Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/2UJBWmEbytbhd8keXWuUVuoxPa0.roa
File: 2UJBWmEbytbhd8keXWuUVuoxPa0.roa (raw, json)
Hash identifier: sa57tokPuf26emORk/eDuIlWsjK/vZyYQVui+1k9Z7I=
Subject key identifier: D9:42:41:5A:61:1B:CA:D6:E1:77:C9:1E:5D:6B:94:56:EA:31:3D:AD
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 0356F3FE
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/2UJBWmEbytbhd8keXWuUVuoxPa0.roa
Signing time: Wed 04 May 2022 07:47:28 +0000
ROA not before: Wed 04 May 2022 07:47:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.111.200.0/24 maxlen: 24
109.224.233.0/24 maxlen: 24
195.74.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56030206 (0x356f3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: May 4 07:47:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d942415a611bcad6e177c91e5d6b9456ea313dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:1f:00:06:e3:9c:92:fe:f6:3a:bb:66:b7:
8a:ae:42:c7:94:58:9c:ff:a7:c3:26:56:13:3c:17:
a8:5d:b5:e1:79:57:3d:ee:ea:50:30:82:41:ef:68:
8b:73:89:32:24:ef:ba:b3:94:39:40:75:bc:85:f1:
f9:29:19:d1:a1:d5:64:64:08:82:72:f5:c5:75:ce:
e8:26:07:38:9d:4a:fa:d8:c3:07:7c:7a:69:76:d9:
a7:f0:16:56:11:e9:c5:57:a9:83:d8:a7:49:5f:b4:
34:a9:50:1a:80:70:8a:0d:2e:e3:53:57:f5:09:52:
c5:8e:27:cb:79:6f:29:58:28:38:3a:b2:20:c5:80:
e3:ec:74:29:dd:41:2a:22:e4:e6:2b:40:20:8a:9a:
fb:d7:39:28:81:eb:52:aa:5e:09:b0:ba:db:27:f1:
9e:10:39:87:1f:55:5b:6c:b7:7a:b8:6c:2e:b5:b3:
04:da:8c:8f:06:b5:23:35:93:e9:b1:d9:cd:6a:20:
ab:bf:93:e3:55:20:7a:54:3a:0e:33:48:44:3c:61:
05:63:46:6c:39:3a:8d:a5:95:a9:43:c2:ac:ce:23:
b6:b5:13:9e:1b:6e:e3:af:ee:4c:4f:bc:f0:89:5c:
92:df:3c:0d:0e:da:57:02:fa:11:74:a5:62:e0:91:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:42:41:5A:61:1B:CA:D6:E1:77:C9:1E:5D:6B:94:56:EA:31:3D:AD
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/2UJBWmEbytbhd8keXWuUVuoxPa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.233.0/24
193.111.200.0/24
195.74.60.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ed:9e:0d:3b:e4:31:49:ba:68:77:b3:59:6e:fd:68:7b:06:
5a:4c:73:70:e3:f8:a1:10:ca:b2:a2:ea:f2:04:f9:08:28:1b:
0d:42:6b:3b:38:1a:a6:2b:a3:e6:3c:a6:be:f4:2d:ea:52:e1:
8a:a1:0a:e7:d3:18:7b:d2:34:5e:79:94:bd:f3:a8:32:38:35:
62:11:96:cd:55:5f:63:53:d4:0e:0d:4e:b3:8a:ba:3c:71:85:
fd:2f:74:0c:55:70:0c:96:95:0c:d7:97:24:be:33:05:04:48:
f8:a1:0d:7d:41:ca:10:60:a3:23:3c:bf:6a:79:7c:60:ca:fd:
c3:93:63:a8:42:33:22:40:73:de:40:f7:47:96:58:44:03:02:
81:df:de:4d:f1:c9:57:3a:13:1e:8a:5a:94:17:c5:92:3f:83:
3a:cd:8d:b7:a7:a2:9d:97:74:dd:ba:3e:64:9b:26:79:05:7f:
5d:3e:15:50:f7:5e:db:f6:7a:bc:72:b1:3c:1c:64:11:7e:52:
e9:9c:cc:70:8b:4e:ec:8b:9b:52:26:9b:ea:63:0e:3c:e6:84:
25:d3:00:5c:6f:67:46:e6:25:d3:e1:cc:d6:6d:e0:7a:e0:54:
37:55:2d:9f:21:32:20:2a:d7:df:06:51:a0:be:b4:d6:ac:f6:
5a:5e:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:03 2023 by rpki-client on console-ams.rpki-client.org