Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/uujCTOo5o0FIpHh-KZm6-qYq5r0.roa
File: uujCTOo5o0FIpHh-KZm6-qYq5r0.roa (raw, json)
Hash identifier: odRmbPXEjTt5IT4L3Uo+OOONGjMMJdQVwCNTYWOFkr8=
Subject key identifier: BA:E8:C2:4C:EA:39:A3:41:48:A4:78:7E:29:99:BA:FA:A6:2A:E6:BD
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 08BAAAF7
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/uujCTOo5o0FIpHh-KZm6-qYq5r0.roa
Signing time: Mon 14 Mar 2022 16:32:08 +0000
ROA not before: Mon 14 Mar 2022 16:32:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199669
IP address blocks: 185.195.170.0/23 maxlen: 24
91.109.200.0/21 maxlen: 24
46.29.118.0/23 maxlen: 24
185.10.44.0/24 maxlen: 24
185.10.44.0/22 maxlen: 24
2a03:ec0::/48 maxlen: 64
2a03:ec0:1::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146451191 (0x8baaaf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Mar 14 16:32:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bae8c24cea39a34148a4787e2999bafaa62ae6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:9c:a1:61:71:30:b0:e7:74:e5:22:47:4f:
f2:91:7a:f4:b1:56:25:bd:3a:94:5f:b6:0a:e6:9f:
84:17:bc:4c:05:37:13:57:ad:86:9d:11:1a:50:a4:
ca:ce:57:4b:f8:5b:4a:e0:b5:c9:7c:ba:0a:89:5b:
b8:f7:ad:f3:ce:11:cd:87:05:02:96:83:54:44:54:
74:e9:94:d7:23:e7:08:95:2f:a9:ff:0e:6c:e2:5b:
1d:5b:81:66:da:f3:d5:ff:63:72:d4:f8:32:be:b0:
fd:f8:ca:fc:32:c5:f4:71:49:b5:cf:18:6d:b3:01:
9d:1a:5a:5c:1e:5f:0d:0e:c6:ba:a5:13:ad:93:40:
78:32:92:05:74:b0:2c:5c:00:90:9a:f5:56:ae:b6:
07:d8:db:66:13:2f:a4:ca:92:68:f9:b4:0b:13:a6:
15:53:ce:bd:5e:97:7b:7f:0d:05:e7:6c:9e:59:e6:
42:9f:0d:c5:4e:f1:7c:d5:f4:62:f4:95:70:b2:4a:
15:81:ef:00:0f:3c:6a:04:56:61:31:58:77:67:01:
40:63:3c:ea:e7:58:7f:eb:3d:21:e3:b9:f7:ac:de:
f4:7d:91:52:3f:01:14:cf:ec:d1:d8:cd:e4:26:fe:
e9:85:e1:76:28:63:97:1d:e6:c8:5d:51:21:03:4d:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:C2:4C:EA:39:A3:41:48:A4:78:7E:29:99:BA:FA:A6:2A:E6:BD
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/uujCTOo5o0FIpHh-KZm6-qYq5r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.118.0/23
91.109.200.0/21
185.10.44.0/22
185.195.170.0/23
IPv6:
2a03:ec0::/47
Signature Algorithm: sha256WithRSAEncryption
93:cf:d0:cf:fd:76:52:54:d8:93:86:dc:fb:9b:74:24:0d:9e:
bd:cc:45:87:a3:4c:32:5b:37:04:c9:3d:d7:13:bd:a1:20:bc:
94:0c:ae:16:2c:49:f2:a5:23:9e:31:32:54:6c:fe:90:29:3c:
26:c1:33:fc:e3:f5:f9:a2:07:7b:82:cc:8b:51:d6:07:d6:7f:
8a:b4:66:33:84:8a:b6:8c:32:9c:92:88:46:4c:9e:0e:74:0d:
89:38:67:76:cc:9d:bd:87:40:de:ce:6d:01:07:ed:ee:96:c6:
18:27:a8:a6:75:fe:4c:3a:01:cb:12:a8:0c:30:9a:3e:b8:92:
7c:80:af:8f:5d:15:58:f1:89:62:27:93:8e:de:72:75:6b:4b:
ad:2a:f9:70:e1:63:08:00:bc:b8:18:c1:e2:75:7f:7b:a1:37:
3a:6d:3b:36:12:d6:13:f5:da:ae:68:10:43:5d:02:91:8a:f0:
63:82:37:ed:40:47:17:a0:39:11:87:65:7a:db:fb:b1:3a:0b:
80:0c:0d:ce:d8:8a:d3:1d:08:86:e9:14:4f:70:c7:0e:7f:ac:
4b:4e:7a:6e:10:99:60:5c:bc:82:27:26:17:e2:14:2b:e1:fd:
ee:ff:03:de:4d:b8:f8:a5:dc:f6:73:0a:02:a1:e1:5b:a3:c4:
d3:d4:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org