Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/2uwtXMCpq8_4_Gd9jU3vi_nisHQ.roa
File: 2uwtXMCpq8_4_Gd9jU3vi_nisHQ.roa (raw, json)
Hash identifier: U1NUznJcN/ZNCnONQV+hjoeqxbbXTMbq/5uWEKr1RBg=
Subject key identifier: DA:EC:2D:5C:C0:A9:AB:CF:F8:FC:67:7D:8D:4D:EF:8B:F9:E2:B0:74
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 01855D7A1BC62D1AE04D6115CD6A38D10F35
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/2uwtXMCpq8_4_Gd9jU3vi_nisHQ.roa
Signing time: Thu 29 Dec 2022 10:42:41 +0000
ROA not before: Thu 29 Dec 2022 10:42:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48011
IP address blocks: 45.89.236.0/22 maxlen: 24
185.217.143.0/24 maxlen: 24
213.232.203.0/24 maxlen: 24
185.227.136.0/24 maxlen: 24
185.227.139.0/24 maxlen: 24
185.227.137.0/24 maxlen: 24
185.227.138.0/24 maxlen: 24
2a0c:6600:3::/48 maxlen: 48
2a0c:6600:1::/48 maxlen: 48
2a0c:6600:2::/48 maxlen: 48
2a0c:6600::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:7a:1b:c6:2d:1a:e0:4d:61:15:cd:6a:38:d1:0f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Dec 29 10:42:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=daec2d5cc0a9abcff8fc677d8d4def8bf9e2b074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:a8:c9:96:94:35:d4:44:54:15:27:21:2b:
7e:03:49:e2:4a:a8:01:bb:5c:a0:c5:2c:7e:13:76:
c2:53:e0:e0:d1:07:0b:54:dc:e8:53:f0:56:fa:2d:
9c:13:96:63:e0:d5:57:2a:6a:b3:9f:9a:4b:83:9e:
07:b0:b6:d6:c0:12:22:36:92:4a:83:cf:45:50:e1:
d7:93:f6:60:bd:52:72:f4:ce:5e:f7:7d:ef:86:0b:
4b:41:68:a4:af:bb:94:97:11:7a:08:d5:63:f3:45:
64:40:3f:aa:cb:71:10:1b:0c:e1:0d:c3:88:64:e3:
78:43:4a:ed:37:77:77:a9:4b:af:2b:1a:9f:25:72:
47:38:f3:e6:27:c0:f3:94:dc:ba:ad:91:75:15:02:
ec:d8:b0:1f:43:07:f7:f6:81:14:62:7f:67:3b:a8:
36:81:15:8e:2f:36:a1:3b:27:b1:1b:bf:cf:e1:c4:
5a:c2:ea:c6:b8:ea:43:6c:84:6b:16:7d:19:32:3e:
b2:4d:32:29:05:ac:61:76:bc:41:e0:43:94:ea:dc:
f3:75:e6:de:b9:9d:67:3a:58:f7:9a:6a:ff:bd:d8:
4e:6b:5a:62:c5:d7:ec:c2:cc:8c:1c:af:cb:85:18:
d9:36:34:cb:7b:5c:85:fb:95:c6:57:6e:90:eb:7f:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EC:2D:5C:C0:A9:AB:CF:F8:FC:67:7D:8D:4D:EF:8B:F9:E2:B0:74
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/2uwtXMCpq8_4_Gd9jU3vi_nisHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.236.0/22
185.217.143.0/24
185.227.136.0/22
213.232.203.0/24
IPv6:
2a0c:6600::/46
Signature Algorithm: sha256WithRSAEncryption
78:13:d2:7e:c7:fb:18:d2:b2:3b:31:b3:64:6d:ec:74:f3:37:
16:1a:28:6c:73:5a:0c:1d:5a:b5:d4:ea:cd:a9:b5:08:88:5c:
ab:f0:2a:03:8c:3f:23:ef:52:5f:57:1e:6a:79:93:0f:e2:dc:
02:4e:b9:d9:2b:af:2e:a3:38:bb:4d:38:1b:41:b8:a2:7a:12:
35:99:99:96:9d:6f:e1:7a:0b:83:c5:64:a1:e3:be:db:c7:f6:
34:6b:93:ee:cc:a4:18:02:b6:81:3a:83:bc:5d:4d:6c:ee:51:
18:32:8e:04:7c:7b:28:91:a3:30:f8:16:3c:48:81:7a:d4:36:
a7:eb:cd:35:07:de:b0:70:37:ce:e4:8b:ea:85:8d:8f:51:3e:
32:18:ed:d8:d1:3b:38:d2:7c:58:ab:88:8b:87:d9:ca:52:15:
54:d5:a2:2a:df:35:26:70:da:ff:92:6f:59:05:a0:53:94:77:
d6:a1:b2:fa:ae:85:5c:2a:fa:13:8a:29:03:3a:0d:76:79:bb:
23:3c:69:4e:a3:6f:59:56:c4:b2:08:3a:82:7d:fe:94:55:76:
cf:f6:5c:39:d0:2d:31:9b:d4:58:19:47:40:ae:a1:af:4a:f5:
7e:3e:89:6c:4b:38:7b:68:b6:e2:8a:2b:14:f3:1f:fc:b1:6c:
87:a4:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org