Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uET_GQGZ4IRyJfzjVI5ZfJjhHWg.roa
File: uET_GQGZ4IRyJfzjVI5ZfJjhHWg.roa (raw, json)
Hash identifier: 3Vqz0C2HquNiNy4PioTgktI1qkm4UmgIIN62r2aWxao=
Subject key identifier: B8:44:FF:19:01:99:E0:84:72:25:FC:E3:54:8E:59:7C:98:E1:1D:68
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184755EE24F629165A490D3AF776A5DE3DF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uET_GQGZ4IRyJfzjVI5ZfJjhHWg.roa
Signing time: Mon 14 Nov 2022 09:01:03 +0000
ROA not before: Mon 14 Nov 2022 09:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.94.168.0/22 maxlen: 24
194.15.52.0/23 maxlen: 23
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
77.83.38.0/23 maxlen: 24
193.30.241.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
45.138.180.0/22 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:5e:e2:4f:62:91:65:a4:90:d3:af:77:6a:5d:e3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 14 09:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b844ff190199e0847225fce3548e597c98e11d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:67:37:1a:7e:24:a1:bc:04:75:2d:74:e1:
c3:ca:08:80:bc:54:41:19:31:fc:5d:2c:f2:de:d4:
b0:60:71:84:76:33:e1:fd:9c:9d:9c:5e:5e:02:c5:
0e:dd:f5:ba:52:77:28:35:80:d7:0e:ac:a3:25:93:
0f:8a:15:f1:be:03:95:f7:09:c9:76:d9:83:36:1f:
25:e8:23:23:26:64:38:8b:f0:31:a2:a3:16:33:44:
61:b6:5e:53:82:65:e6:46:74:c6:4b:c2:8d:f7:37:
16:ad:9f:9a:0e:ae:b4:da:ef:ce:ed:1d:5f:e5:15:
04:ea:70:39:92:18:ba:43:82:00:d5:17:99:8f:9a:
a0:81:0a:bb:9c:47:49:70:3f:a3:59:d6:2c:45:ce:
8b:2c:04:5d:b2:21:86:af:f7:d7:b0:34:19:2c:7a:
1a:e8:b7:97:32:eb:d3:df:08:c9:86:6a:47:6b:1b:
36:55:b4:e9:ed:ae:c5:09:28:a3:1c:2d:ea:f6:11:
42:27:1b:10:4f:ee:fd:f9:a5:b0:35:0b:17:e2:6c:
b0:f3:8a:ab:c3:b3:a6:d7:96:08:b8:b1:8e:a6:60:
68:93:9b:f3:69:99:4f:4b:49:40:bf:a8:71:de:1c:
a3:a8:cd:e0:d7:f5:c2:ba:6c:07:cb:81:43:3c:75:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:FF:19:01:99:E0:84:72:25:FC:E3:54:8E:59:7C:98:E1:1D:68
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uET_GQGZ4IRyJfzjVI5ZfJjhHWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.13.191.0/24
45.81.112.0/22
45.88.136.0/24
45.88.139.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.138.180.0/22
45.144.212.0/23
77.83.38.0/23
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
35:d0:7a:08:78:69:f1:b2:d9:6b:e1:82:19:0b:25:ee:6b:37:
eb:ed:54:a9:b1:ac:b7:72:a4:44:2f:7a:32:63:3b:50:fb:33:
89:3f:36:10:ba:df:e6:a3:6f:ed:07:49:75:e1:26:d3:a2:f0:
72:ef:d7:8d:5a:0e:ba:41:50:9a:6d:22:69:47:43:62:a9:31:
24:3a:11:b9:d8:85:a9:18:5a:d9:5d:b5:c2:45:f5:b7:2a:3c:
be:85:db:2f:3f:02:64:74:0b:c6:93:45:82:8d:cf:11:6c:08:
2e:21:15:78:00:81:4f:9a:dd:02:aa:48:2d:9a:47:c1:bd:ca:
17:47:86:7e:92:95:66:f3:8e:6d:77:45:d4:67:b1:de:85:a3:
9d:a2:69:7a:66:2a:57:6f:96:aa:5c:87:7c:3e:d3:76:ae:c1:
a0:12:fe:db:93:92:56:21:5c:3f:69:65:3a:77:a4:ea:ca:4c:
a6:ca:7e:7d:20:78:02:6c:1a:00:09:18:d2:d8:6c:80:27:39:
6a:ed:08:8f:7d:ef:33:c4:ba:c2:aa:53:d4:fd:0b:74:8f:59:
9b:c8:87:a6:4c:c3:e8:44:9d:da:99:bb:df:a6:01:2e:39:bf:
97:1d:f0:34:9a:77:4e:8b:ee:b1:5a:12:f4:e6:30:46:74:9d:
9c:8e:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org