Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/ubMbnuywddKbUNGKzZ9hhKjMThM.roa
File: ubMbnuywddKbUNGKzZ9hhKjMThM.roa (raw, json)
Hash identifier: mOPoecCE12Mb7bb4FKkj2pFsi/iwrRqox3r8YtnWv4I=
Subject key identifier: B9:B3:1B:9E:EC:B0:75:D2:9B:50:D1:8A:CD:9F:61:84:A8:CC:4E:13
Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial: 2184CA41
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/ubMbnuywddKbUNGKzZ9hhKjMThM.roa
Signing time: Sat 01 Jan 2022 13:58:29 +0000
ROA not before: Sat 01 Jan 2022 13:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197164
IP address blocks: 192.162.230.0/24 maxlen: 24
185.114.124.0/22 maxlen: 24
192.162.228.0/23 maxlen: 24
2001:67c:2274::/48 maxlen: 48
2a06:6f00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562350657 (0x2184ca41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
Validity
Not Before: Jan 1 13:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9b31b9eecb075d29b50d18acd9f6184a8cc4e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:7a:4c:11:f7:b5:6e:4f:d7:f2:47:3a:16:
9f:27:08:99:cb:11:9a:a0:e2:ff:70:80:8e:94:6b:
c5:d0:57:51:8f:6d:0e:a5:40:66:8c:16:b9:21:ff:
c5:17:22:af:30:b6:46:40:fa:2e:10:6e:90:21:ff:
c5:fe:fc:ec:8f:70:c0:9e:72:7b:30:26:51:c3:2e:
2e:8c:01:b4:0c:75:de:19:49:bb:44:69:a1:4f:0e:
aa:9c:f7:23:ea:c8:1b:08:a5:ff:97:2d:6c:5d:dc:
b0:5c:56:d4:7e:9e:60:23:8d:b2:a9:1f:86:ad:f6:
cf:59:9c:50:59:1a:8b:62:51:11:e2:e5:64:2f:f5:
4e:ec:08:64:89:2a:b4:28:91:5b:84:ef:5b:f6:54:
6b:cb:a6:ec:62:a9:92:e7:30:0b:ef:2e:42:2e:9b:
4d:b4:93:9f:30:d3:bc:bd:a5:e3:b4:16:c1:f2:6c:
74:ca:dd:f7:e0:d7:a6:cf:08:5c:77:d4:14:7f:ea:
51:89:fd:52:37:bc:b8:19:8d:ec:4c:05:e6:32:98:
8d:ba:3d:da:7b:7f:ba:91:47:63:17:17:45:ec:05:
7e:cb:3b:c1:c7:fb:cf:cc:cc:58:77:a4:cb:08:7a:
5f:25:d7:4c:c5:da:a4:93:ca:4d:a4:7f:71:40:94:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:1B:9E:EC:B0:75:D2:9B:50:D1:8A:CD:9F:61:84:A8:CC:4E:13
X509v3 Authority Key Identifier:
keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/ubMbnuywddKbUNGKzZ9hhKjMThM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.124.0/22
192.162.228.0-192.162.230.255
IPv6:
2001:67c:2274::/48
2a06:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
9e:30:63:aa:0d:5e:ab:85:98:f5:33:a6:42:14:26:b4:73:45:
0c:a5:70:af:72:7d:8f:ed:a8:ae:0b:ce:c6:bc:19:45:9d:13:
c1:1f:2f:7c:89:3c:47:59:5c:16:7b:53:36:b3:fb:18:b1:84:
25:72:cb:c6:67:ba:c5:88:84:b9:81:c6:97:06:20:03:c4:84:
fe:ba:5d:5c:74:9a:5a:1a:d8:b2:31:fb:aa:f4:73:a5:c9:a1:
5a:1c:5f:1d:7b:63:18:60:2b:8a:fc:7a:01:85:ca:dd:01:49:
a8:15:c8:fd:b7:30:24:49:fe:32:f6:dd:07:0a:15:83:90:93:
02:41:60:51:2f:86:0e:0f:69:69:ed:b6:6e:5d:d8:9d:2a:e1:
63:ef:d4:da:83:2b:40:4e:22:0c:f7:c4:75:f4:3e:fe:04:0b:
d9:1f:52:c3:1a:b3:02:8c:79:ff:c0:e9:8f:e1:3b:fe:13:b5:
72:c0:1e:67:ed:9b:91:e0:c7:29:88:c9:2a:0d:ab:c6:15:aa:
24:ba:ae:9b:b1:b4:65:cf:b7:43:e2:7d:14:ca:53:7f:fd:d6:
c1:af:75:3f:5d:77:f3:29:e3:7b:4d:e3:b9:db:48:87:06:73:
17:5a:fc:48:37:77:40:b1:31:04:67:35:9f:8d:e7:e9:1a:ff:
3d:fd:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-ams.rpki-client.org