Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/ujRmiaPEqn-oX8bW18CaDB3PJpQ.roa
File: ujRmiaPEqn-oX8bW18CaDB3PJpQ.roa (raw, json)
Hash identifier: l2OUQzwE1WJeoyH7RNA6mWCYlKaIJFp1ySK9rAnTWcE=
Subject key identifier: BA:34:66:89:A3:C4:AA:7F:A8:5F:C6:D6:D7:C0:9A:0C:1D:CF:26:94
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 447E8C56
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/ujRmiaPEqn-oX8bW18CaDB3PJpQ.roa
Signing time: Sat 01 Jan 2022 11:01:02 +0000
ROA not before: Sat 01 Jan 2022 11:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45014
IP address blocks: 217.172.128.0/20 maxlen: 24
185.18.32.0/24 maxlen: 24
185.184.236.0/22 maxlen: 22
159.253.56.0/21 maxlen: 24
80.93.160.0/20 maxlen: 24
92.60.96.0/20 maxlen: 24
2a00:1a90::/32 maxlen: 38
2a03:f2c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149144150 (0x447e8c56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jan 1 11:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba346689a3c4aa7fa85fc6d6d7c09a0c1dcf2694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:96:3b:31:0e:09:77:cf:12:40:93:04:44:
4c:62:93:5a:18:00:65:39:80:61:07:67:fa:f4:b9:
a7:a4:9b:03:ae:6d:fe:b8:e9:c1:8b:df:dd:32:e7:
33:ae:0c:c6:40:eb:b3:c0:2c:de:af:76:c3:2e:3f:
3e:a9:f9:f8:94:06:07:29:f3:f8:84:a7:6a:22:68:
57:42:42:b4:6d:24:43:71:f2:48:9f:28:66:0c:45:
66:bc:fc:c1:fa:28:a5:59:8f:c1:e4:d8:a5:df:70:
8c:2f:33:50:3c:b1:03:7b:4a:20:f7:54:f7:a1:83:
b2:1f:57:a4:07:47:c4:0c:cd:6d:af:05:9f:cb:25:
66:ee:ba:cf:ae:bc:41:de:e9:c0:fa:12:08:41:24:
61:6f:3e:6a:9e:4f:c0:45:59:73:49:cf:6d:a8:1d:
e8:fa:59:3a:a3:fd:a1:ce:3f:7d:7a:83:75:01:4b:
b6:9c:a9:4e:d3:60:a8:34:f5:db:11:61:5b:35:d7:
0f:5b:27:7b:9b:87:a6:44:a3:c5:d7:54:1e:31:c0:
c8:f2:d2:02:42:d5:6f:18:af:76:46:d3:6b:3a:40:
ab:00:48:10:7d:ca:8b:bd:d9:d7:16:d5:6b:52:5f:
85:bc:3a:0a:1e:f8:5c:97:60:74:a8:2c:e2:d8:e0:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:66:89:A3:C4:AA:7F:A8:5F:C6:D6:D7:C0:9A:0C:1D:CF:26:94
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/ujRmiaPEqn-oX8bW18CaDB3PJpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.160.0/20
92.60.96.0/20
159.253.56.0/21
185.18.32.0/24
185.184.236.0/22
217.172.128.0/20
IPv6:
2a00:1a90::/32
2a03:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
80:bb:13:d9:51:51:ea:38:eb:c2:af:59:49:5b:56:c1:0f:d6:
8b:65:fb:9c:57:40:17:f8:ff:b1:92:38:ba:d9:8c:0f:50:4a:
c8:bd:27:03:a4:fd:c4:1a:52:da:e1:ee:3f:6b:7a:a6:d6:e7:
84:3f:4b:e4:6b:03:eb:e6:6c:ac:70:74:40:d3:5e:3d:c8:ab:
30:79:2b:3f:ff:21:b7:79:35:9d:54:80:d2:42:33:7e:6c:b0:
e5:3c:99:0c:ef:63:39:f8:2e:50:81:0c:0e:f6:50:15:a7:53:
60:d7:a7:d5:b3:f8:7c:4e:c5:27:c7:25:93:88:64:33:8a:92:
a2:83:d9:1d:94:bb:96:9a:c0:78:0a:81:a8:db:dc:54:71:08:
ae:db:13:3a:1c:0f:a0:3c:24:60:58:0d:87:d7:97:08:8f:30:
44:f5:d1:88:0a:6e:57:29:79:a8:eb:15:68:f2:57:24:03:4e:
d7:12:05:32:03:3b:d7:d9:08:62:4e:aa:0c:d5:4d:b5:65:e1:
d0:87:b9:40:fc:1b:21:fd:27:b0:f1:dd:83:df:71:bc:48:66:
14:60:5d:b9:94:87:1c:8b:0c:8b:e7:43:b0:87:fd:72:41:71:
37:f5:e0:af:69:fb:82:44:ce:82:10:67:c5:cf:0e:b7:de:a4:
b0:1e:6f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:18 2023 by rpki-client on console-ams.rpki-client.org