Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rUOAFH_HE4XGreXxzH9TshHc1rw.roa
File: rUOAFH_HE4XGreXxzH9TshHc1rw.roa (raw, json)
Hash identifier: 3x0yTTHc/KrYNOV6mrSlPv4vmFkiTyWs4yeuE5uivDs=
Subject key identifier: AD:43:80:14:7F:C7:13:85:C6:AD:E5:F1:CC:7F:53:B2:11:DC:D6:BC
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0A1EDC80
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rUOAFH_HE4XGreXxzH9TshHc1rw.roa
Signing time: Thu 31 Mar 2022 09:17:54 +0000
ROA not before: Thu 31 Mar 2022 09:17:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
78.108.216.0/22 maxlen: 24
45.140.220.0/22 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.31.140.0/22 maxlen: 24
212.107.12.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
45.154.196.0/22 maxlen: 24
185.227.68.0/22 maxlen: 24
185.185.40.0/22 maxlen: 24
45.90.144.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
45.81.20.0/22 maxlen: 24
89.190.156.0/22 maxlen: 24
83.143.116.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.234.72.0/22 maxlen: 24
193.31.28.0/22 maxlen: 24
193.31.30.0/24 maxlen: 24
85.202.160.0/22 maxlen: 24
193.34.76.0/22 maxlen: 24
2a0b:7080:10::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b82::/44 maxlen: 44
2a0b:b85::/32 maxlen: 32
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:b87:ffda::/48 maxlen: 48
2a0d:77c7::/32 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b84::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169794688 (0xa1edc80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Mar 31 09:17:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad4380147fc71385c6ade5f1cc7f53b211dcd6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:83:ea:8b:88:13:83:2c:60:ba:d9:92:85:
38:14:63:36:43:63:2b:c3:63:6d:02:1b:de:7b:cb:
bd:53:e1:57:68:3c:43:7d:26:31:78:90:2c:c6:27:
11:f6:11:e4:a9:50:f1:98:c4:85:99:76:94:78:6d:
b6:84:a5:23:b4:80:82:f2:80:d9:5f:dc:d9:37:6e:
50:7b:6a:55:33:47:96:9f:70:59:aa:84:5c:88:2d:
a7:f0:d8:4d:50:d4:8f:12:bc:38:f9:7b:41:44:8a:
59:de:15:47:75:6f:44:6d:06:58:c3:37:78:b1:66:
17:bf:33:bf:e9:b0:96:45:10:c6:4a:03:40:7f:79:
9c:46:7e:3b:b9:03:13:5a:ea:d2:97:3a:4c:1f:88:
d8:c0:81:66:9e:a5:15:db:64:98:21:42:99:f9:03:
05:48:6d:a3:3d:55:01:2a:97:72:28:b3:0f:f8:88:
90:cd:55:45:42:fb:65:de:f0:95:cc:a8:dc:61:e8:
dc:7d:a4:11:f7:19:33:d1:71:bf:26:28:67:2b:e3:
22:ad:b4:f4:78:58:f8:25:50:c2:60:b4:e7:e7:15:
e7:59:9f:e2:3c:f0:15:ca:9a:5a:9c:f7:6c:52:4f:
c5:9b:29:e3:85:08:d8:33:cb:1a:54:3f:8d:7f:cc:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:80:14:7F:C7:13:85:C6:AD:E5:F1:CC:7F:53:B2:11:DC:D6:BC
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rUOAFH_HE4XGreXxzH9TshHc1rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.221.192.0/22
194.31.140.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::/31
2a0b:b87:ffb4::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::/44
2a0d:77c7::/32
Signature Algorithm: sha256WithRSAEncryption
16:6b:ef:d4:90:3c:8c:c6:04:e5:e2:de:01:86:84:73:a1:02:
6c:f5:39:d0:b9:90:1c:f1:12:ec:65:75:86:d5:6f:ac:27:14:
eb:f0:48:78:f2:fc:8a:82:f3:91:fc:fa:1c:41:71:d2:99:14:
d0:56:f3:b5:2e:6f:af:8b:a4:c5:d7:f8:30:93:84:e1:7f:bd:
84:8a:29:da:2e:aa:bf:75:95:9d:7b:69:7b:ff:ba:98:53:a5:
89:d3:51:ca:bc:fa:7d:c0:31:27:a7:d0:ee:84:23:f9:ca:5a:
8c:c0:c1:64:6c:46:4b:38:8e:be:c3:54:d0:01:cc:a8:5d:54:
13:b8:31:7f:c8:aa:2b:d2:7c:dd:64:d9:4a:5f:bc:d0:1b:62:
40:cf:51:3d:72:35:11:86:29:1b:01:59:a7:52:8d:6e:24:40:
50:56:7b:94:7e:ba:ad:b3:c4:c4:5f:92:d4:b4:3e:32:e3:5d:
77:60:80:95:ec:ab:94:56:4b:60:fc:8b:78:ea:b8:e2:e9:9b:
e4:29:9a:21:41:17:7e:ed:7c:e4:03:c0:65:25:b8:4a:b8:99:
2e:37:79:78:bf:7f:88:68:2e:4d:a4:b8:e0:11:3a:2a:dd:00:
54:3c:88:67:04:23:58:c8:02:0b:ec:f1:b6:2e:aa:dd:9c:c6:
99:ef:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org