Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/UZmRuYjXQWnm10_Y5wd1xpE7jCU.roa
File: UZmRuYjXQWnm10_Y5wd1xpE7jCU.roa (raw, json)
Hash identifier: wNVdvIgssXQ1IdR449RhxXcuB+uMhD/7jv9T51/YhPA=
Subject key identifier: 51:99:91:B9:88:D7:41:69:E6:D7:4F:D8:E7:07:75:C6:91:3B:8C:25
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 03388B
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/UZmRuYjXQWnm10_Y5wd1xpE7jCU.roa
Signing time: Mon 07 Mar 2022 16:39:09 +0000
ROA not before: Mon 07 Mar 2022 16:39:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 138.124.184.0/24 maxlen: 24
138.124.180.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211083 (0x3388b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Mar 7 16:39:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=519991b988d74169e6d74fd8e70775c6913b8c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:85:b8:58:dc:b5:f3:2e:7e:20:2a:9d:08:e0:
3a:56:f0:be:51:a8:4e:c2:d0:e8:d3:97:a5:51:55:
dd:ae:22:54:37:e1:9d:28:79:73:fe:e1:15:03:f4:
b8:c8:21:29:72:1d:91:72:cb:99:39:97:ef:fc:e7:
0d:b0:0f:4e:f3:44:4a:d1:95:16:3f:24:37:b6:c9:
1e:8c:20:b9:85:ce:7a:b9:f2:24:85:ec:69:ef:ec:
ad:f3:f5:47:f3:7a:b4:e3:53:7a:ad:fa:46:4e:17:
9e:04:39:5c:79:66:3a:3c:5d:fc:b2:18:04:8a:e5:
ef:0d:7d:3f:9d:9d:0b:4e:a6:ae:1f:56:11:e4:3b:
fe:24:81:a7:97:60:5f:56:5a:ca:11:14:eb:80:8f:
75:49:c2:58:16:27:df:16:f2:36:e2:95:16:ba:67:
4c:a4:d4:46:fa:78:39:b6:b3:8a:a1:e0:bc:c7:6d:
36:fb:57:5d:fd:a6:0c:e3:de:ca:cd:2c:45:6d:c4:
b7:7b:a7:df:40:20:71:fd:f3:a8:36:a1:72:06:c6:
28:c5:66:f0:ae:40:57:1b:39:5f:ca:f1:30:25:21:
3c:cc:7b:ed:1f:bc:72:ac:04:da:d2:3c:7c:8a:d3:
8c:ed:71:78:f7:2e:ac:97:ac:5c:28:d5:e9:ee:f3:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:99:91:B9:88:D7:41:69:E6:D7:4F:D8:E7:07:75:C6:91:3B:8C:25
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/UZmRuYjXQWnm10_Y5wd1xpE7jCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.180.0/24
138.124.183.0-138.124.184.255
138.124.187.0/24
Signature Algorithm: sha256WithRSAEncryption
89:75:24:80:4b:c8:11:35:ab:ac:fd:09:5a:37:db:7f:91:c5:
16:46:5a:6b:9f:3b:eb:87:d6:c2:fe:b8:a6:c9:38:9c:3f:0b:
34:49:7d:33:ad:f7:a9:65:76:fb:ca:7e:35:40:73:fc:a4:09:
4d:c6:ce:d6:74:1b:f9:f9:0f:e4:fa:73:83:2e:07:6e:57:a5:
de:22:e7:94:03:b2:1a:3c:a3:ed:60:da:4b:4b:89:aa:e0:88:
4e:9b:10:c2:7c:f5:59:28:93:2a:b5:f5:45:df:7b:da:61:f7:
15:db:21:86:4c:86:2d:69:0c:aa:c1:e8:d0:29:66:2a:32:65:
08:fd:81:dd:64:bd:9e:91:23:a6:4d:91:3b:32:1a:d8:7d:9a:
6a:8a:b6:44:e1:b8:25:a5:a9:a0:52:32:3d:84:94:fa:16:06:
53:96:5d:38:2a:d9:7d:64:54:4f:d6:70:23:98:32:7a:9d:c1:
db:1d:23:c5:dd:4c:96:6f:f4:b5:57:7a:94:56:f6:a5:4d:fa:
37:10:c9:87:7a:25:95:b4:69:cf:18:b0:b1:b8:2e:80:3c:36:
01:ca:03:88:73:18:17:f0:83:c9:dd:c9:2f:55:66:62:ff:cc:
29:39:36:63:0f:b4:66:18:54:e2:ea:be:96:bf:0e:eb:5f:cd:
ef:e0:7e:ca
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIDAziLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRl
OTJhMWFjODkxMGNmNWM4NjVkZTViMDIzMWIwOWQwNGUxMTMyZjMwHhcNMjIwMzA3
MTYzOTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1MTk5OTFiOTg4ZDc0
MTY5ZTZkNzRmZDhlNzA3NzVjNjkxM2I4YzI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA94W4WNy18y5+ICqdCOA6VvC+UahOwtDo05elUVXdriJUN+Gd
KHlz/uEVA/S4yCEpch2RcsuZOZfv/OcNsA9O80RK0ZUWPyQ3tskejCC5hc56ufIk
hexp7+yt8/VH83q041N6rfpGTheeBDlceWY6PF38shgEiuXvDX0/nZ0LTqauH1YR
5Dv+JIGnl2BfVlrKERTrgI91ScJYFiffFvI24pUWumdMpNRG+ng5trOKoeC8x202
+1dd/aYM497KzSxFbcS3e6ffQCBx/fOoNqFyBsYoxWbwrkBXGzlfyvEwJSE8zHvt
H7xyrATa0jx8itOM7XF49y6sl6xcKNXp7vMsGQIDAQABo4ICHTCCAhkwHQYDVR0O
BBYEFFGZkbmI10Fp5tdP2OcHdcaRO4wlMB8GA1UdIwQYMBaAFN6SoayJEM9chl3l
sCMbCdBOETLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
M3BLaHJJa1F6MXlHWGVXd0l4c0owRTRSTXZNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mNS80Mzc3ZDYtNTE1Yy00MjBhLTkxMzQtNjllMzM3ODg0Y2M5LzEv
VVptUnVZalhRV25tMTBfWTV3ZDF4cEU3akNVLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80
Mzc3ZDYtNTE1Yy00MjBhLTkxMzQtNjllMzM3ODg0Y2M5LzEvM3BLaHJJa1F6MXlH
WGVXd0l4c0owRTRSTXZNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMG
CCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAiny0MAwDBACKfLcDBACKfLgDBACK
fLswDQYJKoZIhvcNAQELBQADggEBAIl1JIBLyBE1q6z9CVo323+RxRZGWmufO+uH
1sL+uKbJOJw/CzRJfTOt96lldvvKfjVAc/ykCU3GztZ0G/n5D+T6c4MuB25Xpd4i
55QDsho8o+1g2ktLiargiE6bEMJ89Vkokyq19UXfe9ph9xXbIYZMhi1pDKrB6NAp
ZioyZQj9gd1kvZ6RI6ZNkTsyGth9mmqKtkThuCWlqaBSMj2ElPoWBlOWXTgq2X1k
VE/WcCOYMnqdwdsdI8XdTJZv9LVXepRW9qVN+jcQyYd6JZW0ac8YsLG4LoA8NgHK
A4hzGBfwg8ndyS9VZmL/zCk5NmMPtGYYVOLqvpa/Dutfze/gfso=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:45 2024 by rpki-client on console-fra.rpki-client.org