Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/UlwPG1c7KGtM9975zKHctrom0Sk.roa
File: UlwPG1c7KGtM9975zKHctrom0Sk.roa (raw, json)
Hash identifier: zRiDE0OE1BeRE8E7At6hbqCp/b+NuZtL//BH8d/H1kE=
Subject key identifier: 52:5C:0F:1B:57:3B:28:6B:4C:F7:DE:F9:CC:A1:DC:B6:BA:26:D1:29
Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial: 01855DC702E1C15455A9EF0953EACC1CFCEA
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/UlwPG1c7KGtM9975zKHctrom0Sk.roa
Signing time: Thu 29 Dec 2022 12:06:41 +0000
ROA not before: Thu 29 Dec 2022 12:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58073
IP address blocks: 45.145.252.0/22 maxlen: 22
193.104.186.0/24 maxlen: 24
45.152.192.0/22 maxlen: 22
37.220.32.0/21 maxlen: 24
45.10.116.0/22 maxlen: 22
45.129.176.0/22 maxlen: 22
185.38.12.0/22 maxlen: 24
2.58.20.0/22 maxlen: 22
45.82.44.0/22 maxlen: 22
45.88.16.0/22 maxlen: 22
45.93.32.0/22 maxlen: 22
46.182.104.0/24 maxlen: 24
46.182.105.0/24 maxlen: 24
46.182.106.0/24 maxlen: 24
46.182.107.0/24 maxlen: 24
46.182.111.0/24 maxlen: 24
46.182.109.0/24 maxlen: 24
46.182.110.0/24 maxlen: 24
2a02:2a38::/32 maxlen: 32
2a02:2a38:37::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:c7:02:e1:c1:54:55:a9:ef:09:53:ea:cc:1c:fc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Validity
Not Before: Dec 29 12:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=525c0f1b573b286b4cf7def9cca1dcb6ba26d129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:15:f7:ab:cd:6b:8f:08:74:28:59:4f:2c:77:
31:d0:5d:af:00:7f:01:97:3b:9f:f5:cd:65:d7:76:
a3:7d:e9:4f:95:b7:83:53:5c:c9:9f:bf:54:86:36:
56:88:d0:c0:d1:a2:27:9d:17:d2:b0:47:6d:c7:fe:
b0:2a:1c:9d:5b:13:26:e5:06:25:2a:0c:8c:b7:fb:
7e:53:98:f2:e7:1f:a8:10:a7:d3:70:6d:59:54:a1:
c0:9f:c8:3d:c9:61:db:be:0a:06:4b:de:d7:88:8b:
85:8b:3a:f5:bd:c1:dc:a5:84:23:1c:a9:18:65:3d:
e0:00:0f:83:83:c1:c6:7b:b6:3b:1b:26:e6:6a:2e:
4a:2d:73:56:11:85:02:a7:4c:c6:51:19:82:4d:12:
77:5a:4f:e5:62:eb:b9:c5:98:ce:03:33:b0:a5:83:
b9:bd:c2:89:bc:46:b0:6b:b1:95:0e:4a:38:6e:36:
90:4e:5c:0e:5f:8f:24:41:5a:5e:47:3e:dc:a0:11:
7b:8b:d4:55:92:ac:cb:ef:68:da:ed:37:bb:bc:fb:
02:5a:24:17:fa:b2:28:78:d8:d0:7e:c5:f3:02:4b:
59:d6:94:a2:82:16:c9:d3:0c:ca:bc:ef:03:3d:35:
2b:47:44:ed:b6:d5:21:8b:34:7b:90:b2:e3:06:83:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:0F:1B:57:3B:28:6B:4C:F7:DE:F9:CC:A1:DC:B6:BA:26:D1:29
X509v3 Authority Key Identifier:
keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/UlwPG1c7KGtM9975zKHctrom0Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.20.0/22
37.220.32.0/21
45.10.116.0/22
45.82.44.0/22
45.88.16.0/22
45.93.32.0/22
45.129.176.0/22
45.145.252.0/22
45.152.192.0/22
46.182.104.0/22
46.182.109.0-46.182.111.255
185.38.12.0/22
193.104.186.0/24
IPv6:
2a02:2a38::/32
Signature Algorithm: sha256WithRSAEncryption
81:40:8d:35:0c:cd:45:9a:ed:b7:da:98:b8:e4:fb:23:ae:d0:
56:c4:94:85:30:7a:d3:bb:f3:69:84:ba:c8:74:37:9f:ce:c0:
85:5f:f5:a2:18:fb:ae:cc:23:d2:fd:ea:83:39:79:fc:19:30:
09:ce:8a:53:3d:f1:a4:a0:79:44:08:b9:65:d8:90:3f:0d:7a:
a4:22:92:54:65:f9:b0:fd:6b:98:ed:2d:79:15:75:dc:70:02:
0c:0e:f2:e1:66:42:c9:5a:17:c8:72:ba:94:79:28:5d:7f:7d:
50:e7:de:c3:f1:c6:8a:cc:eb:99:a2:76:9f:2a:78:d5:9f:ef:
56:2d:28:4c:e3:2f:cd:af:50:f8:63:a8:3d:ef:77:d4:73:b7:
7b:39:ae:c2:e6:fd:5c:c8:ad:c4:63:af:9e:82:5a:0c:6c:15:
4b:30:13:57:88:f3:4b:5e:34:10:58:9f:bd:f1:80:34:d3:e2:
8d:61:7a:98:01:5b:7d:3c:10:f1:61:cf:32:cf:b2:c1:d8:5e:
03:6a:4f:a2:ce:0f:71:88:c8:0c:31:e1:8a:ba:1a:e5:44:4f:
7c:74:e6:62:7b:ba:9e:26:67:aa:bd:14:74:70:3d:ec:1f:ba:
28:02:12:42:b8:cb:1a:ab:76:8d:d7:96:bc:d6:e2:12:49:fe:
69:1d:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org