Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/UzVvLhPyu14SsBcSnkMCo20v4Xc.roa
File: UzVvLhPyu14SsBcSnkMCo20v4Xc.roa (raw, json)
Hash identifier: M/qZu60kvisaWIe96or7zQfi7VbQIzGhgdZkPu/ePto=
Subject key identifier: 53:35:6F:2E:13:F2:BB:5E:12:B0:17:12:9E:43:02:A3:6D:2F:E1:77
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 0EE53AC2
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/UzVvLhPyu14SsBcSnkMCo20v4Xc.roa
Signing time: Sat 01 Jan 2022 13:56:02 +0000
ROA not before: Sat 01 Jan 2022 13:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47557
IP address blocks: 185.68.44.0/24 maxlen: 24
185.68.46.0/24 maxlen: 24
185.68.45.0/24 maxlen: 24
91.206.20.0/24 maxlen: 24
2a07:c880::/29 maxlen: 29
2a07:c883::/32 maxlen: 32
2a07:c881::/32 maxlen: 32
2a07:c882::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249903810 (0xee53ac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jan 1 13:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53356f2e13f2bb5e12b017129e4302a36d2fe177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:48:40:90:29:06:c0:36:e0:8b:7f:f5:48:
4d:07:fb:08:4c:4e:fd:81:75:f8:e2:d1:1b:bc:98:
31:20:2f:72:42:90:b4:a3:97:93:83:35:11:9b:78:
c2:8d:8f:a8:0a:2a:8a:3e:6c:f8:24:83:88:25:e6:
76:27:17:55:83:8b:50:ee:62:18:5c:a9:6a:92:b3:
69:da:2f:ec:99:2c:2d:50:d9:9f:af:90:0e:6e:60:
25:7f:3f:6a:ab:f8:35:be:2a:9d:54:27:22:7f:30:
8f:c6:54:97:76:04:dc:98:aa:61:99:d6:06:8c:10:
a4:61:72:5b:65:1e:52:55:9f:42:d7:5e:a3:a7:03:
cd:27:3c:8a:1c:b4:b7:86:5b:0d:dc:97:97:ef:50:
ec:13:4e:7b:1d:5e:1a:3e:f4:ea:9c:bb:8f:17:c3:
04:bf:26:6e:8d:8a:0f:77:1a:13:75:b2:96:0f:b0:
2f:73:47:fa:94:6c:cc:e7:92:fd:b0:2c:79:87:b8:
58:d5:a0:7c:21:3e:82:9a:0f:d6:4d:78:52:07:f4:
28:d1:6a:e1:7d:c1:55:34:41:31:b0:01:2f:93:31:
9c:09:20:ff:8f:5c:c7:f7:79:12:68:19:5e:ab:ef:
2e:58:06:07:d3:3e:16:8c:2a:12:04:61:86:db:ab:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:6F:2E:13:F2:BB:5E:12:B0:17:12:9E:43:02:A3:6D:2F:E1:77
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/UzVvLhPyu14SsBcSnkMCo20v4Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.20.0/24
185.68.44.0-185.68.46.255
IPv6:
2a07:c880::/29
Signature Algorithm: sha256WithRSAEncryption
c0:67:43:53:71:ce:36:41:55:ac:0e:fe:c6:ad:9f:21:a2:16:
06:43:b5:7d:18:7c:ea:0f:60:6a:c7:f2:d3:40:ed:45:09:25:
ff:f3:26:f6:8d:c4:63:27:e9:2a:23:20:62:60:46:10:9b:40:
6e:df:86:19:54:66:95:5a:3f:1e:aa:64:5e:6c:ca:d9:88:44:
64:f7:1e:fd:34:ce:b5:aa:d3:2d:d5:41:e6:61:96:c3:07:25:
70:e8:89:50:fc:db:8e:52:39:d4:55:85:99:57:cf:68:bd:96:
03:fb:4f:2c:eb:90:47:ea:82:a4:a9:a8:07:57:7b:80:d5:e5:
3a:95:c1:16:8b:57:0c:fa:b4:16:15:f4:62:f8:84:44:7f:d5:
72:b8:7f:6c:8e:f3:85:78:ea:9e:02:80:9c:f7:7f:a4:df:e7:
b0:0b:be:bf:ad:6d:70:a9:2a:51:be:2c:b2:87:74:3e:73:84:
a1:24:f9:57:3a:ea:45:e9:4f:4f:aa:9f:92:41:24:14:1e:1c:
fb:45:cc:94:53:b4:8d:04:d7:42:fb:40:03:70:b3:bc:fa:1c:
14:a7:27:31:12:3e:ca:b9:c4:37:a2:fd:d7:40:f8:c6:f6:7d:
b8:1d:56:aa:95:d5:7f:7a:c2:85:18:e0:2e:5e:72:38:a0:10:
bf:c8:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:39 2024 by rpki-client on console-fra.rpki-client.org