Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/uakqAoRtq9hqdeIgsWWo5zTb9RI.roa
File: uakqAoRtq9hqdeIgsWWo5zTb9RI.roa (raw, json)
Hash identifier: yZgv6llsjay5boJcv/7+fcHqQwh7zRkQRsT3m8MAQv8=
Subject key identifier: B9:A9:2A:02:84:6D:AB:D8:6A:75:E2:20:B1:65:A8:E7:34:DB:F5:12
Certificate issuer: /CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Certificate serial: 02500251
Authority key identifier: 6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/uakqAoRtq9hqdeIgsWWo5zTb9RI.roa
Signing time: Sat 01 Jan 2022 08:06:03 +0000
ROA not before: Sat 01 Jan 2022 08:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12450
IP address blocks: 185.162.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38797905 (0x2500251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Validity
Not Before: Jan 1 08:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9a92a02846dabd86a75e220b165a8e734dbf512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:e9:a8:e4:d0:d9:c4:c6:5c:36:c7:13:61:
90:23:5c:15:e3:1b:9e:9a:4b:03:7b:4b:54:09:b8:
0f:12:5b:ff:ab:a0:6b:b4:94:af:b8:a5:cc:8e:9f:
1f:39:83:b9:2b:4f:d0:50:3e:c0:b0:f7:00:a9:39:
c8:ca:f7:58:67:97:b6:f5:12:19:50:3b:61:55:2b:
75:47:0d:32:9f:a1:ac:a9:36:26:fd:95:4b:b2:98:
a1:cb:69:cd:93:99:97:6a:f4:49:3f:66:4a:28:ea:
50:62:e3:d7:f2:1a:7b:b0:f3:66:ed:80:dc:5f:8f:
35:cf:87:1c:da:43:7b:5b:c4:f4:0d:d9:c7:8d:90:
70:41:14:55:2b:89:1d:5e:06:df:a7:6b:9f:fc:1b:
21:94:d4:1a:3d:fa:93:d2:3a:c8:93:3f:aa:a6:59:
01:4c:13:a8:e6:8f:5a:be:e1:b9:69:bc:14:54:fb:
4f:1e:8f:dc:e9:66:25:f0:7e:9d:c1:1b:dd:5c:df:
a0:a1:b7:4a:a6:51:a0:a0:28:b7:38:14:f3:1c:af:
68:fb:04:3d:a6:f7:ea:a0:aa:ab:a0:ed:47:a6:12:
67:03:fb:52:b7:5a:99:97:41:85:12:e4:44:10:c2:
78:97:81:f8:71:9b:db:14:8e:95:52:5f:54:08:54:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:2A:02:84:6D:AB:D8:6A:75:E2:20:B1:65:A8:E7:34:DB:F5:12
X509v3 Authority Key Identifier:
keyid:6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/uakqAoRtq9hqdeIgsWWo5zTb9RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.132.0/22
Signature Algorithm: sha256WithRSAEncryption
93:eb:9e:71:3a:27:13:e2:93:7a:e3:fe:43:68:f9:9f:17:36:
81:b0:04:73:ee:9b:73:f0:23:51:74:56:50:41:c9:f0:7a:12:
6a:1e:9d:7f:04:33:a1:98:69:e5:c9:ea:48:7b:a6:9b:8c:0e:
81:a9:53:f0:87:b7:03:5f:7c:b3:ae:74:08:3d:55:a2:7e:ce:
3e:4a:5c:80:d5:cc:e7:2f:ae:64:35:41:42:b9:9c:36:ab:8a:
b6:9a:b1:52:a2:65:f3:2f:9c:f7:3d:17:8f:90:cc:ee:ee:19:
1b:65:7c:8c:a1:e6:00:b6:f1:f8:8b:22:ac:f5:54:9d:1a:1c:
32:b2:26:b0:71:88:8a:b9:9f:ac:a5:3b:51:c0:18:dd:23:30:
e1:76:31:36:d6:7a:b2:01:ac:66:72:63:68:cc:ff:36:7d:8d:
57:59:91:58:ae:55:f3:a1:70:cb:72:04:4a:6b:23:b9:30:89:
7a:2e:54:10:39:45:81:18:80:72:b5:5b:c1:da:05:6d:72:1a:
e9:22:1f:6e:8d:4c:a6:ae:6e:6d:c4:67:0e:43:76:6e:a8:64:
74:78:93:e0:74:8d:2a:9d:f5:da:fd:9b:64:7c:46:b7:6f:81:
88:69:b8:4a:2b:a9:47:0c:5b:97:a4:9c:ca:d5:ff:8c:2a:b0:
4e:32:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:19 2024 by rpki-client on console-ams.rpki-client.org