Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/UuIMVUloe01R9-segSC78Fop604.roa
File: UuIMVUloe01R9-segSC78Fop604.roa (raw, json)
Hash identifier: oE1eKsRheUTPTQkw9HxHMrs0D1YFDxAu+ieJRj3P/dc=
Subject key identifier: 52:E2:0C:55:49:68:7B:4D:51:F7:EB:1E:81:20:BB:F0:5A:29:EB:4E
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 36682E8C
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/UuIMVUloe01R9-segSC78Fop604.roa
Signing time: Tue 03 May 2022 09:09:25 +0000
ROA not before: Tue 03 May 2022 09:09:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35699
IP address blocks: 45.145.244.0/22 maxlen: 24
62.56.192.0/20 maxlen: 24
70.34.224.0/20 maxlen: 24
216.147.96.0/20 maxlen: 24
87.236.180.0/22 maxlen: 24
45.230.12.0/22 maxlen: 24
45.137.240.0/22 maxlen: 24
91.126.32.0/19 maxlen: 24
91.126.64.0/19 maxlen: 24
185.239.36.0/22 maxlen: 24
147.161.64.0/18 maxlen: 24
91.126.16.0/20 maxlen: 24
45.151.224.0/22 maxlen: 24
91.126.160.0/19 maxlen: 24
74.126.176.0/20 maxlen: 24
143.131.192.0/18 maxlen: 24
110.93.8.0/22 maxlen: 24
185.203.208.0/22 maxlen: 24
91.126.96.0/19 maxlen: 24
86.111.60.0/22 maxlen: 24
64.190.114.0/23 maxlen: 24
91.126.128.0/19 maxlen: 24
135.129.224.0/20 maxlen: 24
98.96.184.0/21 maxlen: 24
103.202.232.0/22 maxlen: 24
45.130.132.0/22 maxlen: 24
91.126.192.0/19 maxlen: 24
45.133.138.0/23 maxlen: 24
147.136.252.0/23 maxlen: 24
91.126.224.0/19 maxlen: 24
91.126.232.0/21 maxlen: 24
173.243.32.0/20 maxlen: 24
2a00:1af4::/32 maxlen: 32
2a00:1af4:1000::/48 maxlen: 48
2a00:1af0::/29 maxlen: 29
2a00:1af4:1003::/48 maxlen: 48
2a00:1af1::/32 maxlen: 32
2a00:1af1::/36 maxlen: 36
2a00:1af2::/32 maxlen: 32
2a00:1af3::/32 maxlen: 32
2a00:1af0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912797324 (0x36682e8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: May 3 09:09:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52e20c5549687b4d51f7eb1e8120bbf05a29eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:d1:58:c6:64:aa:00:bf:ce:75:8c:fc:fb:
f3:55:f7:ba:4b:2f:fe:fa:7e:de:ad:76:77:dc:a2:
fc:51:06:a1:8e:09:32:f1:e7:59:51:ec:cf:43:2d:
4e:5e:e2:2b:c5:3b:2a:b1:35:5c:15:ec:22:74:b4:
29:41:c2:cb:0c:3f:5f:e2:b4:72:c6:1e:6f:52:82:
2f:01:a1:c9:12:cf:5d:8e:83:b5:ca:d0:50:04:31:
4b:a4:4f:8d:b3:dd:97:c7:0a:9e:9b:ef:46:55:b9:
24:ef:bc:37:f5:a3:30:63:e8:31:8f:09:0f:71:2e:
82:c7:71:9a:8e:6f:01:f1:81:6b:22:7f:25:ef:66:
29:57:05:c6:ff:41:ba:3d:2f:03:22:7e:7b:52:45:
21:6f:33:27:0d:56:21:76:20:e5:06:cb:c9:0f:6c:
86:bf:a9:7d:1e:5d:e3:07:01:63:d5:59:00:26:7a:
6f:a7:d8:8b:06:5f:94:de:5c:16:c4:42:f1:21:75:
55:a4:6a:21:e5:76:e7:22:68:81:b3:65:0e:81:f9:
af:1d:ff:0e:3e:f5:3c:87:0d:8f:d3:48:54:ff:14:
db:66:2c:fd:b0:1c:83:4b:48:8f:9f:4b:f4:ad:21:
10:74:19:d2:e7:b1:c2:64:a4:96:b0:2c:67:84:cb:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E2:0C:55:49:68:7B:4D:51:F7:EB:1E:81:20:BB:F0:5A:29:EB:4E
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/UuIMVUloe01R9-segSC78Fop604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.132.0/22
45.133.138.0/23
45.137.240.0/22
45.145.244.0/22
45.151.224.0/22
45.230.12.0/22
62.56.192.0/20
64.190.114.0/23
70.34.224.0/20
74.126.176.0/20
86.111.60.0/22
87.236.180.0/22
91.126.16.0-91.126.255.255
98.96.184.0/21
103.202.232.0/22
110.93.8.0/22
135.129.224.0/20
143.131.192.0/18
147.136.252.0/23
147.161.64.0/18
173.243.32.0/20
185.203.208.0/22
185.239.36.0/22
216.147.96.0/20
IPv6:
2a00:1af0::/29
Signature Algorithm: sha256WithRSAEncryption
2e:ae:c8:d2:3d:d4:fa:97:5b:76:e3:98:3a:31:25:4c:23:5d:
16:2a:ec:1b:00:94:33:1c:6c:2e:49:81:bd:2a:68:db:90:be:
7a:7e:a9:59:a2:ff:b6:a0:17:6d:07:37:57:cd:32:dd:f6:b0:
5e:f0:43:ef:b6:1b:09:6e:f5:7d:6a:87:64:6d:cd:c5:f5:b2:
6e:f1:6f:dd:95:d4:23:ef:fb:3d:f0:74:9d:3d:63:fc:ac:11:
fc:aa:c4:9d:0c:5c:ee:94:3a:04:d3:ab:13:24:1d:80:52:4e:
8f:f7:5b:45:65:8d:89:2d:12:e1:61:0a:42:85:74:55:68:68:
2d:3c:58:8c:b6:f1:29:03:e1:84:43:2c:75:57:bd:eb:0b:20:
cd:94:ca:b3:83:73:fd:0f:81:03:91:90:95:0e:6b:b2:6e:86:
46:81:05:f2:86:6d:fd:c4:d8:a1:66:a9:7c:dd:b2:91:e0:c8:
c6:61:91:c8:38:54:56:82:ac:90:64:88:dc:2d:aa:a0:2f:e7:
a7:75:7e:13:af:82:f5:b5:f7:13:c8:aa:a7:d0:f8:e0:e7:6b:
54:c9:1c:55:d8:e6:63:cf:de:c3:08:bb:7b:6f:b2:83:c0:12:
e8:89:b8:09:25:23:ee:de:a6:fd:13:5a:ac:bc:d5:8b:99:b7:
dd:94:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:56 2023 by rpki-client on console-ams.rpki-client.org