Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/UXVhiwQ4E5fYS_u_KxzEdEAczow.roa
File: UXVhiwQ4E5fYS_u_KxzEdEAczow.roa (raw, json)
Hash identifier: VRqtpOa8/PzjCDu2ZKo/6Kl+qN6VI3Q70ThxuqTWzNQ=
Subject key identifier: 51:75:61:8B:04:38:13:97:D8:4B:FB:BF:2B:1C:C4:74:40:1C:CE:8C
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 03B16F6E
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/UXVhiwQ4E5fYS_u_KxzEdEAczow.roa
Signing time: Sat 01 Jan 2022 12:56:39 +0000
ROA not before: Sat 01 Jan 2022 12:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43395
IP address blocks: 185.145.184.0/22 maxlen: 22
185.186.50.0/24 maxlen: 24
185.186.51.0/24 maxlen: 24
185.186.48.0/24 maxlen: 24
185.186.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61960046 (0x3b16f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Jan 1 12:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5175618b04381397d84bfbbf2b1cc474401cce8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:ba:2a:8b:d0:a6:20:5e:a4:84:b1:e7:74:
97:7d:a7:c6:bb:01:75:5c:68:94:1f:8d:ca:b4:12:
c9:08:d2:4c:17:f0:bc:3c:62:47:d5:a8:79:6c:9b:
5b:48:2e:90:c8:40:3c:e8:23:89:cd:1a:4a:92:86:
92:c2:9b:96:23:03:79:11:d1:73:06:8b:bc:72:40:
50:f1:c0:62:8f:db:6f:e7:8f:d1:d3:a6:ac:45:e6:
d2:fc:b6:5d:45:b6:ef:6c:4a:60:4a:52:6a:35:a9:
b8:79:0f:e1:24:c4:bc:de:3f:48:e7:92:c7:67:9a:
ac:c4:42:9f:f4:f9:ef:c9:e7:4b:f2:cf:83:0f:38:
f3:df:2d:c5:27:4e:3b:99:96:a9:09:47:b4:f4:45:
03:4f:f0:e7:05:8c:fc:0b:83:66:90:af:54:56:71:
7c:6e:f3:d3:11:e8:bc:56:81:e6:58:4d:b9:53:6b:
a9:f0:54:6b:74:aa:32:1e:9b:30:8e:39:d0:bd:2b:
0e:be:22:1d:88:6a:92:db:d4:fe:09:05:35:61:37:
a3:ba:da:c5:47:76:f7:d6:99:82:36:47:ef:15:b8:
3c:50:73:d7:80:44:50:9b:c5:a3:cc:b7:58:6d:58:
89:07:09:fd:7b:f0:e5:2b:a4:94:06:b6:39:26:67:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:61:8B:04:38:13:97:D8:4B:FB:BF:2B:1C:C4:74:40:1C:CE:8C
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/UXVhiwQ4E5fYS_u_KxzEdEAczow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.184.0/22
185.186.48.0/22
Signature Algorithm: sha256WithRSAEncryption
54:07:4c:18:e8:4f:58:68:1c:dc:66:22:00:8e:cc:40:85:c4:
ed:84:04:90:66:50:d9:a9:ac:9b:1b:ef:69:dd:d0:2a:6c:c3:
2e:58:2f:14:10:49:d7:85:11:86:4a:6a:d7:12:e7:06:66:7d:
b0:e1:11:95:42:6a:b8:cb:c1:b3:68:00:21:81:9b:8c:4f:50:
96:71:6b:2a:99:8c:c5:f1:d9:20:0b:68:d7:29:df:b2:83:99:
d8:5f:4e:76:30:56:af:bc:ea:db:50:11:2d:15:86:cb:cc:69:
26:b9:2b:4f:62:94:85:c0:24:52:a2:85:50:f8:89:0e:8f:2d:
14:21:9d:a4:57:5b:6f:d1:97:85:f4:a0:07:6a:bc:a5:2b:9b:
6b:12:a2:86:cf:31:80:88:44:aa:20:80:a6:90:2b:de:9c:ed:
be:cf:d1:69:31:61:c6:35:1c:37:09:ac:ac:16:40:87:c5:ac:
7b:cb:66:74:5e:1b:ba:19:7d:a0:65:64:c8:a9:a8:a8:c1:6c:
7d:1e:8d:40:00:a2:e9:40:a4:73:75:b5:90:89:85:90:28:43:
fe:d7:95:d3:2f:27:e5:49:b5:5e:69:30:9e:5d:d3:83:37:2f:
6e:34:6b:17:67:5e:71:1f:b6:8e:81:c0:e9:95:18:7a:a6:2e:
38:47:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:23 2025 by rpki-client