Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/ucorHVQ0On9v-Kbu-YaJCQPiYK8.roa
File: ucorHVQ0On9v-Kbu-YaJCQPiYK8.roa (raw, json)
Hash identifier: WeLUqtrdtl63OnNNonJOF3SViCwf9nrcaVBkZKRH61M=
Subject key identifier: B9:CA:2B:1D:54:34:3A:7F:6F:F8:A6:EE:F9:86:89:09:03:E2:60:AF
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 0660983D
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/ucorHVQ0On9v-Kbu-YaJCQPiYK8.roa
Signing time: Sat 01 Jan 2022 07:00:10 +0000
ROA not before: Sat 01 Jan 2022 07:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.156.97.0/24 maxlen: 24
45.156.98.0/24 maxlen: 24
45.156.96.0/24 maxlen: 24
45.156.99.0/24 maxlen: 24
2a0f:1c80::/31 maxlen: 31
2a0f:1c84::/31 maxlen: 31
2a0f:1c82::/31 maxlen: 31
2a0f:1c86::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106993725 (0x660983d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Jan 1 07:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9ca2b1d54343a7f6ff8a6eef986890903e260af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:df:f0:dc:f2:db:82:1a:e5:6b:b8:78:64:
d7:16:c2:d6:11:e7:23:c6:d5:26:d9:aa:5f:f4:c6:
ec:93:39:1c:b4:8d:1b:35:6c:ef:47:27:44:63:11:
da:ff:45:01:cc:91:3e:07:c9:1d:6a:2d:19:39:f1:
d5:5d:44:9f:77:26:c9:cc:df:37:b9:6a:4c:e7:c5:
61:bf:9b:39:32:ef:ea:64:f3:c9:50:fb:de:5b:51:
74:d6:1c:bf:f9:61:c8:9b:2b:c0:8c:d4:65:58:94:
7e:4d:1d:4d:21:ea:9f:e8:1e:bb:67:8c:e0:0e:cf:
47:96:c4:8d:8f:47:ca:69:d2:44:dc:5c:9b:f0:15:
f2:f8:3b:19:51:48:00:23:b0:cf:9b:c9:1b:3e:80:
b0:ba:aa:7c:90:0e:7c:b9:c0:1b:1b:e0:98:0e:58:
0c:f5:4a:5f:1e:e1:2f:2b:92:a0:53:e1:11:a8:44:
ba:fa:c5:e8:28:21:6e:6d:6d:78:13:0f:6d:a3:ac:
86:e5:23:b0:be:ca:66:a4:23:f1:55:00:7a:a4:93:
74:be:e7:c3:40:ae:76:07:8e:f0:da:67:79:2a:8a:
1a:d5:90:0c:bd:2d:2b:d5:2a:35:94:f6:48:96:94:
9a:8c:09:a7:8b:08:b0:c4:15:e9:ff:cb:73:e8:ca:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CA:2B:1D:54:34:3A:7F:6F:F8:A6:EE:F9:86:89:09:03:E2:60:AF
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/ucorHVQ0On9v-Kbu-YaJCQPiYK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.96.0/22
IPv6:
2a0f:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
6d:b9:cb:08:a8:9a:50:6e:1a:53:bb:f6:f7:d2:2e:db:4f:20:
92:84:f7:ae:65:16:3e:45:c5:0f:35:a3:12:13:fc:5f:ef:d2:
df:9d:a3:49:98:3c:99:15:64:80:22:95:cd:03:94:58:c7:3d:
1f:ea:37:06:fa:0d:15:a0:f0:1f:21:9a:1c:49:43:7b:28:e5:
ab:68:4d:1d:70:e8:75:cd:ca:b8:76:c9:2e:76:be:f4:d1:55:
50:5b:f5:6c:74:af:e5:a6:4a:02:cb:62:a5:61:bd:27:7f:76:
79:31:08:3e:28:9e:5e:fb:a1:fa:8e:fe:72:31:a4:86:b5:92:
1d:2d:4b:a3:53:65:30:ea:fe:7d:9b:d7:63:1b:a6:09:57:1c:
c8:26:b8:eb:12:2d:7f:b2:61:fc:9f:01:11:f7:84:0e:eb:b5:
6e:9c:ac:bb:81:17:4a:d0:3e:d4:49:c3:e1:ab:b3:f7:a5:fd:
75:27:16:ce:9d:24:e6:5b:28:85:e4:72:b5:b3:e1:e1:a6:0e:
06:ed:8b:35:c2:8f:b7:00:bc:17:1d:8b:03:bf:2e:16:60:a7:
4c:26:84:95:20:ed:46:62:7f:dc:48:ab:5e:06:de:b7:f8:9d:
02:7a:4b:89:83:16:7a:ca:3a:32:fe:f4:12:26:23:8f:d2:c7:
01:be:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:30 2023 by rpki-client on console-fra.rpki-client.org