3e:12:ec:b1:86:f0:90:
4e:a1:65:96:32:37:fa:b5:e9:bb:a3:f6:ef:08:a1:
10:7e:1a:1c:02:10:4f:0e:53:dd:e7:37:2c:c2:4a:
86:d9:1c:81:6d:e5:85:41:7c:6b:e7:0b:94:21:7f:
9c:b6:b8:7e:8b:4b:f3:e2:72:90:af:71:0a:f4:9e:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:02:BD:FD:F8:32:61:D6:F2:2A:F1:ED:8A:76:78:A5:94:00:C5
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/uvkCvf34MmHW8irx7Yp2eKWUAMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2c:09:4e:4d:5c:7e:c6:94:6e:48:a1:29:03:fe:22:50:5d:
18:e5:75:43:73:cc:7a:f6:cf:56:e8:a5:3e:27:87:58:55:b7:
ec:a8:f5:da:44:e6:2e:83:02:d4:2c:40:6b:be:4b:a9:e0:2a:
92:6e:53:15:c4:2f:fe:82:17:e7:e8:0e:af:01:28:56:e7:5e:
68:3b:8d:69:40:8b:21:55:45:e4:a7:75:f6:e0:8b:09:b5:b8:
17:16:f3:b8:0f:07:52:07:89:27:a3:53:e8:44:05:df:dd:03:
cb:80:bb:22:5b:76:2e:90:a4:a1:98:e1:e9:a0:66:7e:c1:c4:
a4:a5:66:91:cb:09:4d:ac:69:ad:5c:17:97:bb:69:ee:cd:70:
63:cc:01:ab:97:59:c2:88:16:c4:5f:17:3d:5b:ef:97:0a:4a:
22:ac:16:f1:d3:2e:82:d6:17:e0:8b:b7:41:d6:7c:2d:52:c3:
d6:d4:a0:df:26:bd:da:12:7a:72:7e:3b:97:b9:9c:4c:de:bc:
1a:59:04:4b:d7:1b:ac:71:29:e7:e5:62:69:73:4e:18:59:da:
ce:13:01:36:88:79:78:04:38:99:97:0d:77:0d:a0:e8:6f:35:
24:b7:42:69:3c:38:98:90:63:25:0c:e4:c6:d2:54:cb:fa:12:
6c:4a:c7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org