Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/UcGidnGcxj31HTBd0kFAKCFjEL8.roa
File: UcGidnGcxj31HTBd0kFAKCFjEL8.roa (raw, json)
Hash identifier: luoODKRJ2MwHrnv+r7IAMXNHnTaQ12BWGMffoazC/ak=
Subject key identifier: 51:C1:A2:76:71:9C:C6:3D:F5:1D:30:5D:D2:41:40:28:21:63:10:BF
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018382E7BB72F5AA88B6E2D47054421F4209
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/UcGidnGcxj31HTBd0kFAKCFjEL8.roa
Signing time: Wed 28 Sep 2022 07:02:48 +0000
ROA not before: Wed 28 Sep 2022 07:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13194
IP address blocks: 85.254.71.0/24 maxlen: 24
85.254.75.0/24 maxlen: 24
85.254.76.0/24 maxlen: 24
85.254.73.0/24 maxlen: 24
85.254.74.0/24 maxlen: 24
85.254.76.0/22 maxlen: 22
85.254.74.0/23 maxlen: 23
85.254.141.0/24 maxlen: 24
85.254.151.0/24 maxlen: 24
85.254.149.0/24 maxlen: 24
85.254.152.0/22 maxlen: 22
85.254.170.0/24 maxlen: 24
85.254.176.0/23 maxlen: 23
80.81.61.0/24 maxlen: 24
85.254.84.0/23 maxlen: 23
85.254.80.0/22 maxlen: 22
85.254.94.0/24 maxlen: 24
85.254.98.0/23 maxlen: 23
85.254.96.0/22 maxlen: 22
85.254.96.0/23 maxlen: 23
85.254.92.0/22 maxlen: 22
85.254.92.0/23 maxlen: 23
85.254.95.0/24 maxlen: 24
85.254.92.0/24 maxlen: 24
85.254.93.0/24 maxlen: 24
85.254.104.0/21 maxlen: 21
85.254.103.0/24 maxlen: 24
85.254.101.0/24 maxlen: 24
85.254.102.0/24 maxlen: 24
85.254.100.0/24 maxlen: 24
85.254.112.0/21 maxlen: 21
85.254.124.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:82:e7:bb:72:f5:aa:88:b6:e2:d4:70:54:42:1f:42:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Sep 28 07:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51c1a276719cc63df51d305dd2414028216310bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:4c:3e:ec:83:cc:a9:fa:ae:83:89:eb:43:
95:38:39:7e:fb:57:00:d6:e7:8e:5a:1d:e6:89:08:
91:2b:63:bf:d2:d6:0b:68:83:bf:d6:ac:8b:dd:9b:
02:e8:4e:2c:5f:d6:30:a0:36:af:2b:95:69:cf:f7:
ee:0a:90:01:ba:aa:0a:00:e5:3b:a5:cf:12:e6:6f:
e5:da:83:0a:d4:43:80:83:f0:82:1e:7e:a7:2f:ad:
de:93:52:5a:90:f7:cb:f3:ba:ec:f1:b4:5c:94:e0:
93:9a:9b:e2:cf:49:49:35:38:77:af:da:70:47:f5:
a0:62:9a:63:16:c2:29:bc:ca:41:fc:37:fc:eb:a0:
2a:59:77:9b:2a:ac:92:a5:f6:f1:a9:87:47:4a:1f:
a0:a5:77:63:b7:9a:ec:a2:93:a1:35:5f:de:f0:04:
95:bf:c6:04:7a:69:0f:b8:de:93:fc:36:43:cb:21:
c4:3c:47:10:d5:9d:7b:3f:95:ec:ee:f6:5b:ae:ee:
10:ef:60:86:75:9d:f8:c7:b2:e4:00:06:d5:80:60:
50:c7:6a:48:42:6c:d8:a6:5a:dd:67:07:ea:b4:57:
ab:c3:ed:ee:30:88:89:8d:6d:39:47:95:0a:01:3e:
87:8f:b2:b3:5f:ef:1e:06:fa:98:11:e3:35:90:95:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C1:A2:76:71:9C:C6:3D:F5:1D:30:5D:D2:41:40:28:21:63:10:BF
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/UcGidnGcxj31HTBd0kFAKCFjEL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.61.0/24
85.254.71.0/24
85.254.73.0-85.254.85.255
85.254.92.0-85.254.119.255
85.254.124.0/23
85.254.141.0/24
85.254.149.0/24
85.254.151.0-85.254.155.255
85.254.170.0/24
85.254.176.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:27:04:4f:49:dc:46:95:b2:03:32:7b:55:5f:32:26:2a:95:
05:23:8b:49:e6:f1:e4:39:9b:df:42:17:ee:be:a4:bc:14:7f:
7a:bb:a7:54:e6:e4:ef:95:40:74:97:3a:b7:fc:95:13:78:d0:
32:de:36:40:fa:43:26:e9:99:d2:53:10:c9:24:62:1b:2d:4e:
f2:1c:e0:71:9c:1d:96:39:94:36:22:04:c6:38:02:05:c7:f5:
ba:8c:8a:84:e4:87:63:a3:45:ac:b9:3f:fd:f8:82:a0:cf:3a:
ff:49:8d:eb:14:77:40:d6:66:c8:b7:36:8a:23:e6:c2:2f:c7:
a2:11:73:fa:3c:b3:c8:18:70:67:37:ae:ea:d7:7d:cb:cc:6c:
89:d6:d6:f1:30:94:4d:be:1b:38:04:1e:ae:40:66:aa:cc:f9:
be:37:d0:15:96:98:9f:e0:3d:27:8e:af:13:95:64:84:fb:92:
2e:34:04:dd:93:1b:fa:f9:2f:e5:72:79:fe:d1:6e:53:05:57:
31:41:c7:4d:1f:dc:b8:ed:b8:c3:fd:4d:2c:a1:8f:58:04:ce:
23:c3:bd:0f:56:f5:d3:d6:34:da:e9:b1:be:a8:a4:c3:70:30:
17:2c:9f:d3:b5:fc:2c:35:ef:90:ba:a1:2f:ab:72:b9:a8:b5:
fa:da:73:49
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYOC57ty9aqItuLUcFRCH0IJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjIwOTI4MDcwMjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWMxYTI3NjcxOWNjNjNkZjUxZDMwNWRkMjQxNDAyODIxNjMxMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMhMPuyDzKn6roOJ60OVODl++1cA
1ueOWh3miQiRK2O/0tYLaIO/1qyL3ZsC6E4sX9YwoDavK5Vpz/fuCpABuqoKAOU7
pc8S5m/l2oMK1EOAg/CCHn6nL63ek1JakPfL87rs8bRclOCTmpviz0lJNTh3r9pw
R/WgYppjFsIpvMpB/Df866AqWXebKqySpfbxqYdHSh+gpXdjt5rsopOhNV/e8ASV
v8YEemkPuN6T/DZDyyHEPEcQ1Z17P5Xs7vZbru4Q72CGdZ34x7LkAAbVgGBQx2pI
QmzYplrdZwfqtFerw+3uMIiJjW05R5UKAT6Hj7KzX+8eBvqYEeM1kJUwUQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFFHBonZxnMY99R0wXdJBQCghYxC/MB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvVWNHaWRuR2N4ajMxSFRCZDBrRkFLQ0ZqRUw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAUFE9AwQA
Vf5HMAwDBABV/kkDBAFV/lQwDAMEAlX+XAMEA1X+cAMEAVX+fAMEAFX+jQMEAFX+
lTAMAwQAVf6XAwQCVf6YAwQAVf6qAwQBVf6wMA0GCSqGSIb3DQEBCwUAA4IBAQBu
JwRPSdxGlbIDMntVXzImKpUFI4tJ5vHkOZvfQhfuvqS8FH96u6dU5uTvlUB0lzq3
/JUTeNAy3jZA+kMm6ZnSUxDJJGIbLU7yHOBxnB2WOZQ2IgTGOAIFx/W6jIqE5Idj
o0WsuT/9+IKgzzr/SY3rFHdA1mbItzaKI+bCL8eiEXP6PLPIGHBnN67q133LzGyJ
1tbxMJRNvhs4BB6uQGaqzPm+N9AVlpif4D0njq8TlWSE+5IuNATdkxv6+S/lcnn+
0W5TBVcxQcdNH9y47bjD/U0soY9YBM4jw70PVvXT1jTa6bG+qKTDcDAXLJ/Ttfws
Ne+QuqEvq3K5qLX62nNJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:45 2023 by rpki-client on console-fra.rpki-client.org