Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/u4CDWQLNb57_D-vTNvg_sGJYmMo.roa
File: u4CDWQLNb57_D-vTNvg_sGJYmMo.roa (raw, json)
Hash identifier: 74b5Ko4UxrqztuGz1KEQoGBFD4Fugo8PcdlkJmYDIkg=
Subject key identifier: BB:80:83:59:02:CD:6F:9E:FF:0F:EB:D3:36:F8:3F:B0:62:58:98:CA
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 01853F58CE46E74C24B1F9452EAE72FBC239
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/u4CDWQLNb57_D-vTNvg_sGJYmMo.roa
Signing time: Fri 23 Dec 2022 14:17:42 +0000
ROA not before: Fri 23 Dec 2022 14:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206894
IP address blocks: 185.191.100.0/22 maxlen: 22
185.212.232.0/22 maxlen: 22
185.102.44.0/22 maxlen: 22
45.8.80.0/22 maxlen: 22
185.234.155.0/24 maxlen: 24
2a00:d220::/32 maxlen: 32
2a0b:7e40::/32 maxlen: 32
2a0a:17c0::/29 maxlen: 29
2a0e:1a00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:58:ce:46:e7:4c:24:b1:f9:45:2e:ae:72:fb:c2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Dec 23 14:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb80835902cd6f9eff0febd336f83fb0625898ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:90:a6:9d:09:4d:f7:95:91:0d:5f:4f:35:31:
a0:59:55:65:ec:2b:cc:a2:9c:48:e4:4e:16:98:40:
08:7d:28:7c:62:80:b9:43:04:21:86:96:87:87:61:
12:95:2f:37:f2:8d:0d:e6:51:69:84:1f:ef:8f:9b:
66:0f:94:e7:26:aa:08:f2:ae:73:fb:4f:8d:79:63:
e5:bb:ff:73:64:51:4a:bb:27:4c:b3:3a:36:fc:e5:
69:a5:9c:23:78:4d:bc:11:5b:8b:07:9f:5f:c7:94:
66:46:2b:33:08:22:8b:1a:e6:b1:8c:3f:2c:cc:55:
e3:f2:b6:8a:d3:bd:ad:61:62:30:7c:3e:e4:68:0b:
07:81:30:ba:20:d1:88:e6:cb:15:29:7f:6d:7b:61:
30:aa:cc:fe:8b:9e:1b:fa:53:38:12:55:78:f6:fe:
20:4d:43:47:d1:61:6b:ab:67:de:6f:62:f2:6c:69:
b7:b4:a3:39:1a:09:a4:2b:06:bf:47:15:55:59:28:
68:07:8d:14:f8:7e:fe:b4:d6:12:ff:da:42:28:46:
93:64:63:39:34:7d:cb:58:3d:84:9b:61:d4:cb:18:
29:07:41:79:c7:e4:8a:c2:d9:99:11:6a:49:44:4f:
1b:30:38:9d:79:f8:ac:7d:ba:48:5d:ea:1a:9a:bb:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:83:59:02:CD:6F:9E:FF:0F:EB:D3:36:F8:3F:B0:62:58:98:CA
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/u4CDWQLNb57_D-vTNvg_sGJYmMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.80.0/22
185.102.44.0/22
185.191.100.0/22
185.212.232.0/22
185.234.155.0/24
IPv6:
2a00:d220::/32
2a0a:17c0::/29
2a0b:7e40::/32
2a0e:1a00::/29
Signature Algorithm: sha256WithRSAEncryption
49:40:3a:f3:e4:8a:54:44:ad:a2:a6:a8:ff:59:6a:be:93:ee:
90:51:69:23:41:f7:67:98:85:41:9b:c1:71:8a:69:54:b8:76:
72:de:05:9a:f6:73:25:71:cc:51:af:59:ff:db:0f:14:95:81:
1b:27:b2:d8:96:9f:0c:d2:90:69:e5:50:ce:5a:0f:91:08:76:
ae:ad:7c:eb:15:bd:ef:78:eb:96:cb:69:7c:bf:ea:f5:da:5d:
04:e0:92:07:56:e9:0e:fb:34:74:ea:a6:c9:fd:c4:13:f6:b3:
82:97:79:32:91:3b:2a:63:80:92:0e:0f:be:eb:5c:c6:05:cd:
c6:a0:d0:a4:0c:25:62:92:a2:34:64:9c:bf:18:2f:48:68:a1:
1a:dd:9b:d6:8c:e0:a7:e5:be:6e:59:d0:ad:76:4f:8f:78:cb:
cb:af:62:5b:61:28:fa:16:82:15:d8:de:66:02:89:69:f6:ff:
ed:d4:66:52:2a:44:95:ec:55:28:fe:af:57:97:de:0f:c0:78:
0a:e8:3b:8f:c1:e4:61:be:8f:79:ac:ee:d3:69:5a:a6:0c:f7:
df:64:63:45:c1:ac:06:fb:fe:4d:08:c1:02:69:c7:eb:68:28:
6a:34:77:df:de:b0:9a:20:e8:08:9a:5c:e9:1b:56:60:26:ea:
27:9f:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:41 2024 by rpki-client on console-ams.rpki-client.org