Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/UwD-qjw-exEnUsrCQjezdPTQF94.roa
File: UwD-qjw-exEnUsrCQjezdPTQF94.roa (raw, json)
Hash identifier: MTjYjqjRHOD/z4PxEkofBSn49N/VpYZmMn+277Vz1Vo=
Subject key identifier: 53:00:FE:AA:3C:3E:7B:11:27:52:CA:C2:42:37:B3:74:F4:D0:17:DE
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 01849B2A60CE9A80D1E3EDAF83D615E2A3FD
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/UwD-qjw-exEnUsrCQjezdPTQF94.roa
Signing time: Mon 21 Nov 2022 17:09:16 +0000
ROA not before: Mon 21 Nov 2022 17:09:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47890
IP address blocks: 45.129.15.0/24 maxlen: 24
2.57.122.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
193.32.162.0/24 maxlen: 24
193.32.163.0/24 maxlen: 24
185.232.64.0/24 maxlen: 24
193.46.254.0/24 maxlen: 24
185.232.66.0/24 maxlen: 24
193.46.255.0/24 maxlen: 24
193.29.14.0/24 maxlen: 24
2a0c:9f00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:2a:60:ce:9a:80:d1:e3:ed:af:83:d6:15:e2:a3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 21 17:09:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5300feaa3c3e7b112752cac24237b374f4d017de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:6a:b5:38:10:e0:6c:eb:ae:39:61:f1:b5:
a8:1d:d0:ef:e0:fb:9b:4b:c0:f2:ce:1a:7d:3b:ce:
73:af:39:cb:0c:4d:e7:e6:4f:0b:4f:6e:3a:f4:16:
02:8d:01:5a:8f:48:d6:10:1d:6a:bf:77:b5:93:7f:
ae:1a:e9:0d:e3:32:57:49:57:45:57:09:13:b8:77:
63:84:e5:d3:a2:c2:e4:bb:8a:81:c8:e4:23:6c:c5:
98:c9:04:12:21:7c:d5:fc:b8:4c:c2:e3:bf:5e:c4:
7a:8b:67:e0:1a:34:21:64:2f:5e:ef:2d:c6:5a:07:
c0:b7:71:0c:c5:0f:65:87:bc:3a:6a:ad:c0:ca:d1:
65:ef:5c:67:f1:91:21:a8:b3:1a:b4:80:c4:4d:48:
04:76:2a:5d:2f:7f:6d:a0:14:3f:48:9d:27:47:ba:
a1:c6:7c:0a:a0:0c:61:c2:6e:59:36:61:a8:09:35:
f3:49:85:36:b4:14:41:cc:55:b7:d8:98:7c:98:2c:
84:0c:ee:7a:13:7c:16:32:96:1b:66:3b:92:15:79:
b6:b4:ef:0a:c0:b3:a8:5c:80:f9:69:e7:e1:b0:61:
31:c5:cf:00:b6:99:95:ec:97:e4:ee:2a:af:b0:1a:
45:4b:8f:10:87:34:25:97:62:ce:04:1f:d8:4b:2e:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:00:FE:AA:3C:3E:7B:11:27:52:CA:C2:42:37:B3:74:F4:D0:17:DE
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/UwD-qjw-exEnUsrCQjezdPTQF94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.13.212.0/23
45.129.15.0/24
45.134.50.0/24
80.94.92.0/24
92.118.39.0/24
185.232.64.0/24
185.232.66.0/24
193.29.14.0/24
193.32.160.0/24
193.32.162.0/23
193.46.254.0/23
193.47.69.0/24
IPv6:
2a0c:9f00::/48
Signature Algorithm: sha256WithRSAEncryption
ac:43:97:04:9d:ce:62:b6:2c:66:fb:05:1e:9a:e5:85:f0:b3:
70:65:6b:41:00:dd:9a:a3:29:87:40:8c:ec:1d:26:6c:ad:f0:
be:6f:88:eb:59:3b:0f:4f:5a:b0:b2:1b:3f:b7:7a:cc:7a:e3:
e3:74:06:25:74:91:3c:72:52:61:c3:ae:de:9e:f0:9e:1c:88:
0d:64:c2:b1:55:8d:de:6f:9c:f8:1c:2b:6b:59:ba:e5:e1:0d:
c2:bb:90:7a:03:64:1a:04:90:ba:15:7f:40:a4:d1:d8:1a:3a:
3c:25:d8:3b:2b:70:5b:84:7e:85:72:ed:76:10:63:fd:23:9d:
89:93:ac:17:65:c0:0a:c1:60:64:61:00:43:53:df:03:05:11:
85:e6:9d:83:f6:20:64:98:9e:d8:97:d8:3b:52:a7:78:60:21:
5f:a1:d5:11:78:be:51:c7:69:e5:c7:1e:75:f0:43:53:bc:e6:
7d:f4:a1:39:81:c7:4d:8f:6e:30:25:c2:0f:97:f4:ab:41:ff:
40:fd:a0:f8:0d:4d:72:b1:46:da:2e:7a:46:16:e9:43:f0:50:
9d:b3:3f:bc:74:2a:b3:e4:3b:5a:22:c3:cd:6f:78:e8:eb:f0:
04:ce:74:9e:6f:a1:84:53:55:3d:d6:4a:5f:4c:24:d5:a7:74:
26:d3:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:53 2025 by rpki-client