Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/uJjkJC9iFdWFMzLqj6L_-sTREHo.roa
File: uJjkJC9iFdWFMzLqj6L_-sTREHo.roa (raw, json)
Hash identifier: hSHm4S214xl2Eaxk2QLIbUE78IxdefStRD3e0+VLF9c=
Subject key identifier: B8:98:E4:24:2F:62:15:D5:85:33:32:EA:8F:A2:FF:FA:C4:D1:10:7A
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 1918EEEC
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/uJjkJC9iFdWFMzLqj6L_-sTREHo.roa
Signing time: Sun 05 Jun 2022 10:03:20 +0000
ROA not before: Sun 05 Jun 2022 10:03:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200462
IP address blocks: 31.47.238.0/24 maxlen: 32
94.247.43.0/24 maxlen: 32
5.180.192.0/22 maxlen: 24
2.58.52.0/22 maxlen: 32
45.86.124.0/23 maxlen: 24
45.86.125.0/24 maxlen: 24
2a09:e1c0::/32 maxlen: 128
2a07:6fc0:10::/44 maxlen: 48
2a0e:de80::/29 maxlen: 48
2a0c:8900::/29 maxlen: 128
2a00:f826:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421064428 (0x1918eeec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jun 5 10:03:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b898e4242f6215d5853332ea8fa2fffac4d1107a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:03:ce:54:f0:6f:29:4c:14:1e:07:cf:f7:
86:f2:ea:d9:e2:78:b8:99:0c:95:d2:f0:46:80:fa:
1a:46:9a:a6:f8:cd:76:96:3a:66:65:b6:a4:7a:87:
33:87:8c:27:34:07:94:5c:7b:c2:2e:5b:0b:06:26:
e6:e7:5e:02:62:d9:a4:c0:25:d8:bb:0a:65:d0:04:
71:b3:05:e3:e2:76:8f:27:39:d1:83:1d:e1:92:0e:
00:92:82:90:a2:e4:aa:4b:b6:62:8b:20:f9:cb:7c:
c6:f6:0b:39:4a:e1:b7:fb:67:04:fc:49:e7:fd:ab:
6b:84:53:13:7b:2e:2f:01:66:80:91:ec:c6:6e:b7:
aa:74:f5:a3:12:45:05:4b:09:11:f7:03:16:06:6e:
57:ec:b3:59:1a:73:d3:f5:db:05:52:11:7c:99:98:
70:46:d1:2c:4f:f5:75:46:0e:f7:06:ed:c4:0b:24:
d0:0a:91:df:f4:89:a1:ea:70:ca:1b:73:09:22:0d:
7e:54:f2:37:b2:41:21:dc:bd:14:e7:46:48:ff:29:
eb:75:95:77:0e:2e:31:eb:e7:bc:40:a1:d3:f5:d7:
70:7d:d1:21:94:da:61:55:2a:c6:a2:56:e9:68:30:
86:e5:c5:d5:36:7e:aa:1b:7a:ff:04:bf:0c:74:1d:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:E4:24:2F:62:15:D5:85:33:32:EA:8F:A2:FF:FA:C4:D1:10:7A
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/uJjkJC9iFdWFMzLqj6L_-sTREHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.52.0/22
5.180.192.0/22
31.47.238.0/24
45.86.124.0/23
94.247.43.0/24
IPv6:
2a00:f826:8::/48
2a07:6fc0:10::/44
2a09:e1c0::/32
2a0c:8900::/29
2a0e:de80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:1c:b4:04:06:91:4c:b5:e1:9a:72:e8:6e:35:ef:47:c6:b3:
06:6d:87:8b:1f:ef:f8:46:c7:33:b2:75:15:2b:36:03:38:b8:
34:61:f0:a0:91:83:9f:72:a0:40:c4:c3:44:87:d8:c2:5a:30:
4d:1d:bb:98:ff:a1:7a:04:65:ad:17:33:e2:08:68:5c:4b:d0:
c2:79:9a:f7:41:c9:df:83:de:ba:08:5d:89:d7:3b:2f:22:eb:
f7:b7:31:95:9e:f9:60:78:f6:df:37:16:bf:9c:c7:b5:6e:11:
4f:f7:61:c4:c4:17:70:b9:2d:57:11:aa:58:e7:f1:7e:1e:e8:
3d:47:0f:94:b8:39:31:23:c0:cf:f1:7a:a0:55:56:b1:30:ab:
d1:05:22:be:8a:9c:36:69:fa:f7:13:59:2b:e7:d1:2d:ef:05:
03:39:47:9f:60:8b:1f:9f:67:aa:5e:33:39:12:3f:dc:6e:c0:
22:2a:41:13:66:1f:c6:15:76:e2:64:6f:ae:55:b8:c2:b8:64:
f2:46:a5:5a:c7:ab:5b:f2:bc:52:7f:9b:89:81:80:4b:aa:69:
66:b4:ba:fc:9e:f6:89:20:a0:aa:80:57:5f:f0:66:9d:ad:80:
67:62:ee:35:c8:a9:7b:fd:30:4d:39:39:cf:af:c6:95:0e:4d:
26:f3:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:08 2023 by rpki-client on console-ams.rpki-client.org