Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/UPu5QH5TCA1N8uwrngI_PzXPSIk.roa
File: UPu5QH5TCA1N8uwrngI_PzXPSIk.roa (raw, json)
Hash identifier: MjPQy7Pewl/uAEq8L8UzT2Qtf5Dm156OaLOysEdyUlg=
Subject key identifier: 50:FB:B9:40:7E:53:08:0D:4D:F2:EC:2B:9E:02:3F:3F:35:CF:48:89
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 08F9E1D3
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/UPu5QH5TCA1N8uwrngI_PzXPSIk.roa
Signing time: Sat 01 Jan 2022 06:57:13 +0000
ROA not before: Sat 01 Jan 2022 06:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44466
IP address blocks: 195.80.61.0/24 maxlen: 24
195.80.62.0/24 maxlen: 24
195.80.63.0/24 maxlen: 24
195.80.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150594003 (0x8f9e1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Jan 1 06:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50fbb9407e53080d4df2ec2b9e023f3f35cf4889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:95:0d:10:55:5e:37:db:84:18:11:81:d4:
f9:c2:64:07:ff:43:54:4a:d7:b5:d2:4b:05:6c:5c:
d6:d2:78:29:e6:26:ea:af:df:fb:f2:95:40:1c:45:
67:4b:37:17:31:93:42:59:75:5a:1d:22:8f:75:f7:
74:91:fa:af:12:93:3d:49:e4:76:b7:5a:96:7d:6c:
7c:6a:14:26:73:0b:12:7e:d3:4c:b1:98:2f:3d:18:
72:f3:16:ae:3f:fb:33:3a:0f:69:8a:ef:77:1a:ff:
37:07:30:74:6f:c8:b3:bf:2b:e1:c9:d9:79:14:4f:
02:82:e7:e8:58:47:ff:e6:6a:c4:13:cb:ac:07:47:
22:2e:e0:34:d8:0d:c2:48:b1:46:1d:0a:fd:a0:e4:
01:aa:c8:26:e9:0c:ff:54:88:67:21:51:b8:7d:01:
5a:59:65:a3:bc:3e:d7:f3:3b:46:ac:d7:9e:da:ea:
67:64:c7:31:c5:f1:61:34:05:32:17:ee:e4:b0:c3:
fc:f6:76:7e:e6:13:32:6f:45:c2:d7:32:d7:db:01:
c4:bf:b2:98:f9:c7:5f:d4:d4:8c:1c:37:82:b8:13:
ac:2e:54:f5:ef:17:b0:00:22:61:49:53:7d:f8:bb:
0f:af:c6:16:06:ab:fe:0b:05:93:af:d5:0e:d2:32:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FB:B9:40:7E:53:08:0D:4D:F2:EC:2B:9E:02:3F:3F:35:CF:48:89
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/UPu5QH5TCA1N8uwrngI_PzXPSIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:8a:a5:af:39:04:04:57:2b:e0:3b:6b:ef:e7:7a:21:45:4f:
cc:50:7f:2a:9e:18:07:4b:df:96:d0:6e:0c:4a:02:7b:c0:cc:
cd:bd:bc:be:97:13:08:9b:31:e6:9e:0c:87:4c:ec:0d:b5:7f:
ae:18:90:4c:69:dd:2d:dd:15:3d:19:5f:23:56:96:e6:f4:05:
9f:96:7b:91:a3:57:17:db:02:0b:b6:da:75:1b:73:a9:3e:7d:
c7:e7:27:41:3d:f7:55:2c:d0:a8:56:98:c2:2b:9d:36:f4:1a:
d1:1a:e8:59:be:5f:27:14:54:bd:b3:3a:02:c4:25:39:b3:de:
9c:6e:37:75:27:e7:5e:e6:82:58:84:4f:f2:fe:22:74:17:04:
d3:9e:0a:94:3c:e0:36:3f:4c:3c:9d:0b:e8:b2:2d:47:f3:d1:
4b:c5:6d:bf:8a:e4:af:6f:0c:11:cf:a5:0e:d1:94:26:55:e5:
f2:6e:1a:fd:11:05:e3:54:8a:ce:3b:a1:ef:f6:c4:21:5d:77:
ab:97:34:a9:dd:a9:b6:de:ae:3f:f9:97:6b:4a:74:29:b7:f6:
75:04:42:51:b1:a7:a7:c4:1c:61:5b:ef:df:50:c7:24:d6:6b:
13:85:34:65:aa:34:88:61:c7:4d:16:fb:66:60:6a:0a:45:a0:
8f:d6:de:ae
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECPnh0zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZGYxMWExODBkZjE3OTk0ZTQ4YWQzMzE4NzJjZmQwMGFkOWFiYTA0MB4XDTIyMDEw
MTA2NTcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBmYmI5NDA3ZTUz
MDgwZDRkZjJlYzJiOWUwMjNmM2YzNWNmNDg4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrQlQ0QVV4324QYEYHU+cJkB/9DVErXtdJLBWxc1tJ4KeYm
6q/f+/KVQBxFZ0s3FzGTQll1Wh0ij3X3dJH6rxKTPUnkdrdaln1sfGoUJnMLEn7T
TLGYLz0YcvMWrj/7MzoPaYrvdxr/NwcwdG/Is78r4cnZeRRPAoLn6FhH/+ZqxBPL
rAdHIi7gNNgNwkixRh0K/aDkAarIJukM/1SIZyFRuH0BWlllo7w+1/M7RqzXntrq
Z2THMcXxYTQFMhfu5LDD/PZ2fuYTMm9Fwtcy19sBxL+ymPnHX9TUjBw3grgTrC5U
9e8XsAAiYUlTffi7D6/GFgar/gsFk6/VDtIyUvcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRQ+7lAflMIDU3y7CueAj8/Nc9IiTAfBgNVHSMEGDAWgBRd8RoYDfF5lOSK
0zGHLP0ArZq6BDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hmRWFHQTN4ZVpUa2l0TXhoeXo5QUsyYXVnUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvNzNkMTQ1LWViOTktNGJkOC1hODE3LTZiY2U3Nzk5Y2JlYS8x
L1VQdTVRSDVUQ0ExTjh1d3JuZ0lfUHpYUFNJay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
NzNkMTQ1LWViOTktNGJkOC1hODE3LTZiY2U3Nzk5Y2JlYS8xL1hmRWFHQTN4ZVpU
a2l0TXhoeXo5QUsyYXVnUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsNQPDANBgkqhkiG9w0BAQsFAAOC
AQEAfYqlrzkEBFcr4Dtr7+d6IUVPzFB/Kp4YB0vfltBuDEoCe8DMzb28vpcTCJsx
5p4Mh0zsDbV/rhiQTGndLd0VPRlfI1aW5vQFn5Z7kaNXF9sCC7badRtzqT59x+cn
QT33VSzQqFaYwiudNvQa0RroWb5fJxRUvbM6AsQlObPenG43dSfnXuaCWIRP8v4i
dBcE054KlDzgNj9MPJ0L6LItR/PRS8Vtv4rkr28MEc+lDtGUJlXl8m4a/REF41SK
zjuh7/bEIV13q5c0qd2ptt6uP/mXa0p0Kbf2dQRCUbGnp8QcYVvv31DHJNZrE4U0
Zao0iGHHTRb7ZmBqCkWgj9berg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:29 2024 by rpki-client on console-ams.rpki-client.org