Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/uCfwSSpETKYQhGSaFjsT294KWRo.roa
File: uCfwSSpETKYQhGSaFjsT294KWRo.roa (raw, json)
Hash identifier: M4ggdYY1r7WAfktB8rF2thsanXBKpHFM6lroHlxX1P0=
Subject key identifier: B8:27:F0:49:2A:44:4C:A6:10:84:64:9A:16:3B:13:DB:DE:0A:59:1A
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 02D9C327
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/uCfwSSpETKYQhGSaFjsT294KWRo.roa
Signing time: Sat 11 Jun 2022 08:02:03 +0000
ROA not before: Sat 11 Jun 2022 08:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56381
IP address blocks: 141.98.136.0/24 maxlen: 24
45.129.92.0/24 maxlen: 24
2a09:11c0:1000::/36 maxlen: 36
2a09:11c0:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47825703 (0x2d9c327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jun 11 08:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b827f0492a444ca61084649a163b13dbde0a591a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:73:86:01:91:4c:b3:45:9c:cb:05:87:86:
53:f3:2d:67:f4:64:02:d4:e0:b8:0b:19:63:af:51:
de:1e:a5:6f:79:be:59:63:0f:d5:87:08:f2:63:12:
04:d8:d7:9c:b3:d7:b4:e7:ba:43:15:82:85:a7:58:
f5:f0:30:41:0c:a9:92:84:69:6a:17:bb:5a:7b:b5:
87:95:f4:9d:82:66:bb:1c:9e:b9:0f:25:3c:2a:3e:
bf:ee:a2:80:35:49:db:26:73:95:bb:4c:cd:da:fa:
4f:a5:94:50:86:9e:04:41:7c:28:17:e1:0e:b9:30:
63:00:45:d3:23:c9:3a:72:ff:0d:01:71:1f:c4:72:
6b:df:62:00:e5:8b:9e:39:4f:a2:36:a3:05:2a:49:
42:56:14:83:8c:57:3f:dd:36:6c:12:a1:c0:0a:c9:
44:66:50:f5:da:6c:48:64:b7:42:cf:6a:da:83:c6:
c4:1c:72:c8:fb:c0:4e:dd:da:da:5d:4e:8d:7c:ac:
49:37:01:39:8d:54:ee:4a:78:0d:08:c8:d7:6c:27:
7e:ef:73:73:b8:41:ca:0a:b1:a0:a1:6c:55:f5:bb:
1e:fc:8a:59:6d:23:99:84:63:3e:4b:65:0c:7e:a7:
df:c7:03:10:0d:1e:19:0b:07:98:12:4d:c2:98:9f:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:27:F0:49:2A:44:4C:A6:10:84:64:9A:16:3B:13:DB:DE:0A:59:1A
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/uCfwSSpETKYQhGSaFjsT294KWRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
141.98.136.0/24
IPv6:
2a09:11c0:100::/48
2a09:11c0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
85:44:d2:16:32:93:3d:2b:bc:3e:9d:79:ec:41:f0:44:db:4d:
73:3f:d0:18:9f:aa:33:d5:e7:97:94:88:eb:2c:eb:a5:1d:8a:
b9:2a:97:f7:6c:00:f5:65:ab:f3:45:54:2f:eb:16:54:87:bb:
03:f6:4c:5a:f2:33:57:d0:f2:58:20:a3:3c:e5:cd:ea:2c:60:
8f:03:7e:76:88:d8:d2:8f:8a:6f:a7:fb:80:83:3a:6e:d5:2a:
5f:52:02:f1:3e:50:ee:ea:24:cc:05:ca:70:39:54:7f:1f:61:
9c:5f:b3:a4:7a:9b:06:60:a7:b0:19:d9:e7:f2:e7:09:f2:ca:
71:dd:a5:53:ae:c6:29:98:1d:c5:f9:58:32:7e:9f:90:1d:a3:
f9:35:ca:16:ac:5a:d8:04:17:ad:4a:bf:b1:e4:d0:23:af:9a:
6c:61:f8:7e:66:f9:b0:62:ce:b5:4d:50:23:92:ab:b9:87:a8:
52:cf:c4:03:31:a1:ae:0b:4b:e6:18:b0:e3:41:d6:24:4b:c9:
8a:53:c7:56:e7:da:ec:88:3a:99:3e:79:ab:df:30:95:aa:c9:
db:69:6e:e2:22:e2:e1:04:5b:9a:fd:9b:c8:6f:4a:1c:48:aa:
26:40:6c:97:66:b1:ba:f3:ba:60:f6:0e:ec:93:1f:31:cb:3a:
4d:22:20:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-fra.rpki-client.org