Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/uM2aUa-MiGwH4KLytxznCtiLZxc.roa
File: uM2aUa-MiGwH4KLytxznCtiLZxc.roa (raw, json)
Hash identifier: 7JVfaBg2hgrm7rx1mcwxd+REqWGWtBHCG1lENSZwE7g=
Subject key identifier: B8:CD:9A:51:AF:8C:88:6C:07:E0:A2:F2:B7:1C:E7:0A:D8:8B:67:17
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 0396492F
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/uM2aUa-MiGwH4KLytxznCtiLZxc.roa
Signing time: Sat 01 Jan 2022 03:54:58 +0000
ROA not before: Sat 01 Jan 2022 03:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201446
IP address blocks: 185.68.110.0/24 maxlen: 24
185.68.109.0/24 maxlen: 24
185.68.111.0/24 maxlen: 24
185.68.108.0/24 maxlen: 24
212.63.110.0/24 maxlen: 24
212.63.109.0/24 maxlen: 24
212.63.111.0/24 maxlen: 24
212.63.108.0/24 maxlen: 24
89.46.91.0/24 maxlen: 24
89.46.88.0/24 maxlen: 24
89.46.90.0/24 maxlen: 24
89.46.89.0/24 maxlen: 24
185.45.73.0/24 maxlen: 24
185.45.74.0/24 maxlen: 24
185.45.75.0/24 maxlen: 24
185.18.199.0/24 maxlen: 24
185.18.198.0/24 maxlen: 24
185.92.245.0/24 maxlen: 24
185.92.244.0/24 maxlen: 24
217.148.139.0/24 maxlen: 24
185.92.246.0/24 maxlen: 24
217.148.138.0/24 maxlen: 24
185.92.247.0/24 maxlen: 24
185.177.152.0/24 maxlen: 24
185.177.154.0/24 maxlen: 24
185.177.155.0/24 maxlen: 24
185.177.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60180783 (0x396492f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 03:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8cd9a51af8c886c07e0a2f2b71ce70ad88b6717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:61:5d:d2:d5:3d:36:59:f8:d4:17:e8:50:
1e:b7:5f:16:98:0c:94:cf:9c:1c:05:d2:6b:10:79:
54:7a:de:29:64:92:68:52:bd:3b:1b:7b:77:c6:8d:
d3:d8:3c:68:b7:8b:c2:16:88:c3:bc:24:ea:d5:08:
dd:a6:39:aa:bb:4f:fd:58:80:44:2d:b1:19:e3:01:
c1:54:df:f3:44:b1:d0:96:d1:74:b8:7e:1d:e2:c4:
27:28:4a:42:92:a2:68:24:b3:72:a9:2d:86:7d:c4:
ce:62:53:35:61:4c:3e:84:ec:fe:30:d1:a0:f0:05:
5b:db:ff:11:5e:87:0a:ad:8f:22:2e:f2:ef:fe:32:
d6:dd:67:2e:b1:ad:34:a3:ed:87:62:9f:a1:8f:32:
31:42:e2:d0:6a:c2:da:7e:6c:d8:ca:4b:22:9c:df:
c2:c6:65:03:d7:9a:9e:cf:49:a0:5a:0a:e9:78:df:
b1:e9:b3:1b:7c:a6:23:03:cd:bb:cf:b1:b2:ec:c3:
04:44:7f:b8:09:f3:88:d5:84:e9:93:e1:10:95:eb:
fa:6c:fc:a9:06:9e:99:38:c6:2c:77:f2:32:88:7d:
67:24:78:38:dc:fb:46:71:85:17:73:85:92:fe:29:
76:56:01:38:20:2b:01:73:84:77:63:52:96:85:e8:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CD:9A:51:AF:8C:88:6C:07:E0:A2:F2:B7:1C:E7:0A:D8:8B:67:17
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/uM2aUa-MiGwH4KLytxznCtiLZxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.88.0/22
185.18.198.0/23
185.45.73.0-185.45.75.255
185.68.108.0/22
185.92.244.0/22
185.177.152.0/22
212.63.108.0/22
217.148.138.0/23
Signature Algorithm: sha256WithRSAEncryption
62:3f:6d:a2:8a:61:3c:7a:3d:5d:e8:32:0c:13:cc:f8:cb:ac:
cb:ab:e8:e3:3e:e9:ae:58:e0:dd:e7:1f:8e:33:1c:bd:21:b2:
6f:f0:31:14:60:88:8f:bc:eb:25:13:bc:73:75:65:77:3d:7e:
2f:56:50:24:da:4a:3e:c8:d4:6d:0b:d4:35:cb:56:e5:b2:d7:
06:f4:ba:8b:a4:01:d0:41:e5:a8:dc:d1:1e:08:60:ad:19:7c:
6c:28:7f:1c:74:85:47:20:9b:87:ea:03:e0:0e:6a:18:27:c9:
f9:5d:37:76:5b:5d:72:0f:4d:51:64:e4:27:8a:60:1f:48:f8:
0e:3d:fb:c4:48:09:64:8b:ea:19:f4:fb:7b:45:30:b8:33:4a:
31:82:f1:c6:57:7a:97:b9:df:8c:91:4d:b3:ad:76:d7:ee:61:
33:c5:14:42:0b:a8:bb:2d:e8:27:17:eb:cd:a6:e8:a0:98:c5:
3e:fb:79:e1:6b:61:e3:e2:d4:95:b6:f1:3a:7e:a9:56:e1:1c:
d8:fc:69:61:c7:03:3d:ec:2b:c5:65:a4:4f:b2:b9:27:44:ec:
54:c4:3c:da:70:12:ea:20:c8:d0:82:5f:54:e4:00:3a:fb:cc:
e5:4c:8d:ed:6b:bc:1c:d0:60:2e:c9:26:d1:d1:1c:ef:b3:d2:
a9:71:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org