Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/ud6g3H8X-6VE_R-pwFv8WGZ3U68.roa
File: ud6g3H8X-6VE_R-pwFv8WGZ3U68.roa (raw, json)
Hash identifier: nnT9hx1JJTDn8Q3TP56WYkR/5HvcjzDKmef4E7OAs+4=
Subject key identifier: B9:DE:A0:DC:7F:17:FB:A5:44:FD:1F:A9:C0:5B:FC:58:66:77:53:AF
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 01839D4B6BC29B4D3CC1792090164B2E53C0
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/ud6g3H8X-6VE_R-pwFv8WGZ3U68.roa
Signing time: Mon 03 Oct 2022 10:01:49 +0000
ROA not before: Mon 03 Oct 2022 10:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202196
IP address blocks: 185.150.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:4b:6b:c2:9b:4d:3c:c1:79:20:90:16:4b:2e:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Oct 3 10:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9dea0dc7f17fba544fd1fa9c05bfc58667753af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:36:59:be:ba:31:1f:d3:6e:be:63:21:87:
62:5d:b5:4f:41:ee:49:d6:0e:c3:b9:cb:a2:ce:6d:
ff:90:ac:f5:85:a0:f1:8c:20:c1:8b:10:a7:43:f7:
61:12:16:74:bc:11:a5:98:89:6f:d3:d7:41:2c:09:
98:f1:86:2c:2b:14:bc:2b:60:bc:93:08:05:96:70:
0d:41:77:8f:a8:68:6d:ef:9a:a8:c4:97:32:c8:8b:
49:78:b2:7b:09:5b:fa:63:6e:85:d7:8a:88:bc:99:
1f:21:c4:aa:e9:08:e7:1d:86:8d:2c:80:d7:93:aa:
a2:91:64:28:df:b2:c5:74:fa:de:de:0f:12:59:47:
cf:ff:d8:58:f8:7d:f9:b8:85:3d:34:0d:48:66:46:
04:d9:a1:e7:6d:f1:e8:0b:4a:98:c7:9c:43:4f:4b:
9a:cc:e4:f6:8f:67:8b:04:3d:d6:57:26:a4:30:3d:
7d:c0:a8:bf:49:6b:db:7c:c8:08:08:0e:2d:5a:8b:
2a:5d:e6:97:0a:7c:d7:8b:60:29:19:c6:32:0f:4d:
3f:ad:53:22:2c:41:0f:f1:91:38:4e:e0:44:9a:0b:
82:d0:b4:de:63:57:ca:05:e8:88:22:a9:69:e7:49:
d0:b8:d2:91:2f:11:27:a8:ca:38:c2:31:e5:5d:2d:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DE:A0:DC:7F:17:FB:A5:44:FD:1F:A9:C0:5B:FC:58:66:77:53:AF
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/ud6g3H8X-6VE_R-pwFv8WGZ3U68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.63.0/24
Signature Algorithm: sha256WithRSAEncryption
18:dd:3b:78:c3:b0:dc:6d:6c:ae:20:87:94:29:67:24:ae:95:
8c:33:22:63:97:2b:82:cb:fe:5e:89:c6:11:b5:2a:0e:11:f3:
af:f8:d5:79:a2:8c:0d:dc:84:89:9b:75:af:6c:3e:21:2b:37:
73:f8:c1:31:b9:92:00:9e:ca:fe:6c:80:38:e6:2c:5e:71:4b:
6e:12:bc:15:6e:a2:76:a9:ff:17:0f:22:28:d0:f3:83:e9:c7:
97:73:42:f1:aa:94:bc:3a:50:9a:78:db:fc:36:2b:c8:3e:ee:
95:49:44:b4:83:81:5f:51:45:dd:9e:06:a9:c2:6a:a4:99:8c:
8c:ec:b1:0f:24:3b:96:66:8f:1e:89:7e:62:49:cb:9f:02:c1:
c7:2b:02:13:7c:c8:d7:50:5e:fe:3b:f8:17:0d:f9:b1:51:33:
4d:ea:fe:f9:30:83:d5:2c:31:89:55:8f:72:fa:b4:0f:ad:0d:
f7:fc:dc:1b:3f:e1:ad:4c:fa:1c:ab:82:30:e6:b6:90:a7:f5:
ed:9c:66:e3:b8:4e:bd:1f:ff:15:03:87:0e:a7:be:98:6f:ee:
ff:46:53:fd:e0:4c:c1:3d:17:cb:22:ed:90:1e:2c:55:40:fb:
24:f2:d2:4e:93:fd:23:e3:0d:4c:cc:c7:5d:73:62:70:79:90:
72:62:f8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org