Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uZlyEE9lF9ucCoEety_-eTwA60o.roa
File: uZlyEE9lF9ucCoEety_-eTwA60o.roa (raw, json)
Hash identifier: D1dj3Nz+xWiHFKDbSE0PXEHvFFT+vjTN3rr907QyMTQ=
Subject key identifier: B9:99:72:10:4F:65:17:DB:9C:0A:81:1E:B7:2F:FE:79:3C:00:EB:4A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1877F20F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uZlyEE9lF9ucCoEety_-eTwA60o.roa
Signing time: Sun 30 Jan 2022 09:17:56 +0000
ROA not before: Sun 30 Jan 2022 09:17:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 45.12.232.0/24 maxlen: 32
45.138.210.0/23 maxlen: 24
45.10.3.0/24 maxlen: 32
45.10.2.0/24 maxlen: 32
193.160.212.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410513935 (0x1877f20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 30 09:17:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b99972104f6517db9c0a811eb72ffe793c00eb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:ea:91:0f:0d:f5:6b:94:c0:c3:a9:0e:87:
7a:48:f6:e8:7b:03:a5:a1:f2:32:a8:7c:8e:a8:c6:
69:3a:99:8c:34:31:c2:ca:a2:49:18:18:2f:ff:ae:
d4:67:42:52:6e:90:d5:fb:4b:ed:42:d4:4d:dc:b3:
fc:40:29:aa:f4:54:8b:39:92:32:88:ce:d7:ac:15:
81:d3:cf:b1:a3:b2:fb:22:28:bb:42:df:e0:f5:40:
fb:f1:47:b6:d9:d8:64:c8:20:9e:b6:ff:15:d8:fb:
25:a8:a5:db:35:25:3b:a6:db:e8:1b:ef:7a:8e:42:
01:ff:e4:0f:20:ad:b7:8e:6d:5a:e7:95:23:97:f6:
a7:c9:23:b3:65:60:97:fa:3b:91:a6:2c:70:c0:b3:
67:40:26:ca:a7:62:75:9e:f1:b2:b9:7e:d5:f4:0f:
27:7f:44:15:38:29:a7:ec:2a:29:5c:bf:c5:c0:6e:
c6:17:76:60:db:47:ee:e7:fb:4b:59:26:48:7f:3b:
55:42:fe:44:b7:56:9f:d3:ba:17:70:ac:e8:82:3b:
e5:a7:6d:bd:79:71:c7:39:72:d7:51:ad:dd:bb:d1:
e2:32:b2:8e:ce:fd:c0:3d:c3:f8:d4:44:ec:6e:8b:
c2:d9:47:50:a3:99:25:23:d8:ae:d8:34:15:9b:89:
12:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:99:72:10:4F:65:17:DB:9C:0A:81:1E:B7:2F:FE:79:3C:00:EB:4A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uZlyEE9lF9ucCoEety_-eTwA60o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.2.0/23
45.12.232.0/24
45.138.210.0/23
193.160.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2d:92:09:30:5b:2f:56:ad:47:e9:3a:3d:7d:c0:0b:71:95:
e6:5d:99:89:cd:e8:d1:be:0b:69:08:92:57:1d:1f:40:a9:1f:
c6:24:1d:4f:40:38:8e:72:bb:f0:ac:35:88:f1:3e:b9:b5:67:
8f:94:23:8d:7d:7d:a8:c5:5a:6d:ab:56:ac:b6:e3:56:e5:6d:
7e:38:4e:f0:96:76:55:0e:1d:37:9b:e5:b1:56:08:85:02:ed:
13:4f:42:ce:3b:c1:3b:68:4f:6a:cb:ba:90:27:a7:17:57:15:
b3:a9:0f:d5:cb:a9:92:65:2e:2a:ca:7c:5b:b0:64:aa:d5:70:
31:91:05:a9:31:ae:6c:e8:9d:77:51:27:fc:02:47:1b:74:e9:
12:9a:f9:bf:60:fa:73:29:93:54:ed:98:20:0c:14:9c:d2:3b:
a0:a3:6d:a0:fc:a0:cc:74:11:7d:c1:08:be:14:6f:60:f4:90:
2b:44:fd:14:c5:bd:34:86:95:ac:c7:e6:51:7a:ed:2e:a8:76:
75:34:16:dc:57:8a:25:a4:7d:a3:6d:54:2b:6b:8d:a4:92:5a:
63:57:4a:8c:64:fa:1f:47:12:1e:b4:bb:0d:a9:7b:bb:d4:04:
2f:fd:2a:38:67:2b:60:a3:28:44:df:e9:a6:2c:39:95:f6:eb:
d6:71:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org