Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/uWLP-FtQKcaCMvVf-Ag_dNCkK-s.roa
File: uWLP-FtQKcaCMvVf-Ag_dNCkK-s.roa (raw, json)
Hash identifier: +enztgUBcG+DnW40XusULMoZUcZa2cB9o4v+z51lTxc=
Subject key identifier: B9:62:CF:F8:5B:50:29:C6:82:32:F5:5F:F8:08:3F:74:D0:A4:2B:EB
Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Certificate serial: 0183A82446E2938372165C243EA8A290C2EC
Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/uWLP-FtQKcaCMvVf-Ag_dNCkK-s.roa
Signing time: Wed 05 Oct 2022 12:34:53 +0000
ROA not before: Wed 05 Oct 2022 12:34:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200851
IP address blocks: 45.11.160.0/22 maxlen: 22
45.66.244.0/22 maxlen: 24
185.93.244.0/22 maxlen: 24
2a04:23c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:24:46:e2:93:83:72:16:5c:24:3e:a8:a2:90:c2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0
Validity
Not Before: Oct 5 12:34:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b962cff85b5029c68232f55ff8083f74d0a42beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:31:5d:58:97:30:fe:97:84:7c:2c:fb:83:a9:
07:90:a9:5f:69:d2:26:fe:8a:47:35:cc:60:92:60:
df:9e:31:2d:e9:f4:fa:ff:12:aa:ce:46:2f:f4:c6:
34:b7:0b:43:48:85:8a:e5:e3:fb:b2:16:52:e0:e8:
c5:50:f9:fd:3c:85:e0:96:d4:9a:78:f4:cb:5c:65:
8e:8e:eb:08:56:57:a3:35:8f:e4:4f:8b:9d:3e:09:
d0:74:b4:68:ba:79:98:06:e5:5a:02:3c:21:b3:e9:
ce:ca:98:d1:33:75:de:84:5c:ee:0c:2d:f3:7e:a5:
6d:ad:2b:f8:62:28:8b:c9:f9:fb:bf:ad:78:b4:81:
61:af:07:f7:d9:c8:58:70:87:91:31:c9:f3:aa:15:
58:19:5c:f0:0a:5b:f6:40:17:eb:47:16:8c:86:90:
10:be:79:4d:e2:bc:7e:73:47:21:5f:f5:f3:26:3b:
80:23:ea:63:7b:d2:f0:2b:85:39:ac:3f:e7:35:4f:
5f:55:6c:64:1b:a7:03:7b:1c:1a:b5:98:a6:91:9a:
bf:35:60:09:94:56:9f:75:8f:0d:0c:66:d9:3c:31:
6a:94:0f:dd:9e:7f:03:2c:0e:d0:3e:54:e2:2d:77:
76:76:c0:2a:8b:61:af:39:ef:c0:40:bc:60:cb:4d:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:CF:F8:5B:50:29:C6:82:32:F5:5F:F8:08:3F:74:D0:A4:2B:EB
X509v3 Authority Key Identifier:
keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/uWLP-FtQKcaCMvVf-Ag_dNCkK-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.160.0/22
45.66.244.0/22
185.93.244.0/22
IPv6:
2a04:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
e7:d6:a2:b6:86:45:47:4f:73:b9:d2:ed:ba:c5:c7:4f:ff:46:
8d:cf:bd:77:23:58:8c:f8:04:9e:ef:6d:0b:1e:df:c2:14:b9:
58:db:48:25:cd:29:7b:09:53:50:3e:94:cc:cb:d7:90:ca:8c:
e5:df:f8:58:81:e7:fb:65:a7:f4:e0:c5:46:86:67:aa:fd:c0:
7a:d6:69:81:75:39:0a:6a:bc:58:83:2a:85:d7:82:e8:bc:e8:
5c:79:28:41:b9:1d:3a:39:2d:b4:20:fe:5a:8b:01:aa:f1:e4:
77:95:6e:02:ab:4f:3b:e8:15:65:54:89:50:40:b5:5b:a1:92:
15:eb:a3:22:66:7e:73:24:7e:00:4f:9f:97:b3:25:cf:7c:79:
f0:6c:d8:c3:63:b0:35:8f:a0:51:c5:00:b8:e1:ef:e1:b7:85:
7c:21:44:b0:3c:68:8a:4f:6c:75:07:b9:21:4d:6f:b5:04:a8:
6f:74:af:5c:e1:62:57:22:62:af:5d:1c:6b:9b:9a:9f:25:c5:
1d:97:52:b1:24:9a:77:6b:b2:8d:95:cb:f7:be:f6:9e:02:7c:
5b:be:3e:9d:f4:61:cf:1a:fc:61:d8:7a:05:d4:f6:7d:9d:37:
5a:1a:48:0f:ec:63:46:45:3b:c5:39:7b:a8:6c:da:8c:4b:da:
75:1f:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:12 2024 by rpki-client on console-ams.rpki-client.org