Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/Udg-_sV6spgTP8WzdRi21XeqAEA.roa
File: Udg-_sV6spgTP8WzdRi21XeqAEA.roa (raw, json)
Hash identifier: IAotUo6JRySCAG+rCGTyLHvyGDfj8c+kKgj3gJzDoWc=
Subject key identifier: 51:D8:3E:FE:C5:7A:B2:98:13:3F:C5:B3:75:18:B6:D5:77:AA:00:40
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 01833B366C3CBE5A86BA93D75C3D11A035B2
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/Udg-_sV6spgTP8WzdRi21XeqAEA.roa
Signing time: Wed 14 Sep 2022 08:56:05 +0000
ROA not before: Wed 14 Sep 2022 08:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33993
IP address blocks: 46.160.192.0/21 maxlen: 21
46.160.200.0/21 maxlen: 21
46.160.208.0/21 maxlen: 21
217.194.240.0/20 maxlen: 20
46.160.216.0/21 maxlen: 21
217.194.240.0/21 maxlen: 21
217.194.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:36:6c:3c:be:5a:86:ba:93:d7:5c:3d:11:a0:35:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Sep 14 08:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51d83efec57ab298133fc5b37518b6d577aa0040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:b3:2a:c7:b9:1d:c3:06:25:98:49:df:ea:
50:43:65:1a:cc:94:d3:ec:15:2b:78:22:f1:9f:04:
10:f1:90:64:42:08:4b:6e:08:92:e2:e3:68:c5:2a:
38:91:1a:d6:6b:5d:7f:30:10:a3:65:29:0e:75:2c:
0b:2e:fb:7b:e2:aa:40:09:d1:10:55:81:e1:fe:43:
6e:0e:f7:99:69:a5:c9:55:81:d1:56:e9:c3:ed:63:
2f:29:1e:b8:23:3a:cf:6c:96:d4:4e:c9:e5:3b:86:
1d:d4:5d:20:7d:c9:f7:61:cb:73:38:8f:08:e5:18:
ae:c9:d5:19:d8:0c:37:1c:cd:95:38:ad:b8:e1:52:
d3:97:20:6b:76:48:76:8d:e4:85:2c:64:99:7c:53:
87:3b:f4:c4:65:4f:5c:0d:cf:a5:fd:93:a5:ad:bd:
d4:11:de:4e:dc:a9:de:51:95:d5:64:03:3d:63:e6:
2a:d0:cc:90:e9:e0:ab:55:72:32:61:a8:fa:b2:6b:
6e:f8:0c:10:3e:21:f1:6b:f3:24:ae:66:93:2b:43:
7d:99:6c:ab:7f:bb:d9:1f:5e:9c:8c:2b:66:38:e4:
d0:9d:3b:c7:c0:b7:c9:0a:a8:05:33:c3:b9:f7:21:
b3:db:24:7d:42:92:b6:4d:9b:4c:be:dc:c8:9f:4c:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D8:3E:FE:C5:7A:B2:98:13:3F:C5:B3:75:18:B6:D5:77:AA:00:40
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/Udg-_sV6spgTP8WzdRi21XeqAEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.160.192.0/19
217.194.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:aa:d8:fe:95:e2:6f:77:84:1e:83:bb:37:d6:bf:e9:30:45:
9c:b3:ac:10:c0:db:4b:29:97:2d:92:43:38:e3:af:19:2c:77:
db:34:82:03:cf:63:12:d3:12:70:12:71:4a:ef:4c:6b:22:06:
fa:75:b0:b4:11:10:aa:62:69:e5:9e:46:72:f5:6a:62:f0:47:
80:4b:13:ff:27:23:48:9c:af:8d:b8:00:f7:65:c1:a3:d2:73:
00:73:f5:14:f5:a9:c9:0c:d9:ed:0a:be:e3:95:bd:f8:c3:02:
7c:5e:83:22:06:8c:39:a2:97:c3:02:8a:f7:37:39:50:16:4c:
ae:ee:b2:bc:18:b3:54:cb:68:41:f7:4b:30:72:87:ce:24:85:
51:7c:57:08:00:aa:80:54:c8:b3:34:ab:1c:20:96:9e:a2:cb:
37:7f:b4:77:4e:17:8f:dc:db:42:61:b7:0a:e0:3b:0f:67:f1:
94:b7:eb:df:0d:fe:8c:2d:01:cc:11:71:4d:3f:fc:a1:d1:b4:
67:09:82:6b:4b:dd:67:50:0f:5d:3c:58:52:58:4e:ec:64:fd:
06:7a:10:ea:25:64:cf:79:da:e3:cb:13:e7:5a:5f:fe:6b:c7:
07:d1:55:de:8f:c4:17:c3:73:15:0c:54:42:05:c2:09:67:74:
5d:e0:bc:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYM7Nmw8vlqGupPXXD0RoDWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MjA0NDZmNzlmZmMyZDdjM2E5ZWYzNDBjZTlkZTI1NzIz
YTcxOWEwHhcNMjIwOTE0MDg1NjA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWQ4M2VmZWM1N2FiMjk4MTMzZmM1YjM3NTE4YjZkNTc3YWEwMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxmzKse5HcMGJZhJ3+pQQ2UazJTT
7BUreCLxnwQQ8ZBkQghLbgiS4uNoxSo4kRrWa11/MBCjZSkOdSwLLvt74qpACdEQ
VYHh/kNuDveZaaXJVYHRVunD7WMvKR64IzrPbJbUTsnlO4Yd1F0gfcn3YctzOI8I
5RiuydUZ2Aw3HM2VOK244VLTlyBrdkh2jeSFLGSZfFOHO/TEZU9cDc+l/ZOlrb3U
Ed5O3KneUZXVZAM9Y+Yq0MyQ6eCrVXIyYaj6smtu+AwQPiHxa/MkrmaTK0N9mWyr
f7vZH16cjCtmOOTQnTvHwLfJCqgFM8O59yGz2yR9QpK2TZtMvtzIn0ylsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFHYPv7FerKYEz/Fs3UYttV3qgBAMB8GA1UdIwQY
MBaAFOUgRG95/8LXw6nvNAzp3iVyOnGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMt
MGUwZTEzN2U1NTkxLzEvVWRnLV9zVjZzcGdUUDhXemRSaTIxWGVxQUVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMtMGUwZTEzN2U1NTkx
LzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLqDAAwQE
2cLwMA0GCSqGSIb3DQEBCwUAA4IBAQBdqtj+leJvd4Qeg7s31r/pMEWcs6wQwNtL
KZctkkM4468ZLHfbNIIDz2MS0xJwEnFK70xrIgb6dbC0ERCqYmnlnkZy9Wpi8EeA
SxP/JyNInK+NuAD3ZcGj0nMAc/UU9anJDNntCr7jlb34wwJ8XoMiBow5opfDAor3
NzlQFkyu7rK8GLNUy2hB90swcofOJIVRfFcIAKqAVMizNKscIJaeoss3f7R3TheP
3NtCYbcK4DsPZ/GUt+vfDf6MLQHMEXFNP/yh0bRnCYJrS91nUA9dPFhSWE7sZP0G
ehDqJWTPedrjyxPnWl/+a8cH0VXej8QXw3MVDFRCBcIJZ3Rd4Lwe
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:25 2024 by rpki-client on console-ams.rpki-client.org