Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/UTMJw6AMrUjxrPE81nTL6YcQjaE.roa
File: UTMJw6AMrUjxrPE81nTL6YcQjaE.roa (raw, json)
Hash identifier: fWl5qVISO2ZREk2dzRn7vCgnFNyKV0RL54jks/UoYpA=
Subject key identifier: 51:33:09:C3:A0:0C:AD:48:F1:AC:F1:3C:D6:74:CB:E9:87:10:8D:A1
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 0185582A8CA65EEBF03A46E409117B2559F0
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/UTMJw6AMrUjxrPE81nTL6YcQjaE.roa
Signing time: Wed 28 Dec 2022 09:57:41 +0000
ROA not before: Wed 28 Dec 2022 09:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.179.150.0/24 maxlen: 24
185.179.151.0/24 maxlen: 24
185.240.125.0/24 maxlen: 24
185.231.166.0/24 maxlen: 24
185.231.165.0/24 maxlen: 24
185.240.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:2a:8c:a6:5e:eb:f0:3a:46:e4:09:11:7b:25:59:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Dec 28 09:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=513309c3a00cad48f1acf13cd674cbe987108da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:d4:6d:50:5b:2e:54:e6:38:64:02:6f:83:
f1:e6:4f:d6:9d:c8:0c:f9:16:76:a4:e8:f5:e9:71:
68:64:81:ea:a8:d3:d3:7c:3f:58:ec:54:d7:e4:77:
e0:58:03:4a:7b:58:41:b2:b3:94:ed:5d:76:87:4c:
2c:66:b4:d2:61:67:d6:d9:bc:62:12:0c:06:d3:e4:
ec:cc:fc:ee:b4:b8:46:df:eb:05:39:ef:c2:f9:01:
0f:65:35:34:74:06:7c:03:01:4b:f9:ae:5c:bb:56:
36:ee:46:de:b4:05:c9:79:7a:77:c0:80:48:20:62:
20:43:2e:22:14:f7:62:06:c3:a3:63:e9:d0:56:c9:
2c:1c:df:1b:e5:86:28:47:f5:d2:c0:20:43:ab:00:
41:71:73:f0:3b:36:b5:5f:db:17:84:f2:26:1e:34:
aa:05:0b:28:c9:5b:5e:be:05:a4:ab:a0:ea:93:0f:
de:65:cb:2a:5f:db:90:7b:a4:5d:e8:bc:4f:5b:2d:
46:45:1a:63:91:be:f0:14:1d:d8:62:69:61:5d:75:
7f:7f:2b:be:d6:32:0d:54:c0:32:3f:26:1e:26:f0:
f6:ac:05:de:89:ab:ca:bf:28:95:8e:b2:5f:b2:fc:
71:d5:d8:e7:fd:c0:85:2a:90:32:47:c6:68:1c:a2:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:33:09:C3:A0:0C:AD:48:F1:AC:F1:3C:D6:74:CB:E9:87:10:8D:A1
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/UTMJw6AMrUjxrPE81nTL6YcQjaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.150.0/23
185.231.165.0-185.231.166.255
185.240.125.0/24
185.240.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:89:79:44:8f:68:9b:ee:8e:a1:db:a9:c5:0c:3f:7b:29:bd:
ce:38:29:ea:a6:4a:43:f0:d4:5c:a5:cb:7c:97:92:4e:0e:42:
24:9e:e6:7e:73:d3:83:29:27:2c:69:4d:36:82:b6:d3:98:72:
22:1b:bc:b7:55:52:bf:55:2c:e4:87:7a:8e:f4:6a:36:84:3b:
bf:13:31:db:aa:21:4c:0b:6b:28:6c:52:60:48:6f:c6:ab:dd:
f4:f7:47:1d:4e:3d:ac:ae:3e:51:5c:1c:19:18:6a:1f:11:d9:
8a:70:07:93:d8:a6:4e:a1:05:e6:d1:b3:17:65:03:c4:97:8a:
69:40:f9:ed:73:20:89:77:62:0e:b4:ad:13:e2:9b:d6:72:4d:
bd:24:04:f3:fe:81:04:45:6d:6b:44:95:2e:b0:b3:b5:95:45:
5b:94:b2:83:98:39:87:02:4a:c5:12:e3:45:05:b4:b9:77:d0:
78:79:4a:74:46:03:48:44:b3:91:f5:ff:12:3c:a8:53:1f:7d:
6e:54:79:4b:f2:8f:42:40:f1:86:08:52:ea:7d:14:db:cc:f8:
bf:e7:f4:78:16:98:03:da:ce:b3:0a:2f:ff:b0:a0:b8:6d:cf:
be:6b:cf:08:69:03:51:49:5b:8e:10:c5:d9:db:ea:c0:3f:d2:
9f:1a:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:05 2024 by rpki-client on console-ams.rpki-client.org