Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/uBA3Bc0aTjdrYaVHCyrWA5BUdWY.roa
File: uBA3Bc0aTjdrYaVHCyrWA5BUdWY.roa (raw, json)
Hash identifier: IFZ8Ktn9UJHL1iiAjFQzlo4jrgpNLwgo0Qb+KgHQwlw=
Subject key identifier: B8:10:37:05:CD:1A:4E:37:6B:61:A5:47:0B:2A:D6:03:90:54:75:66
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 08C675F6
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/uBA3Bc0aTjdrYaVHCyrWA5BUdWY.roa
Signing time: Mon 27 Jun 2022 12:52:31 +0000
ROA not before: Mon 27 Jun 2022 12:52:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 185.144.56.0/22 maxlen: 24
83.229.113.0/24 maxlen: 24
45.95.40.0/22 maxlen: 22
83.229.23.0/24 maxlen: 24
188.191.48.0/22 maxlen: 22
5.22.204.0/22 maxlen: 22
217.194.153.0/24 maxlen: 24
83.229.34.0/24 maxlen: 24
45.130.100.0/22 maxlen: 22
95.178.107.0/24 maxlen: 24
45.10.16.0/22 maxlen: 22
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147224054 (0x8c675f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jun 27 12:52:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8103705cd1a4e376b61a5470b2ad60390547566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:a8:12:75:4d:fb:7e:2c:5d:90:dd:4a:79:
e3:0f:c3:ac:bb:f9:24:d0:61:b1:39:62:20:44:5c:
1d:20:0e:2a:ab:66:a9:19:be:c1:b6:65:3d:06:6f:
37:e6:fd:a0:f8:13:4e:e4:04:94:3a:44:d0:df:bd:
4f:5a:56:a3:d8:d4:75:c6:b7:be:76:fa:8d:43:c9:
fc:a5:2c:e5:68:f3:58:06:9d:fe:86:e1:87:eb:44:
92:e7:c3:d6:ae:e2:e8:2a:14:c0:98:74:e6:6e:9e:
dc:6e:f4:85:3a:db:44:e0:d2:a0:34:48:7d:4b:bd:
50:67:32:ce:bd:9f:73:a5:e8:89:9f:bb:c8:fb:40:
41:34:c7:c3:93:22:84:8f:72:82:e9:fb:60:bd:d3:
6f:29:fb:af:86:b9:33:61:af:c7:7f:16:a4:43:9c:
f2:b4:e2:bf:ae:51:0c:12:a4:15:23:ee:ac:f0:2a:
c7:0c:49:9b:7f:0d:f4:e6:49:06:46:e4:8d:0c:c9:
c2:da:9a:ff:88:53:83:24:f0:56:3b:e1:b4:66:83:
b9:f0:fa:c4:ea:fd:5b:3a:ad:d1:d7:49:2c:9d:bb:
23:e8:15:20:86:a6:40:a9:57:b1:77:a8:95:fb:09:
a8:38:37:a4:7a:9d:b2:eb:32:62:21:d3:5e:f6:78:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:10:37:05:CD:1A:4E:37:6B:61:A5:47:0B:2A:D6:03:90:54:75:66
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/uBA3Bc0aTjdrYaVHCyrWA5BUdWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.204.0/22
45.10.16.0/22
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
83.229.23.0/24
83.229.34.0/24
83.229.113.0/24
95.178.107.0/24
185.144.56.0/22
188.191.48.0/22
217.194.153.0/24
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
94:dc:08:16:ac:25:a0:ba:94:72:52:df:44:12:9f:aa:14:58:
d2:00:30:e8:2f:72:59:39:f0:d3:24:f4:cf:56:aa:70:e8:99:
95:3d:6e:90:70:b4:85:e3:46:3d:94:a9:61:e9:6c:cb:98:82:
d3:94:3a:e9:d6:57:17:36:64:d3:fa:d0:24:e9:49:67:0e:27:
11:0b:27:0d:21:8c:b6:5d:87:08:c1:35:95:fe:f5:37:7c:f9:
94:16:74:54:c3:14:e3:b9:45:7e:12:55:b3:f0:0a:63:b5:16:
5a:34:89:64:77:3a:05:75:3f:60:a1:9b:4e:10:71:e2:73:a0:
6b:00:d6:88:f7:bc:4b:1a:8e:47:34:d0:cf:ce:cf:0e:4e:85:
c0:49:9b:98:d3:38:8c:20:98:1e:40:9c:96:b0:61:b6:e5:f7:
2e:f9:a8:f8:db:ae:b5:73:06:21:fc:81:60:04:7f:56:0c:57:
f1:32:1b:cc:9c:b5:99:d8:eb:fd:4e:d2:9c:e3:37:39:99:9f:
2a:ae:6f:89:80:be:c4:48:8f:88:1e:4c:66:f8:d0:0c:50:80:
27:9b:60:cc:a2:b0:e8:74:a6:ed:b6:f2:c8:37:15:d1:96:2c:
10:e4:19:c9:c1:39:29:5c:6f:22:2b:65:fe:5d:68:e4:d7:d3:
e8:ec:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org