Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UJh_u1_LKBy1BU8R6X3-COc5EHw.roa
File: UJh_u1_LKBy1BU8R6X3-COc5EHw.roa (raw, json)
Hash identifier: JYQe/PP8oXRJQbMRHmRk3r6nGvCFZt5ewhIyJEj+OnI=
Subject key identifier: 50:98:7F:BB:5F:CB:28:1C:B5:05:4F:11:E9:7D:FE:08:E7:39:10:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01846790F6F933E916A724FAF9ECE950F8A4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UJh_u1_LKBy1BU8R6X3-COc5EHw.roa
Signing time: Fri 11 Nov 2022 16:41:04 +0000
ROA not before: Fri 11 Nov 2022 16:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 212.87.204.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
80.76.51.0/24 maxlen: 24
185.218.138.0/24 maxlen: 24
85.31.44.0/24 maxlen: 24
185.225.74.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:90:f6:f9:33:e9:16:a7:24:fa:f9:ec:e9:50:f8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 11 16:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50987fbb5fcb281cb5054f11e97dfe08e739107c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:9f:58:24:a3:ee:06:2a:27:3f:d9:09:7e:
75:5d:24:31:14:51:27:6f:55:78:a2:01:05:b7:4f:
01:88:99:a5:2d:8d:7f:ab:ce:7e:d7:ae:4c:f9:0a:
ac:89:3a:78:48:52:69:9a:60:04:e7:7a:0b:e7:05:
cb:dd:7d:d1:eb:69:91:62:72:67:9b:0d:a8:96:87:
7e:17:24:3c:f3:1a:1f:86:86:b0:c4:20:86:28:2a:
45:08:91:2f:58:f8:c6:f3:3e:a2:25:7d:f9:c8:dc:
e1:09:9f:80:5d:d6:25:e1:63:88:81:07:12:e0:61:
0b:48:5e:92:60:5c:b6:40:d7:2b:0d:ce:65:0f:db:
6d:38:c7:5d:5d:15:96:5c:49:ee:75:59:19:8f:2e:
90:b6:44:46:2b:11:c0:cd:2f:3a:2a:51:18:e7:03:
7f:71:9b:32:4f:4a:65:67:ea:35:07:56:f7:7d:4c:
d7:2f:34:ab:27:38:91:c3:02:36:5d:6d:49:6c:db:
68:fe:ee:ba:9e:11:d1:37:04:1a:f8:fb:5e:21:3c:
75:c2:23:f3:1d:71:87:41:4a:8d:70:fe:6e:b1:bf:
7b:f8:ef:d0:b0:84:9c:75:0e:fe:5a:24:91:41:7f:
a8:95:71:8b:ef:55:1a:a3:53:db:eb:e9:95:7f:63:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:98:7F:BB:5F:CB:28:1C:B5:05:4F:11:E9:7D:FE:08:E7:39:10:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UJh_u1_LKBy1BU8R6X3-COc5EHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.51.0/24
85.31.44.0/24
109.206.237.0/24
109.206.242.0/24
185.218.138.0/24
185.225.74.0/24
185.246.222.0/24
194.55.186.0/24
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:17:ea:19:50:39:80:e4:39:82:78:da:29:1a:89:ba:87:1d:
31:d4:7f:34:4b:bf:f4:76:6c:9d:a6:43:3b:84:de:dd:28:c2:
86:bc:e9:3c:fc:dc:53:21:a3:79:ec:d9:ed:b0:32:fd:ae:ac:
5a:a7:e2:99:d4:fb:cf:55:e1:94:0c:6e:ba:3a:22:f4:ab:58:
71:b1:2b:3b:9e:54:28:f1:2c:c2:16:cd:3e:7d:8f:d9:e9:d1:
87:ce:69:d7:51:04:3c:f7:15:3f:fa:7d:b5:66:8d:65:2b:84:
3c:e2:a6:cc:ec:64:1c:ce:92:a9:2e:51:92:65:88:3f:a7:7d:
86:da:d4:9d:b7:11:f2:de:3e:77:5f:99:2b:ec:7f:1b:46:af:
b3:86:0e:52:dd:3b:10:7b:0e:95:52:e7:4a:b6:e8:c9:70:5c:
ae:48:12:80:d8:91:17:31:b4:05:43:ac:d3:79:fc:73:e9:81:
c0:d8:e1:f8:bc:5c:4a:ee:97:a8:ba:0e:00:8b:ae:cd:92:69:
f0:a5:39:21:43:d5:18:07:4e:46:e9:74:37:9e:14:f6:d8:d7:
c2:64:29:2f:f8:a0:08:cd:95:37:f5:9f:b3:1f:ef:de:3a:b6:
a0:36:cf:71:25:09:b3:7c:d1:99:eb:11:71:18:34:26:09:c8:
4c:1d:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org