Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/1Ulyp9XPk6PoJbMgwdWeX_Clhv4.roa
File: 1Ulyp9XPk6PoJbMgwdWeX_Clhv4.roa (raw, json)
Hash identifier: WQ0ksCLLipZWuHcegqNFFGt1WuDn6RDvHE9TdtgC8Ms=
Subject key identifier: D5:49:72:A7:D5:CF:93:A3:E8:25:B3:20:C1:D5:9E:5F:F0:A5:86:FE
Certificate issuer: /CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Certificate serial: 021C1607
Authority key identifier: BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/1Ulyp9XPk6PoJbMgwdWeX_Clhv4.roa
Signing time: Sat 01 Jan 2022 11:04:23 +0000
ROA not before: Sat 01 Jan 2022 11:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.69.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35395079 (0x21c1607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba99d4db12e4f0b002f60e92cc533e6f882d1508
Validity
Not Before: Jan 1 11:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d54972a7d5cf93a3e825b320c1d59e5ff0a586fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b5:d8:34:04:11:d4:67:f6:45:fa:9a:58:c8:
5e:05:80:eb:19:2b:e9:9f:51:c8:d4:b9:43:fa:46:
60:d3:37:73:1b:12:74:b7:cc:63:d2:be:ea:46:7e:
a1:86:80:21:40:13:36:df:b1:22:f2:3d:91:73:d6:
f0:ca:da:d0:fd:c3:d5:e6:b2:35:40:23:f5:c1:77:
3c:41:db:1b:1f:75:8e:e4:08:41:df:e8:71:93:58:
6a:76:8b:ce:9e:7d:53:71:8c:97:5e:a5:20:3c:35:
a9:c7:8c:3a:62:05:cd:bd:85:60:8d:2a:3b:26:1a:
b8:c3:32:14:c7:51:a8:7d:5a:49:f8:6b:6b:70:d5:
98:8a:88:e7:f9:aa:ba:c2:ab:27:07:fd:23:7b:6d:
2c:57:d7:39:aa:fc:15:73:8f:0a:7b:23:cd:b2:f3:
5d:0d:c8:1d:59:33:ac:91:55:99:c0:37:68:85:88:
a6:b2:7c:ee:68:6d:07:46:61:7c:8c:72:b0:4d:e6:
a3:99:b4:2c:80:95:7e:3f:a9:48:47:14:df:0b:4a:
06:90:29:79:8e:b2:b2:a6:a4:8e:e9:50:be:67:60:
2e:70:e2:14:95:71:2b:5c:98:43:68:07:5c:1c:75:
8c:fa:b7:b6:a7:b2:5f:b6:76:fc:66:37:bf:a4:ee:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:49:72:A7:D5:CF:93:A3:E8:25:B3:20:C1:D5:9E:5F:F0:A5:86:FE
X509v3 Authority Key Identifier:
keyid:BA:99:D4:DB:12:E4:F0:B0:02:F6:0E:92:CC:53:3E:6F:88:2D:15:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upnU2xLk8LAC9g6SzFM-b4gtFQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/1Ulyp9XPk6PoJbMgwdWeX_Clhv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2f516d-96c9-4bf2-81c8-8b48f3f40625/1/upnU2xLk8LAC9g6SzFM-b4gtFQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
90:37:f1:52:db:b7:22:a2:f4:53:bc:fc:ef:d3:ba:09:e4:d6:
fc:c0:cb:78:d4:a0:21:a4:ac:49:89:d6:52:9f:cc:c9:ca:8e:
4e:44:1e:67:0e:5f:0f:bd:58:6e:d4:84:da:de:0d:1d:d1:db:
8f:35:69:24:b4:4c:12:bf:56:c7:bf:95:8d:ae:78:dc:e4:3c:
a7:c1:a3:ad:6f:bf:0b:26:3e:09:81:73:a3:c6:be:8a:60:c5:
5c:2f:97:c0:3b:db:41:a1:b7:0f:e0:94:07:c6:c9:a1:60:6a:
49:01:99:e1:84:3d:09:38:f7:05:fe:0d:bf:e3:f2:c8:96:6a:
ff:e2:59:48:4d:45:a6:41:6d:41:0b:1b:24:75:c5:9c:32:2a:
3d:33:31:75:30:b4:4f:b9:fc:d2:41:82:a3:c1:88:38:77:6a:
46:90:20:d3:f6:cc:d1:67:25:ea:52:28:c5:2a:95:b6:4e:ee:
25:f2:5d:71:e6:ed:70:08:3b:81:de:70:ff:c8:30:34:dc:ee:
08:5f:52:0b:6b:44:94:56:99:4c:db:5c:02:e9:42:80:15:80:
6a:fa:1f:af:67:86:9f:18:17:7c:89:3f:90:d8:f4:ea:6d:e2:
d5:e4:8f:f7:4e:44:13:f4:d5:f1:01:9c:6e:e7:98:bc:54:66:
70:8d:5c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:39 2024 by rpki-client on console-fra.rpki-client.org