Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/udkAupvQNuR4IMQnZ63efj7QlnE.roa
File: udkAupvQNuR4IMQnZ63efj7QlnE.roa (raw, json)
Hash identifier: 5O7i3PtH7sUVH950V8BZQdzWPqE/ht+xJ2AxKpJcDOE=
Subject key identifier: B9:D9:00:BA:9B:D0:36:E4:78:20:C4:27:67:AD:DE:7E:3E:D0:96:71
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0181D8EDF98DFFF0CF44F1067684DEED2E1D
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/udkAupvQNuR4IMQnZ63efj7QlnE.roa
Signing time: Thu 07 Jul 2022 13:51:23 +0000
ROA not before: Thu 07 Jul 2022 13:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 195.179.44.0/22 maxlen: 22
194.233.20.0/22 maxlen: 22
194.64.172.0/22 maxlen: 22
195.180.132.0/22 maxlen: 22
194.163.72.0/22 maxlen: 22
194.163.76.0/22 maxlen: 22
195.180.140.0/22 maxlen: 22
195.179.80.0/22 maxlen: 22
212.224.0.0/22 maxlen: 24
194.195.108.0/22 maxlen: 22
195.179.32.0/21 maxlen: 24
194.64.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:ed:f9:8d:ff:f0:cf:44:f1:06:76:84:de:ed:2e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jul 7 13:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9d900ba9bd036e47820c42767adde7e3ed09671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:85:fc:90:bd:80:be:87:86:96:73:a3:24:dc:
f1:81:53:f1:ab:bd:fe:bb:a1:66:3e:45:84:45:b3:
8f:49:03:3a:ce:e9:78:8a:dc:dc:29:a6:c3:1b:d3:
7f:03:22:b5:a5:da:16:b1:2d:4c:d0:83:ee:9f:0e:
90:af:c4:15:cf:ad:23:1c:34:ed:bb:8d:4b:38:e9:
f8:42:22:6d:72:85:1e:17:2b:e0:aa:b3:cd:03:da:
26:0a:a6:c1:78:2e:6d:10:ca:9a:ee:13:57:a1:2b:
6a:ea:3c:2a:09:bc:52:a2:91:db:f4:c7:e2:42:c9:
05:a3:90:f0:30:0d:30:a2:6a:9e:5b:d4:c0:bd:a7:
ac:c0:63:0f:15:65:28:0b:a3:b0:3d:fe:02:16:04:
50:bc:81:95:8c:10:b7:1d:0c:23:61:dd:a7:45:42:
34:48:a6:80:c3:34:e5:81:03:b9:25:9a:6e:ce:6c:
78:29:9f:f8:44:1a:cf:b0:4d:7a:36:58:8a:e7:60:
69:17:6c:9f:db:f3:62:34:a1:9c:68:88:dd:0d:0d:
f7:fb:c4:b8:52:ab:6a:f1:7a:aa:5a:ea:da:6c:4c:
4b:79:57:12:b6:7f:0d:52:f5:08:7c:f5:1a:e5:52:
dd:4f:98:06:c1:99:fb:d8:a5:18:87:8d:0d:2f:0d:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D9:00:BA:9B:D0:36:E4:78:20:C4:27:67:AD:DE:7E:3E:D0:96:71
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/udkAupvQNuR4IMQnZ63efj7QlnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.156.0/22
194.64.172.0/22
194.163.72.0/21
194.195.108.0/22
194.233.20.0/22
195.179.32.0/21
195.179.44.0/22
195.179.80.0/22
195.180.132.0/22
195.180.140.0/22
212.224.0.0/22
Signature Algorithm: sha256WithRSAEncryption
78:77:83:10:57:2d:22:ed:90:d6:e6:13:f8:5c:e5:8a:65:d9:
84:7e:56:a1:16:cc:87:72:8e:c4:ba:28:28:fb:59:37:bc:30:
5a:46:16:dd:f5:00:2e:4e:d1:e6:7c:65:f2:38:3c:91:4f:ef:
80:51:e6:63:2b:e0:d6:14:3d:9e:74:c2:61:fe:ca:e3:34:0e:
c0:73:5d:26:fc:2b:3c:fc:92:fa:03:90:b5:ef:91:a9:5e:d8:
37:75:3b:73:87:ea:29:ef:d7:09:dd:fb:99:91:71:1c:55:a3:
23:79:f8:b5:fd:87:d0:d3:8d:1c:e7:67:f6:98:09:35:47:dd:
d3:e5:6c:2e:ea:e9:1b:3e:ab:7b:59:3c:5e:6f:d7:d2:f0:38:
41:10:11:01:29:29:92:8c:aa:26:28:26:c6:ca:d5:c9:1a:0c:
f0:fa:97:a2:da:87:81:ce:12:f6:96:36:30:48:c2:ed:c4:1c:
e4:6f:c5:fd:d5:d9:be:05:0f:cb:54:64:91:c7:52:25:08:02:
46:26:8c:46:58:07:32:b8:61:c1:be:72:ac:9e:7d:11:89:e2:
5a:fd:45:16:ac:08:93:a4:dc:b6:6c:ae:cd:15:a2:af:b3:38:
9e:16:68:c8:f1:87:4d:f5:f3:f5:78:a4:cb:25:5e:57:e8:c9:
c9:b9:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org