Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/r2emvUriAUUGqGJ3YuxJjmNkkRA.roa
File: r2emvUriAUUGqGJ3YuxJjmNkkRA.roa (raw, json)
Hash identifier: 1o5Q26nbTHWepn2oUeDI1d9hUZt2Or4k5urYeqz/z5I=
Subject key identifier: AF:67:A6:BD:4A:E2:01:45:06:A8:62:77:62:EC:49:8E:63:64:91:10
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 05AF543C
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/r2emvUriAUUGqGJ3YuxJjmNkkRA.roa
Signing time: Thu 21 Apr 2022 07:48:06 +0000
ROA not before: Thu 21 Apr 2022 07:48:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398464
IP address blocks: 194.247.44.0/23 maxlen: 24
45.149.164.0/24 maxlen: 24
45.149.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95376444 (0x5af543c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Apr 21 07:48:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af67a6bd4ae2014506a8627762ec498e63649110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:4a:2d:3c:8d:cf:34:8b:a7:f3:10:d1:c0:
35:c1:c4:9b:ac:41:34:f5:88:0f:e0:52:9f:3e:1e:
a6:da:aa:e3:43:3b:af:6d:df:8e:08:8b:f3:a5:48:
c7:88:ba:0b:73:d4:99:e8:49:f6:a4:04:1a:4e:06:
ed:b6:cf:d6:ce:17:bb:fa:8e:ab:f7:9e:55:2c:16:
93:7e:83:e3:4b:f5:f9:37:99:18:04:eb:b7:d3:7c:
4d:3f:62:e4:20:45:75:1f:a4:cc:56:e8:b9:ad:4c:
81:ed:56:da:73:33:bd:5a:9b:69:c8:94:9e:1e:0a:
d0:d4:fd:b6:e7:e5:ab:06:d2:df:7c:cb:59:e1:f5:
2e:c4:96:b7:0e:e7:53:62:ac:27:4d:f9:06:58:6f:
14:22:5b:b5:cc:84:94:de:7c:0b:87:fd:87:4b:9c:
3f:41:0d:73:cc:bd:a9:70:c6:e2:f2:98:a3:ea:95:
a1:3a:6d:0f:6a:84:92:11:65:f7:1b:42:8f:92:22:
99:b1:d2:f5:a1:3d:2d:b7:ad:50:c0:51:77:cf:cf:
66:f4:fe:d5:d2:79:8b:d0:e4:10:c6:bb:75:49:b3:
f4:22:f8:13:3e:41:5f:81:58:95:0d:dd:50:f3:5f:
6f:4a:d1:5b:34:d7:73:e0:5d:9f:14:1f:d8:1a:61:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:A6:BD:4A:E2:01:45:06:A8:62:77:62:EC:49:8E:63:64:91:10
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/r2emvUriAUUGqGJ3YuxJjmNkkRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.164.0/24
45.149.167.0/24
194.247.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:3d:09:e2:b8:29:60:e7:3a:68:47:cf:ac:37:3c:98:53:1f:
71:62:1d:b9:19:78:1c:5c:bd:a9:18:7b:f5:7e:2c:83:32:e6:
08:51:d0:35:cc:f2:73:8c:d0:8a:8b:9b:3e:97:ef:3d:e3:0e:
0b:db:1c:a9:7f:a6:dc:ce:91:2b:0c:c7:2b:40:df:a5:79:69:
28:d5:87:3a:5f:fe:d6:c8:2a:eb:3a:1d:94:51:ad:fb:87:bb:
e0:17:11:3c:29:56:d0:8e:9f:8e:fe:7b:1c:0d:1d:a6:5a:eb:
ae:50:76:93:e1:3e:ff:a1:af:da:a4:b3:b1:48:93:38:96:9e:
ec:20:00:d6:31:97:fa:3c:2c:37:ed:b6:c9:29:11:68:93:14:
c1:76:12:4d:21:46:93:6e:4f:ea:1e:4f:5c:fc:45:30:42:6a:
d4:d9:4c:3a:c1:71:63:d0:47:7e:8f:ae:9a:02:9c:af:ce:f2:
21:87:fd:24:d2:0a:5f:69:da:5d:48:56:a4:af:f7:dd:05:70:
76:bd:e2:9d:64:65:28:d2:ce:ab:b6:4e:ad:f5:6d:0d:2e:49:
f7:f2:b7:12:3c:d2:14:b9:0d:c4:ba:dd:1c:3a:58:01:bd:a4:
6a:20:a2:4d:e5:e7:bc:96:d3:a0:b7:f8:51:c0:cf:22:06:9f:
91:b1:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org