Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/UGRCB1t5N0ynLCqIFsjiZQ1v-OA.roa
File: UGRCB1t5N0ynLCqIFsjiZQ1v-OA.roa (raw, json)
Hash identifier: Zlza0n2Oear/Rrf0bFgG56s7TG1aV7skSZ+3yEZgqgs=
Subject key identifier: 50:64:42:07:5B:79:37:4C:A7:2C:2A:88:16:C8:E2:65:0D:6F:F8:E0
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0182D4A345E790E04E710F2B0ADE529A7BF9
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/UGRCB1t5N0ynLCqIFsjiZQ1v-OA.roa
Signing time: Thu 25 Aug 2022 10:54:06 +0000
ROA not before: Thu 25 Aug 2022 10:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.92.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:a3:45:e7:90:e0:4e:71:0f:2b:0a:de:52:9a:7b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Aug 25 10:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=506442075b79374ca72c2a8816c8e2650d6ff8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:dd:cd:b0:7d:a8:d7:a8:a7:d3:23:c0:0e:
69:26:18:fa:13:79:f7:fb:fa:43:02:c8:62:91:c3:
57:d9:7c:19:6b:a3:ce:e1:eb:cc:b6:ac:38:b0:c4:
6f:53:74:5a:c7:b8:31:c3:4b:9f:42:45:67:46:ff:
04:44:7a:41:ac:97:0d:2c:1d:d9:de:96:0f:61:11:
25:db:8a:c7:cb:f3:ae:00:de:99:a6:e9:f7:7c:6e:
bc:2d:5c:ec:4f:79:cc:bb:f6:56:f5:95:7f:34:4b:
53:66:f1:80:cf:7c:2a:1c:3f:bf:b4:48:86:04:95:
72:3f:c6:0e:6d:40:07:ee:aa:f7:e0:ca:2e:9a:df:
60:73:92:fa:cb:0f:aa:ee:e3:75:a2:15:48:e7:fa:
f8:67:0e:bb:d6:7d:f4:ff:7a:48:40:7d:96:4a:17:
e0:c1:53:4f:71:01:bc:a3:ea:43:b3:17:21:6e:15:
3a:d3:da:5e:36:75:dc:b0:b8:ef:b8:13:31:42:5a:
23:1c:5f:85:0e:b6:98:78:73:23:91:de:57:94:1a:
03:da:d1:76:e9:79:cb:db:b7:a9:40:53:c0:bb:b5:
8d:99:0e:7e:ee:81:d7:63:9d:38:8b:20:a7:1d:7d:
71:93:df:fb:a0:6a:1d:ad:c2:0e:70:c8:cf:7c:09:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:64:42:07:5B:79:37:4C:A7:2C:2A:88:16:C8:E2:65:0D:6F:F8:E0
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/UGRCB1t5N0ynLCqIFsjiZQ1v-OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.72.0/24
94.137.74.0/24
94.137.76.0/24
94.137.78.0/23
94.137.89.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
52:83:46:d5:c8:2a:4d:12:1d:a8:94:8b:da:5a:4f:ca:50:c7:
c1:94:d4:70:84:0f:b0:73:a0:af:c1:6a:bd:b9:92:53:4a:7c:
16:72:b1:81:2d:0f:00:4c:c6:86:01:22:4d:84:a2:28:f7:4b:
98:2e:59:6e:da:ac:76:13:f4:ac:b8:62:13:e1:22:ba:83:19:
be:92:f5:fb:21:19:5b:bb:4d:c2:bb:57:a7:0f:21:e0:8b:ff:
a4:e6:97:35:9e:79:a8:0b:d4:d7:6f:0c:b9:18:51:15:4b:80:
70:1e:6b:d7:c1:8f:7b:ec:1e:0f:29:ba:84:48:5b:8a:c1:37:
7a:f6:22:8e:83:89:56:c2:34:04:87:4a:f9:72:a9:55:66:6b:
eb:6e:81:5f:c3:33:d7:8d:fd:89:77:37:1b:7b:09:fa:1b:ab:
17:07:72:7c:ba:b5:6c:d6:71:58:a7:fe:e1:e2:19:a1:ba:63:
11:19:fb:68:61:8e:f6:53:7e:18:41:f5:f7:c6:95:86:4a:fc:
21:28:6f:3d:d5:42:99:d5:b7:80:23:8a:4a:ce:0e:ce:af:1c:
15:23:98:2f:c8:0d:80:6c:98:2f:d5:45:0c:76:4c:84:1d:f7:
af:62:e2:78:43:0b:84:3b:39:46:d7:ab:3a:ec:02:aa:eb:c5:
63:dd:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org