Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/uZC5gJH8YR7YBfcS3cvggeV8Ocs.roa
File: uZC5gJH8YR7YBfcS3cvggeV8Ocs.roa (raw, json)
Hash identifier: yxS3AM67MGGs21x1JwSI6adQzb04UZ4f4shA8llNIdQ=
Subject key identifier: B9:90:B9:80:91:FC:61:1E:D8:05:F7:12:DD:CB:E0:81:E5:7C:39:CB
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03F7D8DC
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/uZC5gJH8YR7YBfcS3cvggeV8Ocs.roa
Signing time: Wed 01 Jun 2022 16:02:20 +0000
ROA not before: Wed 01 Jun 2022 16:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3348
IP address blocks: 93.92.224.0/22 maxlen: 24
185.119.236.0/22 maxlen: 24
85.117.244.0/22 maxlen: 24
45.144.12.0/22 maxlen: 24
188.208.20.0/22 maxlen: 24
2a06:8840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66574556 (0x3f7d8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jun 1 16:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b990b98091fc611ed805f712ddcbe081e57c39cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:2c:bc:97:6d:4d:47:9e:16:75:01:d5:5a:
c1:a5:ed:d7:51:07:ac:d2:a2:49:ed:1f:50:e4:6d:
98:aa:56:c0:6f:7f:08:13:8f:ea:cb:aa:f7:52:c0:
5b:d8:d7:63:54:17:dc:6f:26:8c:ea:c4:ec:11:ab:
cc:92:a2:f0:fc:bb:46:d5:57:d9:aa:6e:6f:f8:fb:
f9:c8:dc:90:4c:0b:5b:b5:34:34:23:0c:bf:c5:de:
e2:36:68:e7:e6:0b:ae:b7:48:a8:b9:b2:f7:fb:08:
0e:3f:9f:e6:8c:76:ef:32:74:88:bf:42:f1:9f:86:
c5:79:13:61:60:59:b6:f1:2c:f7:95:77:ac:66:50:
c0:c4:74:b7:0f:e2:eb:99:7d:06:8a:40:1b:16:04:
74:4a:08:52:58:c6:64:3b:7e:09:8f:38:ae:fb:92:
b9:6a:87:90:29:14:41:28:b0:05:f2:3b:04:a9:4a:
e2:1c:5b:06:a4:c1:22:ea:c3:04:01:8a:7f:fb:9f:
60:09:3f:ff:97:fb:e2:fe:83:34:18:54:07:d7:5b:
73:21:87:07:0d:40:c3:13:5e:e7:ce:a3:19:43:e0:
5e:54:0e:f8:10:74:3a:a1:ff:ae:af:02:00:f7:6b:
35:d3:38:54:f8:0e:4f:40:f5:f2:0c:b2:31:85:c5:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:B9:80:91:FC:61:1E:D8:05:F7:12:DD:CB:E0:81:E5:7C:39:CB
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/uZC5gJH8YR7YBfcS3cvggeV8Ocs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.12.0/22
85.117.244.0/22
93.92.224.0/22
185.119.236.0/22
188.208.20.0/22
IPv6:
2a06:8840::/29
Signature Algorithm: sha256WithRSAEncryption
9f:6d:cf:d6:c2:9a:fb:f9:0c:ba:7c:46:d3:e9:49:a1:eb:a3:
bf:a5:c5:08:1d:04:6f:de:ae:8d:6d:a0:9f:3d:42:5c:e6:c2:
38:75:ff:a9:56:8e:13:57:22:f2:32:3b:67:49:a5:b9:8b:97:
56:e5:52:42:1c:75:ef:d9:87:8f:ad:40:2e:1a:bb:8c:aa:71:
d9:d1:fa:38:1e:5f:b8:2c:17:4e:6c:76:89:ec:92:01:a8:08:
98:e6:5f:ff:f0:7b:90:a2:ec:f1:a0:dd:67:34:91:a3:36:bb:
23:2b:d6:1d:69:ca:92:f6:0b:c7:73:9d:16:16:d9:a5:dd:59:
9a:2f:60:ab:8e:f9:0c:aa:02:00:21:21:bc:30:95:cc:fa:22:
78:37:91:be:19:83:d7:8f:e6:26:4e:92:30:b9:57:bf:3e:86:
84:9c:5e:87:10:06:b5:dc:86:56:f4:9e:a6:d8:af:f4:1e:e8:
f0:98:f2:02:e2:19:8a:7f:e7:59:03:25:24:dd:7f:da:cd:3b:
90:91:b9:10:dd:17:c0:cb:5c:dd:1e:05:fd:2e:b6:6a:2d:e5:
4d:6d:04:0c:73:91:c9:28:25:ed:cf:07:a6:2e:9f:9a:7b:8d:
8e:cc:1e:bf:2f:fe:31:ba:ac:bb:0a:52:4f:29:87:ca:44:d8:
35:ae:9c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org