Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/UYr-_Iw88A1VoVySEqPZt-EjTtE.roa
File: UYr-_Iw88A1VoVySEqPZt-EjTtE.roa (raw, json)
Hash identifier: UwUZ/w7eesmrUf0t/0rvQCi3y34F/Rw7vyPOyaecSfg=
Subject key identifier: 51:8A:FE:FC:8C:3C:F0:0D:55:A1:5C:92:12:A3:D9:B7:E1:23:4E:D1
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 018573560AFD7E369B086FA915C6AB9C4C94
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/UYr-_Iw88A1VoVySEqPZt-EjTtE.roa
Signing time: Mon 02 Jan 2023 16:34:56 +0000
ROA not before: Mon 02 Jan 2023 16:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208033
IP address blocks: 185.132.236.0/22 maxlen: 22
185.132.236.0/24 maxlen: 24
45.158.204.0/22 maxlen: 22
2a0c:dc80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:0a:fd:7e:36:9b:08:6f:a9:15:c6:ab:9c:4c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Jan 2 16:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=518afefc8c3cf00d55a15c9212a3d9b7e1234ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:dc:a1:db:dd:f4:12:8f:d9:75:8a:82:5a:
b5:d0:77:8b:13:1b:82:dc:64:9d:29:cd:4c:6d:6f:
31:83:74:66:56:d3:91:75:7b:f6:92:ed:35:2c:29:
5f:ca:dd:6c:05:e5:42:f3:4a:94:54:bd:6e:f1:87:
a5:10:ea:d2:83:f6:96:12:92:d5:fc:6d:e3:4c:52:
40:f0:70:f8:08:73:cd:59:d0:79:1b:4a:18:92:bd:
cd:13:e7:75:20:80:4a:5e:45:c6:65:45:1d:53:66:
5c:b0:7a:59:71:1b:2a:0c:dc:b2:5f:d6:66:5a:8a:
0d:28:02:29:64:1f:d6:9a:c9:83:ae:16:97:7a:b7:
02:f5:87:06:27:a0:7d:ad:b8:53:87:de:de:fa:88:
db:2b:74:53:10:89:2c:e3:a5:2c:8b:a1:4a:db:30:
d8:a2:05:8a:53:3c:d3:3f:ab:15:f4:0c:68:dd:94:
38:13:37:a5:67:47:1f:6f:c1:74:d0:56:8b:93:8e:
68:2b:c1:e8:db:df:c5:46:15:f5:6b:7c:15:73:81:
a3:13:fe:81:96:87:1c:b8:89:79:46:e5:41:c0:82:
be:04:4d:20:99:f0:55:45:ea:ec:a5:0f:41:35:17:
ed:f0:26:6d:e7:f5:70:21:75:e3:a8:41:35:36:a9:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8A:FE:FC:8C:3C:F0:0D:55:A1:5C:92:12:A3:D9:B7:E1:23:4E:D1
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/UYr-_Iw88A1VoVySEqPZt-EjTtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.204.0/22
185.132.236.0/22
IPv6:
2a0c:dc80::/32
Signature Algorithm: sha256WithRSAEncryption
19:c4:da:a5:72:a3:99:6d:21:f7:2d:d3:dc:0e:ba:c3:f6:41:
03:95:31:65:9f:44:95:a8:e2:0b:c4:59:3c:4e:49:69:9e:ca:
73:e4:fa:33:da:dc:ac:44:15:02:cb:0a:e9:96:a6:10:ae:53:
14:98:40:de:01:be:98:a8:82:46:80:ab:21:33:fd:d5:a1:85:
21:86:98:cd:00:31:9b:32:c6:99:d7:f5:97:cd:0e:4a:53:ab:
11:1a:48:7c:66:fc:e0:26:7f:bf:41:87:b9:ff:7d:90:df:bf:
b8:4d:63:06:3a:81:42:0a:14:d5:e8:4a:37:f3:31:2f:54:7f:
bf:cb:f9:46:b6:04:9b:e5:d9:e3:3e:a5:84:ad:de:dd:56:73:
7e:f3:d6:5d:3e:8d:e2:53:7f:0b:41:90:10:37:24:be:3b:71:
75:04:e4:16:71:93:5d:05:78:02:92:dc:bc:68:3f:7f:e3:55:
05:f6:e8:80:a3:09:dc:03:5c:e9:bf:67:e8:f3:75:1c:36:80:
0e:80:ed:9a:cc:dd:ac:fb:f0:ae:9b:b2:c3:29:ea:a1:8c:af:
0a:4e:fc:eb:2b:5c:93:f1:c4:2e:f4:c9:7b:59:9a:aa:71:a6:
25:e6:bd:39:4c:12:7c:c1:9f:52:c5:38:58:5e:31:4e:12:58:
07:b8:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:45 2025 by rpki-client