Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UjCUlO8YZ52azh1UTEcrfVmpzzI.roa
File: UjCUlO8YZ52azh1UTEcrfVmpzzI.roa (raw, json)
Hash identifier: NDJA8q7m3hka8UfMzsDYL143rst65Jl3G6vJKFqxiBs=
Subject key identifier: 52:30:94:94:EF:18:67:9D:9A:CE:1D:54:4C:47:2B:7D:59:A9:CF:32
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018507A295A6964509BFE0D22D84D208AF60
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UjCUlO8YZ52azh1UTEcrfVmpzzI.roa
Signing time: Mon 12 Dec 2022 18:39:33 +0000
ROA not before: Mon 12 Dec 2022 18:39:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.79.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
84.32.220.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.222.0/24 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.178.0/24 maxlen: 24
84.32.179.0/24 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.248.0/22 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:a2:95:a6:96:45:09:bf:e0:d2:2d:84:d2:08:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 12 18:39:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52309494ef18679d9ace1d544c472b7d59a9cf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:40:1a:f4:14:c6:26:7d:d3:4e:30:db:8a:
65:4a:05:66:f2:ca:5c:35:cb:d1:a7:61:25:e6:3e:
a0:4f:b6:dd:d7:44:76:6e:6a:3b:1f:77:5b:1f:5f:
8a:b2:39:8d:80:51:8a:8d:78:11:51:ce:20:e4:a5:
c3:d8:a7:98:a1:e5:e2:0f:21:46:e2:7d:74:fc:5f:
f6:dc:91:12:4c:c9:37:5a:d5:4d:7e:7f:50:ca:d4:
d6:0f:8f:fd:26:bc:bc:2f:52:d5:13:6e:81:f0:06:
08:37:f7:be:a0:fa:be:b0:26:66:e1:78:80:73:2b:
c3:43:91:3d:07:8a:b1:fa:c7:2a:b3:ce:fa:66:ab:
e6:25:72:ba:43:75:37:36:08:4b:9b:c5:1d:fa:f2:
ca:0f:95:29:bb:b9:4a:f7:fe:62:bb:8c:68:89:88:
a1:ef:14:c3:cf:af:51:6b:5d:28:41:a0:bb:a1:4d:
c8:03:0f:a5:6d:1f:9f:2a:d0:78:f9:c2:92:0e:74:
a3:71:c9:df:4e:51:4d:98:df:b6:4b:84:d5:8e:b2:
95:fc:11:d2:ce:d2:f2:ce:ac:03:34:46:65:e8:a4:
ca:3c:7e:7f:95:ff:33:e1:00:df:49:b2:58:25:14:
20:58:36:d2:60:85:a7:b0:87:52:48:b8:65:0b:6e:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:94:94:EF:18:67:9D:9A:CE:1D:54:4C:47:2B:7D:59:A9:CF:32
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/UjCUlO8YZ52azh1UTEcrfVmpzzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/22
84.32.79.0/24
84.32.90.0/23
84.32.178.0/23
84.32.212.0/24
84.32.220.0-84.32.222.255
88.216.42.0/24
88.216.44.0/23
88.216.128.0/24
88.216.131.0/24
88.216.135.0/24
88.216.224.0/22
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
27:3f:30:b2:36:ed:17:43:73:48:8f:db:ca:a0:cc:6c:4f:1b:
65:c0:53:5b:20:c8:f9:c6:1f:2b:5c:de:1d:4a:b5:e4:64:d2:
6d:c0:63:48:d3:40:fc:5f:b7:22:3d:9d:b6:f0:52:e5:ff:52:
8d:1c:50:f9:44:b6:6d:5b:73:dc:b0:0b:97:3e:4c:54:a6:d4:
73:fc:24:5b:74:5d:d0:1e:fa:77:ae:2c:6c:e8:ef:28:83:a6:
c9:d9:47:bd:50:28:e3:50:cc:38:0a:05:53:b6:7c:3b:98:b0:
89:2e:fd:e0:57:e2:ae:49:b9:91:74:d4:b0:20:56:fc:d0:68:
6e:31:25:e6:56:c9:8a:63:98:01:5d:ad:6a:ba:1b:fe:d7:ed:
86:4f:27:40:39:5e:71:03:1d:61:cf:49:03:12:27:8e:a5:17:
31:cb:84:8e:fd:8a:97:dc:76:df:32:b1:e3:d2:e4:12:2e:17:
57:ee:3d:bc:b0:d2:94:0e:94:01:66:f1:cf:b6:b8:1b:fc:c2:
97:4f:51:f3:ab:db:cc:1b:a4:94:a6:65:4f:ac:4d:f9:18:26:
a8:0b:4c:b2:bb:93:dc:01:b7:25:65:fd:84:de:cc:5d:4d:88:
1f:51:37:29:1d:63:8d:2a:94:72:50:dd:25:db:8a:c7:3b:c5:
30:c5:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org