Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/UD_YSUVrOk2DMKtNDLfYfwAaD8Q.roa
File: UD_YSUVrOk2DMKtNDLfYfwAaD8Q.roa (raw, json)
Hash identifier: Aw4EBUkQx1N/4pDTZNyrEevc9w8QYFvduRvDKmuqZSk=
Subject key identifier: 50:3F:D8:49:45:6B:3A:4D:83:30:AB:4D:0C:B7:D8:7F:00:1A:0F:C4
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 147808FE
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/UD_YSUVrOk2DMKtNDLfYfwAaD8Q.roa
Signing time: Wed 18 May 2022 12:13:16 +0000
ROA not before: Wed 18 May 2022 12:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56655
IP address blocks: 45.88.201.0/24 maxlen: 24
45.88.200.0/24 maxlen: 24
185.243.217.0/24 maxlen: 24
185.243.216.0/24 maxlen: 24
185.243.218.0/24 maxlen: 24
185.181.60.0/22 maxlen: 24
185.125.168.0/22 maxlen: 24
2a03:94e3::/32 maxlen: 32
2a03:94e1::/32 maxlen: 32
2a0a:cd80::/32 maxlen: 32
2a03:94e2::/32 maxlen: 32
2a03:94e0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343410942 (0x147808fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: May 18 12:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=503fd849456b3a4d8330ab4d0cb7d87f001a0fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:24:1e:c5:fc:4d:69:d3:e3:5c:42:f9:ea:
66:58:16:da:04:83:21:01:17:c3:c7:38:01:27:03:
68:06:02:e9:5b:74:00:44:f6:7b:66:91:d1:c8:59:
a4:14:30:55:fa:18:e3:43:95:88:a4:f3:d4:58:0e:
ed:cc:1a:ae:90:09:f8:fc:d9:61:81:40:eb:1f:3d:
d5:4b:48:d3:1e:98:f6:9d:b1:5f:a1:32:14:0e:28:
e2:56:82:46:fb:2e:c0:3e:22:fe:a9:23:c6:8a:f1:
8a:b2:b3:a3:e6:cb:52:11:af:03:86:8c:65:65:6a:
10:5b:9c:05:63:e6:0c:7e:3b:07:8f:86:66:82:2b:
e1:2b:0f:09:25:ff:47:99:2c:dd:5b:a2:b2:6d:6a:
9f:af:78:dd:12:e8:b6:08:79:b0:81:5a:97:dd:bc:
10:48:53:e0:d1:d4:d6:b0:4f:6f:43:ab:6c:03:f9:
f4:45:fe:83:9d:c6:32:74:70:f6:73:3a:8c:1c:d0:
5a:69:73:21:2a:86:a3:50:11:d6:e5:57:46:c9:7d:
d1:d7:76:1f:ef:02:24:96:a7:e9:55:9e:0d:ac:1f:
1f:47:f2:53:93:3c:48:9a:e7:f0:72:15:dc:78:59:
b2:59:0e:39:82:58:70:8c:5f:4d:95:dc:15:d1:68:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3F:D8:49:45:6B:3A:4D:83:30:AB:4D:0C:B7:D8:7F:00:1A:0F:C4
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/UD_YSUVrOk2DMKtNDLfYfwAaD8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0/23
185.125.168.0/22
185.181.60.0/22
185.243.216.0-185.243.218.255
IPv6:
2a03:94e0::/30
2a0a:cd80::/32
Signature Algorithm: sha256WithRSAEncryption
14:02:c5:e3:61:09:e1:77:1d:66:6a:31:78:f4:81:f6:f0:fd:
1e:2b:8a:39:3d:02:b1:c3:14:e2:04:73:e9:31:7c:5c:e4:fb:
08:26:99:ee:3e:8c:e0:87:78:c8:8b:c2:5a:bf:ba:4e:e1:ea:
67:c9:55:3e:4a:75:fc:69:1b:dc:24:92:56:81:23:bd:96:0d:
d1:95:bc:96:45:7f:e1:8f:18:52:34:bb:35:90:55:b1:0c:7c:
b9:12:30:2b:35:13:1d:aa:08:e0:2b:65:dc:4a:f8:93:3b:74:
12:4b:a8:f9:38:40:df:6d:89:fb:35:3e:2f:d8:19:c1:8b:27:
4c:22:52:a0:3e:aa:a8:88:b0:16:42:b9:df:c8:c0:a1:67:e0:
90:7a:87:a7:d2:a7:86:25:24:b6:22:c4:15:20:f0:8f:e5:47:
90:ec:b9:2d:6b:85:14:21:fa:a4:19:0f:41:f2:38:16:19:6d:
bf:f8:bf:da:32:34:99:15:30:6f:8f:5d:66:55:ac:37:6b:d7:
3f:c0:14:4a:43:c1:75:e7:88:bb:06:f8:85:9f:74:50:be:3f:
34:92:eb:8f:e5:d0:0a:45:08:6f:c9:e7:9a:88:27:e5:a1:ce:
f1:a7:ba:b8:0a:78:ce:a6:c4:57:5b:3a:a6:c0:73:d9:34:1d:
f6:39:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org