Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/uWr1-kV9Ll0aGWwxaxNxYzmkS4Q.roa
File: uWr1-kV9Ll0aGWwxaxNxYzmkS4Q.roa (raw, json)
Hash identifier: 1ysXeD13vdq32h1uAT6rcEUeEJ7Kqi7wT0UkIe2bjTc=
Subject key identifier: B9:6A:F5:FA:45:7D:2E:5D:1A:19:6C:31:6B:13:71:63:39:A4:4B:84
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 0184C7EC91FDF61AD72DAE8B3CC0CB00F81C
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/uWr1-kV9Ll0aGWwxaxNxYzmkS4Q.roa
Signing time: Wed 30 Nov 2022 09:44:40 +0000
ROA not before: Wed 30 Nov 2022 09:44:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203505
IP address blocks: 185.146.225.0/24 maxlen: 24
185.146.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:ec:91:fd:f6:1a:d7:2d:ae:8b:3c:c0:cb:00:f8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Nov 30 09:44:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b96af5fa457d2e5d1a196c316b13716339a44b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:63:68:a5:33:c2:ce:28:58:f2:c8:fb:74:
05:b9:60:4b:ae:bc:4c:44:46:c8:76:d3:1c:ea:84:
5e:a9:9a:ab:c9:eb:b8:a8:71:69:4a:bd:11:76:2c:
a2:58:55:f1:8a:3c:82:3f:6d:c9:49:24:23:bf:ce:
e7:c1:a5:31:39:09:cb:37:a6:b0:19:ea:61:aa:98:
7f:b5:c8:d2:0b:71:65:32:8a:1b:50:ba:37:0f:f5:
47:9b:3e:10:7c:69:0c:7f:ba:84:41:39:7d:b3:47:
b4:81:34:00:3b:42:ed:24:65:91:ff:63:20:b8:55:
f0:5d:c6:f9:e2:92:59:8e:51:9f:22:03:a4:50:87:
08:22:9d:c1:f4:41:94:b9:47:aa:a5:de:f8:38:d7:
6c:1b:2b:5f:3a:fc:19:0e:01:70:69:0f:f5:a3:be:
3e:bc:de:2b:16:73:f3:63:06:b6:f3:e1:54:b9:3e:
e2:15:fc:f6:ac:af:d7:b3:e3:6e:d4:50:78:1d:85:
e5:31:25:cb:64:08:36:a3:d4:fa:40:ed:f0:f5:83:
82:54:da:9a:78:c0:a7:d8:45:28:aa:0f:11:50:b2:
8a:80:e7:0b:13:53:94:83:12:f2:fe:a8:be:f2:0b:
8b:ba:71:9f:4b:90:91:dd:9a:19:cf:4b:ff:a3:d4:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:F5:FA:45:7D:2E:5D:1A:19:6C:31:6B:13:71:63:39:A4:4B:84
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/uWr1-kV9Ll0aGWwxaxNxYzmkS4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.224.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:37:ed:20:2c:de:c7:a7:77:ea:c1:b4:1a:d0:57:eb:da:85:
26:c6:ea:1e:b0:63:93:e4:ce:00:7b:98:d2:29:9c:07:fb:d2:
ba:a4:8e:fd:59:74:d1:93:18:43:55:74:3b:90:f9:5e:d8:f7:
86:80:92:da:2c:1b:1a:58:93:55:f0:50:45:71:50:32:41:42:
6a:50:ec:ff:df:3b:ec:8d:6d:e1:29:df:97:20:40:a7:5d:92:
10:70:19:e7:da:dc:86:cc:d6:d1:40:fa:5e:3d:84:10:6c:aa:
44:ff:7a:ff:2d:7e:5f:e2:51:75:8c:d5:00:2d:56:26:a4:3d:
01:b6:e7:13:e2:4b:92:ff:ee:8d:fa:de:4a:45:d4:67:d5:a9:
7e:bd:e9:1b:38:45:58:25:61:fc:de:85:45:2d:32:4c:e3:b9:
0e:99:b8:2e:48:86:3a:84:c6:b2:d9:95:f8:e6:a0:49:f5:e5:
d0:87:9e:d6:e9:f1:86:25:a9:9f:96:ab:a2:b1:f7:88:91:56:
43:70:7e:5b:50:9f:ae:55:00:cd:bd:56:64:48:3e:04:8f:83:
a9:34:6d:21:12:4f:ca:f2:c6:0b:49:61:b0:75:4d:b8:a3:36:
af:ec:45:1d:be:c4:43:91:a4:9e:fd:5f:d3:b0:6a:b5:14:7c:
9f:b3:78:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:03 2024 by rpki-client on console-fra.rpki-client.org