Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UE2qFmpHhIgI0b1Kn8h9ciSY170.roa
File: UE2qFmpHhIgI0b1Kn8h9ciSY170.roa (raw, json)
Hash identifier: wUESisSGI9vZXSOXEm0nIs+odnjDIgLd69Std2gcNV0=
Subject key identifier: 50:4D:AA:16:6A:47:84:88:08:D1:BD:4A:9F:C8:7D:72:24:98:D7:BD
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03E30402
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UE2qFmpHhIgI0b1Kn8h9ciSY170.roa
Signing time: Sun 29 May 2022 18:04:14 +0000
ROA not before: Sun 29 May 2022 18:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205888
IP address blocks: 79.142.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65209346 (0x3e30402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: May 29 18:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=504daa166a47848808d1bd4a9fc87d722498d7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:23:db:b2:82:4a:a8:59:ac:17:ca:f4:90:
4f:af:92:60:89:61:7b:2f:f6:6f:f1:2b:48:be:cd:
20:27:06:d4:68:21:71:8d:bc:c4:36:e9:e1:20:c9:
24:96:a4:55:2e:1b:f0:b8:49:6b:e0:fb:b6:2a:74:
ba:3e:84:5c:a2:54:8f:03:fc:a3:1e:41:c3:2d:0f:
36:d0:83:f8:b5:c5:91:e6:ed:0d:9a:e1:28:f7:af:
af:47:21:64:cb:43:0e:b5:1d:b7:bb:0a:ee:b3:b9:
1e:d7:39:d2:3e:2d:a3:bd:78:7e:4f:b6:2c:29:49:
aa:ca:8a:df:53:9d:f0:e0:42:65:b4:95:a8:11:97:
1a:b3:80:2f:13:3c:1b:4c:4d:d4:c1:cf:3f:f5:b1:
85:4a:3c:93:8a:31:44:28:b0:43:b8:b6:5d:50:29:
45:84:7f:3d:31:65:77:69:96:35:ce:65:09:0e:92:
c7:55:7c:dd:b2:68:09:46:a1:a4:c0:00:f9:f0:8f:
d8:e1:24:17:7d:6b:16:85:88:35:f1:88:8b:0c:c5:
b5:7e:d1:4a:52:93:1d:2e:c8:4e:b6:12:95:b7:56:
3e:6d:be:8d:17:7d:9b:c4:c1:18:3a:ee:f9:8f:70:
8f:6e:c7:9c:92:89:e6:67:6b:12:eb:9f:66:f0:81:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4D:AA:16:6A:47:84:88:08:D1:BD:4A:9F:C8:7D:72:24:98:D7:BD
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UE2qFmpHhIgI0b1Kn8h9ciSY170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.184.0/22
Signature Algorithm: sha256WithRSAEncryption
55:4e:06:16:46:3d:bd:61:b5:ed:e4:44:a9:08:ff:4d:af:0b:
3d:d9:9d:c6:7e:60:61:64:4c:8b:d3:e2:7a:77:05:12:d5:ad:
32:64:be:63:6c:d8:bd:47:2b:ee:49:5a:36:3d:16:32:00:dd:
12:32:98:8c:04:b2:e0:6b:be:44:ee:e3:d0:1f:a1:a8:fc:31:
62:b5:50:48:c7:ab:81:fa:18:ff:10:98:7e:ab:e0:a7:60:a1:
50:1d:19:67:53:c0:df:e0:9d:ca:ed:a8:34:c9:c2:e5:30:4f:
e0:cd:45:65:9f:09:d6:89:0b:2b:71:68:cc:2f:d2:89:f6:5e:
7b:3d:ca:76:5c:b6:1c:ad:51:b9:62:9f:70:25:48:8c:9a:d5:
04:ca:07:f0:5e:f3:9f:b7:9a:32:ea:a1:72:b6:fd:4d:e0:f2:
db:86:2f:7d:ad:6d:5a:b7:8d:8c:22:c1:ed:4c:a6:5c:14:d2:
e1:1e:0b:ee:34:ca:ea:44:69:ac:97:1b:8e:31:21:0e:dd:a2:
7b:4f:39:02:79:13:de:0b:be:4a:04:15:06:a6:14:a5:84:52:
32:a3:f8:fc:af:97:3b:25:76:7e:e5:0c:9b:c0:00:46:27:dd:
7e:a6:0e:00:29:2c:05:86:e2:a8:75:8a:6c:8c:35:03:cd:a4:
71:f4:70:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org