Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/UC060GRqs9NcEHEUGsdnspdDhr4.roa
File: UC060GRqs9NcEHEUGsdnspdDhr4.roa (raw, json)
Hash identifier: okN0QP+menuEh06OjzDV4O5o/xTbsmQFsfLrJT8S/v8=
Subject key identifier: 50:2D:3A:D0:64:6A:B3:D3:5C:10:71:14:1A:C7:67:B2:97:43:86:BE
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 08F2A84A
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/UC060GRqs9NcEHEUGsdnspdDhr4.roa
Signing time: Sat 01 Jan 2022 03:58:05 +0000
ROA not before: Sat 01 Jan 2022 03:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58011
IP address blocks: 188.244.108.0/22 maxlen: 24
164.138.245.157/32 maxlen: 32
164.138.240.0/21 maxlen: 24
164.138.244.208/32 maxlen: 32
2a0d:55c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150120522 (0x8f2a84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Jan 1 03:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=502d3ad0646ab3d35c1071141ac767b2974386be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:24:75:b2:b5:ab:1f:9c:d2:99:df:1b:11:
12:2e:d6:79:8a:15:fb:2e:82:7c:e9:33:c9:ef:d1:
55:d3:fe:34:70:20:5b:db:cb:ea:5e:95:24:57:fb:
d7:d3:f9:1d:3c:a8:5a:88:4d:07:4f:05:8d:99:f2:
9f:6a:e9:e6:41:93:7c:fb:54:47:ce:70:4e:ab:f5:
f4:31:21:c1:40:f6:ad:d7:b9:df:77:b8:38:ac:49:
01:66:90:47:54:cf:50:5a:53:76:cd:fd:8a:8d:95:
51:60:d2:dd:3a:98:8c:97:28:3a:63:8e:61:46:de:
0b:64:ee:91:87:8b:54:76:6d:3c:87:35:c3:42:d4:
e6:3c:b4:e1:99:0a:3a:ce:b2:d7:19:20:74:84:0f:
9e:53:aa:1e:d8:d1:30:2f:96:08:34:c8:47:7a:d1:
b2:f1:72:fe:72:27:e5:bc:ea:86:a8:10:63:05:aa:
3e:d5:59:22:77:54:92:02:9d:4f:6e:c9:6d:9a:fd:
d6:e2:e2:25:ba:1a:8b:06:99:4a:c3:f7:bc:81:07:
01:69:e6:4e:1d:81:cf:29:98:18:06:e6:50:40:61:
3d:77:a5:bb:c8:11:ad:34:d0:7c:b1:45:c2:be:d5:
27:c1:5a:98:e2:1f:ac:22:da:b5:0a:50:40:e6:70:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2D:3A:D0:64:6A:B3:D3:5C:10:71:14:1A:C7:67:B2:97:43:86:BE
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/UC060GRqs9NcEHEUGsdnspdDhr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.240.0/21
188.244.108.0/22
IPv6:
2a0d:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:f1:98:d4:62:5c:82:8b:be:1a:ea:0c:36:1d:f0:0f:91:2b:
32:69:58:b9:c1:cf:cc:72:ed:d4:94:8f:c2:bd:19:f2:e5:f2:
5a:e3:d2:a4:f6:a9:0b:1d:ac:b9:64:db:bb:1a:e4:b4:93:76:
47:d8:46:99:19:fc:ba:3c:e4:48:ef:ca:2e:d7:6d:d4:03:10:
c5:96:27:5f:e0:dd:6d:96:c1:2b:34:44:0c:39:70:dd:6f:56:
99:f5:c5:70:e9:00:44:45:6d:b1:3d:c1:a9:ad:39:81:e7:59:
80:68:1d:23:28:ae:b0:c9:75:da:65:24:30:23:36:a1:f1:68:
0f:11:7a:db:e3:6e:3f:87:1a:f9:a3:d9:5e:38:8a:33:e6:e4:
ee:97:af:d7:33:d0:71:e2:d7:ef:6b:96:4c:dc:ba:5c:7a:3f:
b8:bf:46:70:ec:8b:63:fa:a1:9e:2a:41:25:f4:cf:95:61:e8:
4f:d0:c4:fc:f2:35:04:f6:f1:89:3c:20:d4:50:1f:b2:d0:e6:
15:88:83:dc:e8:38:f5:9d:bd:93:24:c7:84:41:1c:df:7e:f0:
fb:be:04:ec:dc:2a:fc:63:82:e5:a1:b9:be:bb:7d:f5:2d:fd:
9a:e8:d2:71:3e:b4:4b:6e:cc:24:35:6a:f3:3c:37:d6:f4:32:
d6:79:3f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:18 2023 by rpki-client on console-ams.rpki-client.org