Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/uiMhBZfZju-DY-ahER3K8HAZB-k.roa
File: uiMhBZfZju-DY-ahER3K8HAZB-k.roa (raw, json)
Hash identifier: M0o3wm5mLt+JhnBv41xHKeMURYYg71D+Hwx1lb1Qd/8=
Subject key identifier: BA:23:21:05:97:D9:8E:EF:83:63:E6:A1:11:1D:CA:F0:70:19:07:E9
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: B97E
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/uiMhBZfZju-DY-ahER3K8HAZB-k.roa
Signing time: Thu 21 Apr 2022 12:41:29 +0000
ROA not before: Thu 21 Apr 2022 12:41:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31543
IP address blocks: 185.110.136.0/22 maxlen: 24
2a06:5680::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47486 (0xb97e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Apr 21 12:41:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba23210597d98eef8363e6a1111dcaf0701907e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:58:d2:ff:28:7f:24:e9:4c:6e:83:b2:cb:
91:d9:ea:3e:b6:5d:ea:de:1f:37:cc:38:5e:32:bf:
4a:4f:65:01:f1:5e:91:93:f5:ad:a1:d0:11:be:7e:
ea:5a:d9:7a:7a:27:d7:a6:22:a1:10:b9:79:f5:8a:
fa:ad:16:05:55:66:ce:9a:48:df:02:23:01:cb:59:
61:04:14:1b:4c:56:19:3f:ac:57:b4:2f:12:c7:e6:
2a:77:37:3d:d9:f2:03:c6:c2:74:27:80:fc:fc:e9:
2d:d0:82:7e:4f:ee:8f:39:36:fb:bb:9b:6b:58:22:
56:7d:8a:0c:99:e3:fb:31:68:44:e6:4c:c9:d9:24:
7c:8b:f7:16:27:a9:a0:8e:31:7b:f4:a6:7d:a0:34:
44:b4:fc:04:e0:91:97:43:04:28:1c:f5:b9:86:fd:
5d:8e:33:13:a9:f1:a0:66:6a:37:d6:23:c0:70:cb:
bd:de:b7:ea:40:cb:14:0a:83:86:55:25:39:27:65:
53:f6:60:bc:fb:4f:e7:b6:7b:2b:d7:ce:90:ae:dc:
25:a5:08:b7:65:b0:c6:09:a4:67:00:90:dd:5d:40:
96:55:bc:54:65:33:cd:86:26:8a:e3:6f:4e:5b:99:
56:42:e3:9e:32:61:67:5e:69:4f:b7:04:cb:b4:ea:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:21:05:97:D9:8E:EF:83:63:E6:A1:11:1D:CA:F0:70:19:07:E9
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/uiMhBZfZju-DY-ahER3K8HAZB-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.136.0/22
IPv6:
2a06:5680::/29
Signature Algorithm: sha256WithRSAEncryption
05:17:e1:05:cb:61:9a:8f:69:3c:30:3c:3f:a3:22:86:dd:fb:
97:7e:1a:52:9d:ad:69:10:70:03:84:52:82:dd:cb:11:c0:fb:
e8:f4:02:22:62:52:65:48:13:3e:48:ba:1d:bf:04:7c:ca:ab:
aa:4f:27:dd:57:f5:93:d3:bb:14:be:77:93:a5:31:7d:f0:b5:
cd:dc:65:67:8d:4b:a8:b1:78:2c:4f:bb:ab:c3:8c:d7:49:50:
fc:29:0f:33:e1:7e:1a:4d:cc:3c:ed:38:2e:b2:30:ef:db:53:
c0:05:f1:c3:40:76:c2:2d:9b:43:cc:6c:db:a1:dc:3c:1e:4f:
f1:e1:d4:5a:01:6c:5b:6d:39:ba:a7:26:da:64:c4:35:f0:c9:
31:d8:17:98:37:7a:f9:7c:ca:34:8d:56:82:b5:bf:f4:8d:b4:
54:d9:00:4e:ad:63:f4:87:c6:b7:75:88:45:cc:b5:c9:75:b4:
35:40:3d:f1:ae:a4:5d:ed:37:d6:6b:22:df:76:7c:c3:2a:4c:
e8:71:31:b7:f3:af:19:e4:45:11:1b:9c:4e:2c:f1:0b:f3:2a:
a2:7b:a8:91:14:44:4b:84:5b:79:24:2a:9b:24:8b:c4:34:7a:
25:ec:c8:d2:8e:02:5c:e4:c5:0a:9b:bb:af:33:91:61:cf:43:
a4:15:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:38 2024 by rpki-client on console-fra.rpki-client.org