Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VUIhvEuwt1tU6iY4bPDQ5qPOgBU.roa
File: VUIhvEuwt1tU6iY4bPDQ5qPOgBU.roa (raw, json)
Hash identifier: 0KucOuNeynaOkK4cJwe8OyBHHuXZaZdieX62f+nEGdg=
Subject key identifier: 55:42:21:BC:4B:B0:B7:5B:54:EA:26:38:6C:F0:D0:E6:A3:CE:80:15
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185117B059FEBC89A621EABB9F0EE9F26BC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VUIhvEuwt1tU6iY4bPDQ5qPOgBU.roa
Signing time: Wed 14 Dec 2022 16:32:33 +0000
ROA not before: Wed 14 Dec 2022 16:32:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.5.67.0/24 maxlen: 24
185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
185.36.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:7b:05:9f:eb:c8:9a:62:1e:ab:b9:f0:ee:9f:26:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 14 16:32:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=554221bc4bb0b75b54ea26386cf0d0e6a3ce8015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:e8:4d:73:5e:d5:db:a7:a2:b0:54:a4:44:
91:83:d0:f5:40:8e:04:cd:8e:87:b6:ef:01:1a:3b:
38:df:88:f5:fd:69:15:e5:66:96:f9:68:7b:03:74:
18:af:5b:d0:d0:e8:55:6c:8f:d7:bf:fc:9f:3b:c3:
76:29:60:6f:1a:76:88:73:8d:1a:1b:a4:55:4a:65:
4b:66:4e:48:95:fe:62:0b:1c:39:b4:92:64:53:6f:
37:41:be:54:4b:f4:58:1d:5e:3d:40:b9:72:b4:1d:
f2:7b:3b:7a:c2:52:22:b4:73:35:be:7e:de:e7:7e:
52:6b:3c:ea:d7:57:16:0d:2a:d1:ea:29:8d:cf:9c:
f4:aa:98:42:39:af:a0:48:c7:ee:a6:ab:65:3e:d1:
b0:33:42:10:c5:cb:45:dc:d0:96:89:c3:7e:6e:0f:
40:ee:7b:89:c9:6f:bf:57:70:1e:92:85:96:36:bd:
ee:1c:fb:96:2d:da:08:55:b9:1f:b4:69:07:e4:1b:
33:27:87:21:12:db:ee:e7:ea:d0:8b:d6:26:00:44:
d3:92:1a:1b:fd:7a:08:de:e2:1f:9f:8d:82:19:f3:
26:a3:8a:a5:1c:d8:71:d5:4f:c2:e7:8c:da:a4:13:
4e:4e:de:b4:98:63:39:3c:c9:4a:ef:1f:0b:db:fe:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:21:BC:4B:B0:B7:5B:54:EA:26:38:6C:F0:D0:E6:A3:CE:80:15
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VUIhvEuwt1tU6iY4bPDQ5qPOgBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.36.205.0/24
185.121.12.0/22
185.206.248.0/24
185.206.251.0/24
185.223.76.0/24
185.226.105.0/24
185.226.107.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.255.124.0/24
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
15:29:05:03:d7:69:1f:2c:51:1e:12:59:b2:0f:82:02:50:1a:
d2:b9:52:af:1a:33:da:c3:f2:de:e7:fe:68:aa:6a:de:bc:19:
f3:b3:06:f5:65:40:8e:a6:23:7e:de:db:7b:0b:59:47:67:f5:
43:05:ea:71:13:0c:79:ec:98:dd:58:49:04:af:5f:2a:1c:ae:
84:77:9c:4c:97:b5:e9:e7:9c:20:f8:1f:44:69:0c:88:8d:69:
8b:ed:90:53:66:19:bb:db:78:89:56:58:56:bb:25:7f:06:41:
53:bf:d8:a4:e3:18:c5:3f:a7:86:c2:de:0d:85:dc:4c:0a:44:
c3:cd:4c:ce:8f:0b:a1:2e:02:d7:74:4d:20:c0:3c:f9:cf:06:
55:92:4a:74:ed:90:cb:2d:e9:af:2e:83:a2:16:9a:02:cf:fe:
f1:fa:bf:bb:05:ce:d7:af:5e:c5:eb:b9:24:5f:2e:e2:bc:65:
f6:a4:db:b0:a3:27:eb:f9:4b:93:1a:97:79:41:7c:f2:bd:05:
95:c4:5d:92:f6:61:5b:59:0b:1e:c5:88:55:c6:66:1f:9d:39:
9b:27:62:be:86:fd:3d:71:c2:6e:d0:ae:64:de:a8:f9:be:04:
f9:bd:80:af:d5:f1:ee:83:ae:77:cf:70:59:c2:f2:cc:d3:95:
2d:98:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org