Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/xUhJ4F5USwsxnSivAryV38uH17k.roa
File: xUhJ4F5USwsxnSivAryV38uH17k.roa (raw, json)
Hash identifier: F9obS4KHzB042GsJeUySkgICEqbsEozEvJaBiTvmaaM=
Subject key identifier: C5:48:49:E0:5E:54:4B:0B:31:9D:28:AF:02:BC:95:DF:CB:87:D7:B9
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 046AD7AA
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/xUhJ4F5USwsxnSivAryV38uH17k.roa
Signing time: Mon 28 Feb 2022 15:28:03 +0000
ROA not before: Mon 28 Feb 2022 15:28:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205952
IP address blocks: 62.213.72.0/21 maxlen: 21
62.213.86.0/24 maxlen: 24
62.213.94.0/23 maxlen: 23
62.213.102.0/23 maxlen: 23
212.158.168.0/24 maxlen: 24
212.158.170.0/23 maxlen: 23
212.158.174.0/23 maxlen: 23
62.213.112.0/23 maxlen: 23
62.213.116.0/24 maxlen: 24
217.23.152.0/21 maxlen: 21
46.183.166.0/23 maxlen: 23
185.48.236.0/22 maxlen: 22
212.24.57.0/24 maxlen: 24
217.23.129.0/24 maxlen: 24
217.23.139.0/24 maxlen: 24
212.24.37.0/24 maxlen: 24
212.24.43.0/24 maxlen: 24
212.24.40.0/24 maxlen: 24
212.24.39.0/24 maxlen: 24
212.24.50.0/24 maxlen: 24
2a01:9860::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74110890 (0x46ad7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Feb 28 15:28:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c54849e05e544b0b319d28af02bc95dfcb87d7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:31:22:bc:78:dd:4b:15:17:cb:54:79:d8:
74:ef:51:90:87:0c:e9:8b:79:6d:90:de:19:f0:8b:
42:68:ee:10:46:c0:fe:f9:bb:00:bc:9a:78:b1:41:
8a:7a:db:9a:d5:d0:48:ac:40:79:50:4b:41:09:91:
b7:23:1d:51:19:b9:42:ec:39:84:25:f7:0d:be:f3:
31:d2:b6:1a:90:6b:f5:2d:69:c6:c5:46:fc:d9:74:
d5:8b:de:81:fb:f2:40:df:7b:d3:70:22:70:eb:ca:
80:0f:43:5d:93:e3:4e:2a:ee:ac:2d:41:ab:35:4b:
31:37:53:96:d4:94:07:24:e4:5e:af:7b:01:cd:be:
b9:b7:a2:ef:70:4c:fc:78:9b:74:bb:b5:11:2c:3c:
d7:18:26:de:d6:7b:48:7c:75:a8:2a:b9:5f:88:7b:
f4:ab:da:0a:bd:30:20:29:c5:c4:c2:d1:de:cc:92:
fc:45:27:09:5c:d8:1c:a6:93:c8:d0:5a:83:89:5c:
b9:b5:5a:71:68:97:61:88:57:3d:63:2a:a6:fd:0c:
3b:3e:df:22:0c:72:ac:59:8c:a1:68:30:37:e4:06:
00:20:75:ec:51:07:95:06:fe:d2:0b:64:18:d3:24:
c3:d7:89:ea:f1:69:55:59:a2:d7:93:92:1b:ef:c7:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:48:49:E0:5E:54:4B:0B:31:9D:28:AF:02:BC:95:DF:CB:87:D7:B9
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/xUhJ4F5USwsxnSivAryV38uH17k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.166.0/23
62.213.72.0/21
62.213.86.0/24
62.213.94.0/23
62.213.102.0/23
62.213.112.0/23
62.213.116.0/24
185.48.236.0/22
212.24.37.0/24
212.24.39.0-212.24.40.255
212.24.43.0/24
212.24.50.0/24
212.24.57.0/24
212.158.168.0/24
212.158.170.0/23
212.158.174.0/23
217.23.129.0/24
217.23.139.0/24
217.23.152.0/21
IPv6:
2a01:9860::/32
Signature Algorithm: sha256WithRSAEncryption
ef:f5:cd:97:fb:90:78:3f:a4:2d:fe:b9:96:41:34:e7:ad:be:
8c:5e:eb:2a:08:7a:e7:d7:6d:86:ec:95:4b:e7:92:1a:70:d6:
e0:a0:40:6b:43:b5:dd:7b:ce:60:57:bc:0f:ed:cd:c2:a0:be:
53:f0:78:80:7c:83:73:4c:eb:7b:9a:2f:4b:5a:1d:5d:2b:0f:
b8:44:7a:b1:91:c3:d8:17:1d:70:4c:c6:8b:36:72:1c:04:f6:
ef:83:31:d9:a3:52:27:5f:af:35:2a:9a:f4:35:28:ef:7b:aa:
22:71:ee:3c:c1:7d:be:03:65:fe:de:cd:0f:38:78:4c:82:4e:
e0:b0:29:e1:b9:4b:c9:84:85:6e:da:a2:08:1c:86:ff:49:62:
bf:94:f1:ba:5e:aa:06:c1:63:81:4b:0e:d9:26:cc:13:14:27:
22:92:c6:33:60:15:30:0c:07:bb:8d:06:d6:62:85:41:56:a7:
b5:02:2d:2e:00:c0:71:a6:c3:34:42:06:33:9e:5d:c8:eb:5c:
4f:06:b9:7a:12:22:ef:db:31:1b:c8:72:70:97:ca:83:da:7c:
e6:b9:c2:8b:12:e0:a3:23:19:d2:2f:72:96:b4:bf:82:0f:72:
69:03:cb:8d:76:d4:d2:55:80:6e:88:15:f3:0f:e0:67:a0:6f:
66:2d:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:05 2024 by rpki-client on console-fra.rpki-client.org