Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/UIm5EziXwgewT-_39fUNJqcxlK4.roa
File: UIm5EziXwgewT-_39fUNJqcxlK4.roa (raw, json)
Hash identifier: qpSEHC6rhylsPFKje2TevxLwS1JadHNLSUcERx2uc6E=
Subject key identifier: 50:89:B9:13:38:97:C2:07:B0:4F:EF:F7:F5:F5:0D:26:A7:31:94:AE
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 0C0A8270
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/UIm5EziXwgewT-_39fUNJqcxlK4.roa
Signing time: Wed 30 Mar 2022 10:17:34 +0000
ROA not before: Wed 30 Mar 2022 10:17:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208346
IP address blocks: 94.154.132.0/24 maxlen: 24
94.154.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202015344 (0xc0a8270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Mar 30 10:17:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5089b9133897c207b04feff7f5f50d26a73194ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:49:60:a3:70:e5:5d:9d:0b:04:3b:72:f6:
16:a8:aa:8b:1f:d9:b7:bf:64:f9:f4:3d:16:12:a4:
84:5f:1a:0b:29:46:46:94:7f:17:38:b3:ae:20:7d:
8f:8c:22:1c:de:be:24:85:b8:b8:69:a6:d7:95:69:
ee:2d:8a:fe:26:89:ea:c7:21:d0:e0:30:73:48:04:
17:2c:67:08:94:0b:ab:f6:d1:1d:b1:c2:e1:97:1e:
89:47:0e:d2:a8:a7:eb:5a:a9:63:52:15:09:85:e9:
b6:e2:1d:78:ec:23:04:70:04:d6:76:bc:6f:0f:27:
0b:e0:a2:98:56:04:9a:21:4c:44:9e:b9:96:b9:2b:
bf:9c:d9:93:59:e7:c7:e7:ab:1c:d5:62:56:91:37:
f3:1b:07:37:53:54:7c:a4:3c:b6:20:da:d4:76:01:
2c:13:5d:de:9f:30:8e:f5:47:08:ca:71:5e:7a:23:
82:94:9c:ab:2f:e1:7a:9d:8c:3b:a8:82:75:f7:8c:
68:38:df:09:59:c0:b1:b8:37:36:c6:46:a5:1d:8d:
83:4a:d6:1c:a4:4d:87:9a:2e:41:a6:fe:eb:0d:a9:
d9:c2:1e:05:69:24:f7:3a:be:9e:d1:d0:83:97:b3:
45:ac:24:48:30:a4:1a:6e:df:d0:26:4a:0a:a5:92:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:89:B9:13:38:97:C2:07:B0:4F:EF:F7:F5:F5:0D:26:A7:31:94:AE
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/UIm5EziXwgewT-_39fUNJqcxlK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.132.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:62:20:d5:98:61:29:7e:44:2d:6a:14:36:31:b1:e1:05:67:
c9:05:31:c6:6a:7b:a6:ad:c4:b0:32:f3:a6:a4:05:9e:e8:21:
8c:e2:49:59:a8:65:6f:68:65:93:d8:84:83:f6:e4:62:8c:d9:
8b:7d:b0:59:89:69:3e:89:c6:37:ce:83:84:f8:14:11:30:12:
f4:fa:52:71:ae:36:54:05:33:94:7e:7d:10:aa:13:c4:49:4b:
af:8b:eb:82:17:8b:32:5f:39:d7:c0:fc:5c:a9:5d:2a:d2:fe:
00:4a:2e:1c:e5:3f:7a:73:e8:9d:f2:bf:e3:a5:c7:35:a4:65:
fc:f5:be:93:0d:82:12:81:bd:4a:af:6f:72:87:57:d9:a8:e4:
e1:76:d5:8b:f4:a6:1c:33:87:89:9f:c2:1e:02:b6:44:f1:6d:
b1:73:dc:ff:5d:d2:56:aa:c5:0b:19:12:7d:0e:a0:b6:ac:b0:
4b:c7:c8:91:b1:79:15:f7:e4:54:55:aa:3b:dc:a9:e8:a0:43:
85:14:cf:e9:37:f6:a2:75:33:35:93:d5:0a:d9:2b:69:68:72:
a0:7f:fd:b5:c6:21:fb:8b:00:24:14:af:c9:f8:0c:82:81:3e:
c2:41:f3:25:79:e1:2c:06:52:a6:1c:fd:b1:cd:d9:65:f9:fc:
7a:7c:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:16 2024 by rpki-client on console-ams.rpki-client.org