Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/UabLHCWVAMu7xiUPccMDv2M3-UQ.roa
File: UabLHCWVAMu7xiUPccMDv2M3-UQ.roa (raw, json)
Hash identifier: KfnP5FnOmvHXN9lq+cNo1PC+nDQwdCsu2KSrsiKkgfQ=
Subject key identifier: 51:A6:CB:1C:25:95:00:CB:BB:C6:25:0F:71:C3:03:BF:63:37:F9:44
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01855E41B34FE47CD72801B97F69563A70A2
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/UabLHCWVAMu7xiUPccMDv2M3-UQ.roa
Signing time: Thu 29 Dec 2022 14:20:42 +0000
ROA not before: Thu 29 Dec 2022 14:20:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207141
IP address blocks: 89.44.240.0/22 maxlen: 22
89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.44.243.0/24 maxlen: 24
89.44.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:41:b3:4f:e4:7c:d7:28:01:b9:7f:69:56:3a:70:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 29 14:20:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51a6cb1c259500cbbbc6250f71c303bf6337f944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:38:50:4f:02:29:fa:e3:3b:9c:7e:39:07:
56:7b:7c:84:7d:44:6f:a8:ed:74:0c:b9:3e:3f:a5:
19:64:31:4b:10:6c:4f:aa:4b:d7:d0:c7:68:1a:78:
f5:5b:9e:6b:2e:01:b4:1b:88:ce:a2:f2:be:25:c6:
4f:c4:a7:aa:3f:17:09:82:dd:b9:ca:32:17:96:82:
58:4a:ff:e3:c6:02:4b:21:00:e0:94:1e:94:a1:91:
61:79:36:7c:d0:43:06:72:d3:ba:ad:cf:ea:93:2e:
56:68:39:53:b6:7b:c9:d0:20:31:58:4f:a1:ea:68:
76:84:2e:ce:55:6b:52:80:5e:04:df:66:a1:24:71:
eb:14:ac:bc:47:3c:fb:c6:c0:6b:03:9a:3e:04:3f:
9d:fd:9a:77:ee:13:89:3e:61:61:30:e3:02:5a:6a:
1e:cb:ab:8f:d9:bf:a7:01:a7:26:37:04:85:d6:a3:
01:65:f3:e9:67:04:72:33:c7:f2:61:db:0d:5c:c2:
55:a9:76:37:1c:04:fc:23:a6:5f:d1:3a:2d:ed:c8:
f6:48:9f:4a:86:dd:7a:62:8a:05:47:ec:a3:6c:d1:
2d:e6:1d:9c:b2:de:13:d0:a9:ee:8f:7e:77:a9:3e:
c5:16:39:d3:c2:78:38:8b:d2:b6:3d:14:2b:85:70:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:CB:1C:25:95:00:CB:BB:C6:25:0F:71:C3:03:BF:63:37:F9:44
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/UabLHCWVAMu7xiUPccMDv2M3-UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0/22
Signature Algorithm: sha256WithRSAEncryption
93:01:97:10:d4:15:02:73:bd:f7:ca:91:d1:6b:fc:da:25:15:
33:a6:23:9f:49:5d:e5:f7:21:0f:5e:ca:2b:83:d3:53:7e:6a:
3d:d2:c7:ee:82:55:75:4f:91:61:7b:be:83:bc:f8:09:f7:4f:
0b:1f:09:4a:43:2f:51:e7:1d:ae:0a:00:8b:16:2d:a0:69:cf:
d3:f7:a1:13:bc:d0:8a:69:d8:63:19:16:ed:67:92:58:17:ff:
29:df:73:0b:43:81:c5:1e:d7:c2:dc:4d:79:c1:ae:d5:55:a0:
8d:0b:2b:b0:7b:26:bb:9c:7d:0b:5f:f4:5d:16:f5:a1:ad:96:
0c:75:92:5d:8b:af:d6:2d:78:da:c1:81:77:77:13:c5:6c:f6:
b3:48:e3:af:51:3f:c7:46:15:7d:8e:da:cb:65:05:ab:d5:37:
9b:03:cf:96:74:68:82:92:9c:2c:99:50:39:49:21:2c:64:ae:
c4:2f:bb:6a:2d:8e:ec:92:51:be:da:b9:28:09:e1:49:6f:68:
39:74:05:a5:b8:c3:fa:c2:00:d6:90:c2:7e:81:54:16:9c:24:
2d:4e:64:89:21:e0:97:28:17:28:5c:e7:cd:37:90:6a:5b:61:
93:1a:3b:9d:0e:c5:4a:4d:02:83:ed:86:52:fd:d5:1f:d3:6c:
c1:14:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-fra.rpki-client.org