Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/UeSLMdZ5M-a0rhNATOk5q47tU1I.roa
File: UeSLMdZ5M-a0rhNATOk5q47tU1I.roa (raw, json)
Hash identifier: DJBk0PYQR44G6mA1iuuclu7oaP9iVVVbobgIPtl9yDM=
Subject key identifier: 51:E4:8B:31:D6:79:33:E6:B4:AE:13:40:4C:E9:39:AB:8E:ED:53:52
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 019759CE
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/UeSLMdZ5M-a0rhNATOk5q47tU1I.roa
Signing time: Mon 10 Jan 2022 17:54:06 +0000
ROA not before: Mon 10 Jan 2022 17:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 147.185.163.0/24 maxlen: 24
147.185.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26696142 (0x19759ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 10 17:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51e48b31d67933e6b4ae13404ce939ab8eed5352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:7b:1a:f8:86:4f:fd:c5:c9:b3:90:13:95:
7e:00:36:f7:f7:58:81:6c:20:62:a5:23:4f:62:3a:
74:e1:36:07:57:95:1c:7f:42:0a:99:99:76:37:d9:
4f:38:4b:4a:2d:d6:42:cc:5c:da:77:1a:a1:dc:2d:
86:ac:ff:f8:a7:45:1c:7a:fb:95:4e:a4:18:21:ea:
78:33:73:1a:bf:d8:ed:bf:2f:13:44:04:10:23:8f:
24:f7:ea:8c:3e:49:07:1d:e4:d2:12:40:f5:d8:b4:
24:a8:b2:fb:c4:83:14:2e:b1:0a:1f:2f:a8:e8:f9:
b9:b2:0e:12:da:6d:53:d2:85:0b:cf:a9:6a:e8:36:
bc:d4:d0:90:d7:ee:11:c6:f8:c2:30:9a:79:c7:c0:
e0:0c:93:d2:34:5f:ab:86:4a:4b:8f:76:35:46:ff:
2c:15:a6:7e:db:a8:60:49:cb:d8:bc:bb:ff:df:d9:
77:86:df:ce:66:a5:82:c6:d4:3f:f4:18:34:40:c8:
b5:97:19:93:25:61:cb:72:fa:fd:e8:e5:90:11:57:
70:c5:8d:be:42:92:39:bf:e8:df:c1:be:ad:32:52:
97:43:c9:1f:16:c9:b1:e8:e6:af:f9:2f:5b:09:51:
e9:0e:a0:f8:e4:d6:ac:0c:f3:ab:90:51:a0:70:f8:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E4:8B:31:D6:79:33:E6:B4:AE:13:40:4C:E9:39:AB:8E:ED:53:52
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/UeSLMdZ5M-a0rhNATOk5q47tU1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.106.0/24
147.185.163.0/24
Signature Algorithm: sha256WithRSAEncryption
44:19:de:d5:07:1b:19:4b:10:a7:32:1f:a6:6b:65:13:40:e3:
13:f0:84:86:14:27:5d:12:0e:03:3a:c2:d8:6f:57:a2:36:8e:
b2:3c:c8:7c:f4:c1:72:e7:b0:a9:4e:93:07:e5:dc:bd:10:98:
ce:2e:32:ac:05:56:32:46:4e:e8:fc:f7:e1:35:66:bf:cb:f3:
c0:3b:d7:02:07:11:2a:ec:8c:e9:12:81:28:ed:2f:34:65:d0:
ff:0c:3e:80:66:95:25:cb:c3:19:33:c7:a1:32:15:4a:ea:b0:
0b:f2:24:7f:d0:80:05:8c:24:9d:51:b6:ce:ef:d1:d1:24:fb:
e8:1a:fe:61:53:25:3e:74:b5:41:60:c9:35:bd:61:0a:2c:75:
a1:5b:3f:e9:1b:9f:7c:85:57:4e:f8:dd:b7:9d:f0:84:ff:72:
3a:6e:20:93:69:b9:ad:b2:b8:a7:cd:bd:76:13:55:08:3a:56:
30:ea:49:b2:3a:8c:4e:bc:48:fc:bf:0c:d8:b0:9b:77:63:6d:
61:13:ec:27:82:7a:15:d5:af:2e:ec:62:72:fa:b4:ff:c9:aa:
64:c7:e4:bf:24:10:ca:4e:e6:6e:26:c1:27:f8:70:c2:42:15:
92:fb:da:21:2c:f6:9c:a5:39:c1:dd:c0:ff:78:cb:80:46:0f:
43:a3:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:30 2023 by rpki-client on console-ams.rpki-client.org