Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/uhtHPP95ZCzHDVdqeaZ6uFPDJNo.roa
File: uhtHPP95ZCzHDVdqeaZ6uFPDJNo.roa (raw, json)
Hash identifier: p5ynrTx34X5XRntcW661eBE6m7sVJP03cl1F1Y3p1Lc=
Subject key identifier: BA:1B:47:3C:FF:79:64:2C:C7:0D:57:6A:79:A6:7A:B8:53:C3:24:DA
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 040ED5ED
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/uhtHPP95ZCzHDVdqeaZ6uFPDJNo.roa
Signing time: Sat 01 Jan 2022 15:55:34 +0000
ROA not before: Sat 01 Jan 2022 15:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 89.38.242.0/23 maxlen: 23
89.33.234.0/23 maxlen: 23
89.35.156.0/23 maxlen: 23
89.35.176.0/23 maxlen: 23
89.43.88.0/21 maxlen: 21
89.43.204.0/23 maxlen: 23
89.42.32.0/23 maxlen: 23
89.37.30.0/23 maxlen: 23
89.40.128.0/23 maxlen: 23
89.33.204.0/23 maxlen: 23
89.34.168.0/23 maxlen: 23
89.39.186.0/23 maxlen: 23
89.34.176.0/23 maxlen: 23
89.44.202.0/23 maxlen: 23
89.44.112.0/23 maxlen: 23
89.45.68.0/23 maxlen: 23
89.44.118.0/23 maxlen: 23
89.34.88.0/23 maxlen: 23
89.46.44.0/23 maxlen: 23
89.34.94.0/23 maxlen: 23
89.35.58.0/23 maxlen: 23
89.44.146.0/23 maxlen: 23
89.45.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68081133 (0x40ed5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Jan 1 15:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba1b473cff79642cc70d576a79a67ab853c324da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:92:0a:f1:91:78:71:c6:6e:05:e7:79:e0:
33:b2:7d:25:db:ff:35:a1:6b:11:26:dc:b5:d9:f3:
95:ac:05:73:27:c9:d9:3f:0d:af:fc:5a:91:cc:b6:
3d:fb:59:03:ee:ba:4a:17:8b:67:47:db:3a:15:71:
f6:1f:75:7f:f0:66:05:81:cf:e8:08:f9:74:53:52:
05:67:80:8a:2d:6b:1e:53:4e:eb:e7:0b:8d:e2:8f:
64:63:a5:8f:07:92:ec:8c:d9:8b:15:8b:ed:d6:65:
f3:9f:90:22:fb:7d:73:03:4c:a1:b3:bb:6b:b9:df:
35:bf:2d:7b:a1:68:af:af:22:24:ba:e3:5d:32:5b:
26:14:a3:1b:d2:2b:07:77:f1:fc:4d:61:ce:f4:3a:
d0:49:9a:d6:d8:70:d2:13:3f:88:28:14:af:00:5a:
2f:38:4a:b9:b3:14:db:d8:f6:98:f1:84:fe:98:62:
74:23:76:4d:18:e4:53:b7:8b:b9:4a:81:85:43:6a:
6c:7c:9e:c1:c7:04:1d:c2:ac:d2:a0:81:d0:92:d7:
ee:10:bc:1e:24:4a:55:7d:55:c3:97:f3:8d:46:7d:
bd:54:18:98:2f:5b:29:84:cf:3d:19:c6:17:fc:98:
1f:3c:90:ea:28:cd:41:22:14:b5:9b:99:70:58:91:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:47:3C:FF:79:64:2C:C7:0D:57:6A:79:A6:7A:B8:53:C3:24:DA
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/uhtHPP95ZCzHDVdqeaZ6uFPDJNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.204.0/23
89.33.234.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.35.58.0/23
89.35.156.0/23
89.35.176.0/23
89.37.30.0/23
89.38.242.0/23
89.39.186.0/23
89.40.128.0/23
89.42.32.0/23
89.43.88.0/21
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.146.0/23
89.44.202.0/23
89.45.68.0/23
89.45.230.0/23
89.46.44.0/23
Signature Algorithm: sha256WithRSAEncryption
64:09:2d:f4:a4:85:9e:d2:d1:7d:06:7f:da:c5:35:af:d9:dd:
db:2c:0c:9e:8c:79:28:0b:2f:d3:24:9f:ed:28:ca:6c:ad:07:
9d:91:25:29:c4:b3:af:cb:63:93:59:9d:02:dc:f7:8f:e3:82:
14:44:ab:27:96:c9:21:eb:36:0a:fa:0a:a5:fe:b6:2a:7c:b6:
88:d0:59:b7:fe:b0:90:7a:39:ac:e3:e7:17:a0:11:8e:ae:2b:
87:68:e9:8b:3a:53:e2:67:a3:84:36:ea:d7:71:44:28:a9:e2:
2e:99:0c:1e:0b:ab:3e:ec:2d:af:13:89:72:cd:72:03:33:2a:
6d:2a:df:c4:0a:02:22:bb:1d:ba:8f:59:df:8e:c4:3f:27:f7:
d4:93:f6:36:2b:ee:08:b3:57:97:43:c4:6e:10:35:ef:1b:ab:
17:97:10:36:5c:2e:4c:ac:8a:79:67:42:46:55:d6:fb:cf:a6:
ea:e9:6f:63:26:6f:ee:1e:96:fe:a8:5a:82:92:4e:eb:c8:c6:
25:99:95:63:5e:60:c5:e7:e8:c7:8f:46:98:d2:81:43:f0:a9:
7c:51:d6:45:f4:a4:89:88:b0:02:6d:d4:82:bd:52:3e:bf:7d:
76:f2:3b:55:69:75:04:ab:64:3f:48:35:c8:35:e3:44:a8:b6:
cf:e5:48:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:12 2023 by rpki-client on console-ams.rpki-client.org