Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/8uc4Lu5fw9Kx7rj7KVxnD3suTqM.roa
File: 8uc4Lu5fw9Kx7rj7KVxnD3suTqM.roa (raw, json)
Hash identifier: UKqBsNW6MIh+BGzoKYsL3a/H0og/Dwc30gMlFxUMN3M=
Subject key identifier: F2:E7:38:2E:EE:5F:C3:D2:B1:EE:B8:FB:29:5C:67:0F:7B:2E:4E:A3
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 16FA509E
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/8uc4Lu5fw9Kx7rj7KVxnD3suTqM.roa
Signing time: Fri 15 Apr 2022 11:53:45 +0000
ROA not before: Fri 15 Apr 2022 11:53:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.67.69.0/24 maxlen: 24
194.67.95.0/24 maxlen: 24
185.182.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385503390 (0x16fa509e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Apr 15 11:53:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2e7382eee5fc3d2b1eeb8fb295c670f7b2e4ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:e9:da:aa:39:3d:9b:17:05:4a:b1:ba:a7:
2e:ce:a2:d9:ef:68:c7:60:6b:0e:e4:6f:1f:4c:81:
12:84:ff:26:34:0e:7c:78:9e:b2:9c:9c:24:b2:55:
37:d7:de:7c:2b:e1:e3:0e:1f:ff:58:6a:75:d0:1a:
27:e1:d1:f1:e2:b0:8c:14:e6:48:5e:9b:ea:f5:72:
ab:1f:7d:30:46:0a:a4:a5:1c:3d:d8:e5:61:d9:e0:
08:52:ca:9e:d5:18:1b:2a:fc:81:71:2d:3e:0a:a0:
da:0d:fe:42:b8:0f:8f:67:fc:88:fa:8b:d3:1a:3b:
b9:a8:29:e2:e5:ec:ed:5d:ec:bc:de:5a:eb:40:7b:
66:43:30:ef:31:0f:4b:92:4c:cc:9c:77:44:46:08:
81:88:98:3f:ef:2f:df:fc:da:92:aa:46:24:e2:4a:
63:51:6e:ce:ce:08:26:6f:e0:ee:38:4e:2b:11:14:
3e:89:63:a9:e8:e6:b3:9a:66:07:da:a0:be:9c:65:
5c:6c:f2:7f:7a:51:f1:1f:6d:87:31:63:68:a1:04:
09:fe:af:3b:54:9a:9e:81:86:16:f1:61:a7:e6:a0:
7f:2b:53:1d:9d:5f:86:70:ee:78:13:c8:dc:92:ad:
bf:b6:95:14:f9:d2:61:a1:24:5c:a5:95:fc:0d:72:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:38:2E:EE:5F:C3:D2:B1:EE:B8:FB:29:5C:67:0F:7B:2E:4E:A3
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/8uc4Lu5fw9Kx7rj7KVxnD3suTqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.108.0/24
194.67.69.0/24
194.67.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:46:c8:32:54:bb:a2:d4:5d:6f:7c:8e:d1:e0:83:83:33:f3:
83:fe:3d:e8:a5:e6:76:a1:49:66:99:15:af:6c:2a:c5:8b:7a:
45:0e:3b:1d:0f:8f:70:8e:33:6a:8a:e7:29:5d:8c:c0:17:f4:
68:a1:92:ee:3b:c0:85:4e:68:fb:a7:00:bb:a1:7c:f1:4a:be:
36:f5:37:1b:1e:16:78:09:90:43:c2:2d:1d:ab:96:b2:11:71:
dd:66:18:ca:bc:f0:dd:d6:7b:64:14:76:38:11:e0:8e:aa:0b:
71:fc:4d:94:d7:8c:a4:da:3d:59:fe:9e:d1:c6:7b:7c:c5:4a:
0b:74:98:95:98:9f:1d:1e:07:13:fa:bf:3c:69:0d:53:e3:b5:
ea:05:28:fb:83:21:91:3c:f7:d0:e6:a8:10:a9:e8:01:f4:38:
43:63:2b:33:20:7d:c3:70:a7:98:7d:62:eb:be:d7:0d:5f:21:
72:36:52:93:01:cf:55:cf:b2:8d:b7:d0:b2:fe:eb:28:74:a4:
ab:46:8d:47:2e:78:92:12:35:1b:9b:9c:89:f6:98:1c:73:18:
05:b0:33:5c:31:f0:6b:92:27:2a:0b:52:f2:c5:18:b1:2e:ec:
ad:e6:3a:4c:74:2d:00:28:55:2f:2e:b0:db:6e:26:90:46:63:
02:cd:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org