Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/__UVLQewGaiK_X9v0hOErw_BKD8.roa
File: __UVLQewGaiK_X9v0hOErw_BKD8.roa (raw, json)
Hash identifier: KhIlpUnN1ZnJevNo5f4ysLBsaYhmLdHGPulWHu/2CXE=
Subject key identifier: FF:F5:15:2D:07:B0:19:A8:8A:FD:7F:6F:D2:13:84:AF:0F:C1:28:3F
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 01838977BE50FD0B4204C6A3BE2DADE087A0
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/__UVLQewGaiK_X9v0hOErw_BKD8.roa
Signing time: Thu 29 Sep 2022 13:37:49 +0000
ROA not before: Thu 29 Sep 2022 13:37:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14127
IP address blocks: 185.45.2.0/23 maxlen: 24
185.45.0.0/23 maxlen: 24
193.246.192.0/24 maxlen: 24
193.246.196.0/24 maxlen: 24
193.246.195.0/24 maxlen: 24
193.246.194.0/24 maxlen: 24
193.246.193.0/24 maxlen: 24
193.246.199.0/24 maxlen: 24
193.246.198.0/24 maxlen: 24
193.246.197.0/24 maxlen: 24
89.106.176.0/22 maxlen: 24
89.106.180.0/23 maxlen: 23
89.106.182.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:77:be:50:fd:0b:42:04:c6:a3:be:2d:ad:e0:87:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Sep 29 13:37:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fff5152d07b019a88afd7f6fd21384af0fc1283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:d7:5f:aa:0f:6e:14:ae:03:7a:43:98:64:
de:66:0e:9d:8a:5e:86:80:cc:42:5e:84:7a:46:f8:
e2:9f:55:33:9e:30:cd:5b:22:4e:80:8a:c1:1e:46:
83:32:15:97:ce:15:e6:8d:46:ea:5b:7c:98:37:9c:
1a:76:db:84:83:aa:4a:f4:83:ef:52:f3:6b:26:9e:
26:24:93:fc:e4:5c:78:2a:c2:13:72:c1:8f:26:8f:
53:23:85:ed:c8:1c:d9:cb:e0:ee:f8:86:08:4a:8b:
af:7e:66:45:6f:df:d5:14:98:65:68:16:f2:4e:34:
a9:35:2a:a1:2d:07:af:60:40:6b:c2:5a:0a:26:4d:
99:f6:f9:f0:c4:44:3a:96:0b:79:0f:23:0d:c8:82:
9d:26:fb:32:47:f4:bd:05:55:5d:b2:f8:6c:a9:dd:
5b:11:62:35:a3:d9:39:d9:62:99:f0:d3:93:75:7f:
7f:54:5d:51:1d:21:9e:08:cb:4c:e1:67:59:45:51:
4a:85:24:83:87:f9:27:33:f2:ce:b7:3a:6a:c4:8b:
f8:de:85:36:fc:0d:76:99:e4:1e:fa:be:94:d1:ce:
c7:71:6e:8a:97:69:80:f6:fb:57:41:e8:97:6e:ca:
1c:54:45:5c:87:65:4e:21:88:fb:d4:8b:fd:76:83:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F5:15:2D:07:B0:19:A8:8A:FD:7F:6F:D2:13:84:AF:0F:C1:28:3F
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/__UVLQewGaiK_X9v0hOErw_BKD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.176.0/21
185.45.0.0/22
193.246.192.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:e5:1b:80:3f:06:25:ff:fd:13:68:b2:3d:53:23:36:f8:15:
02:30:64:29:8b:1b:2c:fd:5c:a7:0a:1d:cc:c7:bb:f7:e4:d0:
b5:07:18:45:63:df:bf:a3:c7:f1:e4:90:71:a6:35:63:da:02:
ea:74:5c:f0:f8:62:87:06:1b:b0:86:f4:39:b0:c4:46:d0:51:
1e:db:05:a7:6c:de:20:46:63:8c:27:23:1f:23:46:43:90:42:
b7:08:23:5d:5e:b6:4b:2b:7f:8a:42:91:f7:31:d7:8b:a7:fa:
f6:68:6c:df:07:20:98:6c:6e:55:f0:10:3e:05:f2:a8:58:a1:
07:58:6d:3d:ae:a1:f9:9d:2f:02:8c:e3:1c:c4:09:e1:81:45:
09:b5:0d:84:15:ac:76:7e:7b:16:43:c3:43:48:f7:12:67:ba:
24:ae:72:e6:a3:d7:cf:b2:87:43:26:9d:51:f6:a6:c9:2f:dd:
46:89:53:c4:18:78:ed:ba:c3:e4:25:fc:9d:a7:68:37:8a:19:
83:73:54:ff:44:95:30:07:db:0d:10:65:65:f4:07:7e:fc:be:
77:1e:03:39:80:21:95:bb:6d:43:3c:f7:66:8d:f3:9b:d2:24:
c4:a1:9d:68:bc:8b:24:30:c2:0c:cf:c4:86:4c:6a:ad:da:e5:
f5:27:db:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org