Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/_uTwTi_Ai5RcbiEWYdvscUrqIGo.roa
File: _uTwTi_Ai5RcbiEWYdvscUrqIGo.roa (raw, json)
Hash identifier: /zbMw/FQuPclkxNxWPK4DAwOgTrwCo9O8vYd5UrCOpc=
Subject key identifier: FE:E4:F0:4E:2F:C0:8B:94:5C:6E:21:16:61:DB:EC:71:4A:EA:20:6A
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 01845E1F32D67337E637E4F1AF62A7E9F122
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/_uTwTi_Ai5RcbiEWYdvscUrqIGo.roa
Signing time: Wed 09 Nov 2022 20:40:13 +0000
ROA not before: Wed 09 Nov 2022 20:40:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35224
IP address blocks: 94.231.240.0/24 maxlen: 24
94.231.244.0/22 maxlen: 22
94.231.242.0/23 maxlen: 23
94.231.241.0/24 maxlen: 24
94.231.249.0/24 maxlen: 24
94.231.248.0/24 maxlen: 24
94.231.250.0/24 maxlen: 24
94.231.252.0/24 maxlen: 24
94.231.251.0/24 maxlen: 24
94.231.253.0/24 maxlen: 24
185.9.253.0/24 maxlen: 24
185.9.252.0/24 maxlen: 24
185.9.255.0/24 maxlen: 24
185.9.254.0/24 maxlen: 24
94.231.254.0/24 maxlen: 24
94.231.255.0/24 maxlen: 24
193.239.92.0/22 maxlen: 22
92.118.0.0/22 maxlen: 22
45.150.0.0/22 maxlen: 22
195.222.116.0/22 maxlen: 22
91.189.96.0/24 maxlen: 24
91.189.98.0/24 maxlen: 24
91.189.97.0/24 maxlen: 24
91.189.100.0/24 maxlen: 24
91.189.99.0/24 maxlen: 24
91.189.102.0/24 maxlen: 24
91.189.101.0/24 maxlen: 24
91.189.103.0/24 maxlen: 24
193.239.186.0/23 maxlen: 23
45.66.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:1f:32:d6:73:37:e6:37:e4:f1:af:62:a7:e9:f1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Nov 9 20:40:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fee4f04e2fc08b945c6e211661dbec714aea206a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:15:82:d9:90:d4:d4:17:13:19:45:c9:13:
c9:1b:92:14:fd:06:f9:15:59:3f:78:43:c9:8c:c3:
95:41:6a:3b:04:7e:65:e1:62:26:6c:9e:83:9e:e2:
c8:d8:ed:fb:be:19:14:71:72:88:a4:80:6a:83:a7:
db:89:98:4d:6f:f3:91:7e:f6:cc:e9:9e:40:9d:34:
5c:83:54:3f:56:93:1e:91:a4:29:fb:b6:5b:60:57:
fc:85:4b:a6:20:c3:66:a2:d8:09:78:84:a8:eb:1a:
b6:e1:71:77:f3:45:00:5e:e8:5c:c4:7a:d0:ec:5a:
2a:b8:89:57:a1:95:40:3a:51:62:37:4a:c8:1c:68:
89:32:98:e7:a3:03:0d:70:d5:e2:06:8a:12:9c:9d:
aa:13:26:14:c9:2a:3b:55:a7:e3:ec:27:3e:f4:b5:
0f:40:a1:02:77:a5:3f:9b:04:61:52:23:20:d1:00:
e1:08:fd:e3:64:6e:e7:b9:9f:53:b8:36:30:cc:bf:
57:12:b1:45:99:48:ce:4c:70:94:c3:1e:35:eb:45:
cb:6f:d4:15:a4:12:69:47:22:ca:e8:86:21:34:7b:
1a:58:6b:b0:c5:d2:c4:ff:3a:3f:14:40:81:3c:47:
f9:28:87:9b:69:de:cc:ac:45:40:e3:5e:59:27:e7:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E4:F0:4E:2F:C0:8B:94:5C:6E:21:16:61:DB:EC:71:4A:EA:20:6A
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/_uTwTi_Ai5RcbiEWYdvscUrqIGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.76.0/22
45.150.0.0/22
91.189.96.0/21
92.118.0.0/22
94.231.240.0/20
185.9.252.0/22
193.239.92.0/22
193.239.186.0/23
195.222.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ed:32:36:1c:af:f9:6e:ad:04:2b:da:9b:85:84:5f:bc:f0:
25:9c:3a:cf:cc:94:39:ea:d6:fe:6b:4a:e7:b4:41:a6:21:f0:
c2:9d:d8:fc:65:ea:fe:a3:08:6a:e0:08:10:58:65:e6:1e:4a:
ac:a1:73:d4:8d:22:18:f8:1d:d5:4c:aa:94:37:f2:60:e5:00:
5e:51:ca:5d:55:8e:6a:6c:ba:9e:d3:49:55:22:0e:04:37:e8:
a4:9a:69:a1:44:8f:98:1e:17:8f:ba:e0:f9:1e:18:74:39:3d:
fa:d4:2a:92:4b:c1:b7:2c:81:34:c3:05:98:7f:95:94:73:bd:
5a:b9:0e:02:97:59:7a:2c:ec:87:e5:23:08:d9:06:0b:9f:e8:
4e:e0:00:2b:d5:fd:5b:8e:4c:67:c5:a8:7f:54:2f:45:d3:fc:
93:fa:c8:02:68:16:5e:16:75:18:7e:29:23:b8:f8:cc:99:84:
f5:3c:6e:ea:ce:e1:87:5e:be:f8:5f:98:d9:3a:1c:f1:63:91:
26:b2:7d:d7:23:ad:85:de:42:f0:aa:44:05:08:c6:0f:50:02:
5a:3b:01:be:a4:0c:05:54:0a:8c:02:81:e7:db:62:51:79:a9:
8b:6b:f8:6a:9c:0d:9c:92:5c:d4:b1:1f:1d:7c:a3:79:56:60:
ee:c3:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org