Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/uHmzD0Xqs1wa04S-03xfu7TJwdU.roa
File: uHmzD0Xqs1wa04S-03xfu7TJwdU.roa (raw, json)
Hash identifier: Ck8okqQ+YzOlq1y9UQ1dppvml8Plf2l2yvDHamUmrsw=
Subject key identifier: B8:79:B3:0F:45:EA:B3:5C:1A:D3:84:BE:D3:7C:5F:BB:B4:C9:C1:D5
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: E18A84
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/uHmzD0Xqs1wa04S-03xfu7TJwdU.roa
Signing time: Mon 14 Feb 2022 14:26:17 +0000
ROA not before: Mon 14 Feb 2022 14:26:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204957
IP address blocks: 195.211.98.0/23 maxlen: 23
195.211.96.0/23 maxlen: 23
82.117.252.0/23 maxlen: 23
45.90.56.0/22 maxlen: 22
195.123.232.0/22 maxlen: 22
195.123.236.0/22 maxlen: 22
195.123.240.0/22 maxlen: 22
195.123.244.0/22 maxlen: 22
62.233.57.0/24 maxlen: 24
2a05:9400::/32 maxlen: 32
2a12:6fc0::/32 maxlen: 32
2a05:9403::/32 maxlen: 32
2a05:9405::/32 maxlen: 32
2a05:9406::/32 maxlen: 32
2a05:9402::/32 maxlen: 32
2a05:9401::/32 maxlen: 32
2a12:6fc1::/32 maxlen: 32
2a05:9404::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14781060 (0xe18a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Feb 14 14:26:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b879b30f45eab35c1ad384bed37c5fbbb4c9c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:80:f0:5c:b3:0e:61:8c:1c:a6:ca:cf:a5:
92:53:4a:ff:dc:19:f8:39:90:8a:53:a2:73:91:99:
06:43:c7:47:c6:75:a8:75:7e:93:a8:65:d0:64:02:
70:c5:64:00:b5:40:5b:07:ac:3d:47:96:8b:d7:32:
b0:f9:5a:4d:1f:77:ca:5b:11:50:25:35:31:fa:6c:
bc:eb:64:52:1f:d3:6e:e1:2b:a8:d2:e7:a2:aa:84:
9f:d7:25:2f:a9:78:6c:e3:e7:68:ce:67:b0:8f:77:
6a:b8:cc:ff:8e:8c:af:da:4b:e6:ec:92:dc:a6:04:
ad:2b:8c:7e:89:ff:4b:ff:95:9b:4a:19:42:62:04:
e2:60:5a:4b:2f:bf:a5:93:65:ab:19:4a:df:db:c6:
29:cd:d8:2a:de:7c:7b:cf:8f:ba:e8:72:92:8a:b0:
5d:1a:7d:7b:d7:32:ca:fa:12:90:e0:8f:9a:d5:6b:
94:cc:1a:0e:fb:93:79:56:5c:3c:c9:a9:43:57:50:
94:70:95:b6:89:89:54:3b:ec:d2:6e:dc:e9:37:34:
1f:d4:1e:b1:64:7a:a3:7e:d6:5e:e9:92:27:76:79:
0d:06:05:2f:98:a3:79:e8:cf:c5:92:90:4d:08:ae:
4f:b5:f0:e4:73:9d:21:99:6b:2a:70:01:7c:df:43:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:79:B3:0F:45:EA:B3:5C:1A:D3:84:BE:D3:7C:5F:BB:B4:C9:C1:D5
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/uHmzD0Xqs1wa04S-03xfu7TJwdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.56.0/22
62.233.57.0/24
82.117.252.0/23
195.123.232.0-195.123.247.255
195.211.96.0/22
IPv6:
2a05:9400::-2a05:9406:ffff:ffff:ffff:ffff:ffff:ffff
2a12:6fc0::/31
Signature Algorithm: sha256WithRSAEncryption
13:87:03:b0:58:ea:e7:7e:e1:43:e2:bf:0e:45:a9:1a:92:8d:
e6:57:ee:ce:3e:0d:a0:cf:63:88:d1:ce:57:33:48:92:f4:1e:
52:1e:95:82:26:d0:da:3f:f6:83:bb:d0:d3:e3:d7:a0:91:40:
58:3d:a0:10:be:be:64:6b:8b:68:16:48:ab:49:ce:27:da:18:
55:4b:45:73:31:88:b8:61:41:c9:16:78:ac:4c:5c:1f:c1:3f:
04:11:cd:16:e7:2e:30:61:5f:82:8b:ab:4a:7f:a6:79:02:94:
8b:5b:6f:d6:57:ec:cd:6c:40:0a:05:45:d0:e1:d0:51:18:d7:
72:8b:ec:f3:ff:c9:e9:d6:2a:55:24:dc:9c:c5:68:a7:95:e4:
0f:fd:e8:86:5f:24:5b:b4:0b:18:f9:86:63:43:06:eb:c9:5e:
5f:21:62:e9:e2:44:d3:c4:bf:fe:a8:42:a4:f5:21:aa:68:64:
a5:42:17:89:40:21:72:08:be:e0:ef:97:bb:b4:e8:76:8f:fc:
bb:87:5b:4c:d3:34:71:79:94:41:50:6a:e5:4a:87:07:37:da:
e2:3b:be:06:32:86:e0:b9:fb:60:f7:f1:89:d7:b3:84:06:cd:
e5:90:ac:2f:fb:ce:5b:36:b7:2f:59:c9:d4:6b:57:48:ef:57:
3d:d6:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:08:47 2025 by rpki-client