Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UV87s7ETY4j5XtFGJs6upImAG-U.roa
File: UV87s7ETY4j5XtFGJs6upImAG-U.roa (raw, json)
Hash identifier: dTdyp10m3QEq6exo4zoUY5N2l8w0thp6EkHi/7pstRY=
Subject key identifier: 51:5F:3B:B3:B1:13:63:88:F9:5E:D1:46:26:CE:AE:A4:89:80:1B:E5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01837ADE8CE01377D4FA7F2E8F41C1DA5F85
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UV87s7ETY4j5XtFGJs6upImAG-U.roa
Signing time: Mon 26 Sep 2022 17:35:48 +0000
ROA not before: Mon 26 Sep 2022 17:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 85.122.112.0/23 maxlen: 24
194.102.168.0/22 maxlen: 24
85.120.12.0/23 maxlen: 24
217.156.84.0/24 maxlen: 24
194.102.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:de:8c:e0:13:77:d4:fa:7f:2e:8f:41:c1:da:5f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 26 17:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=515f3bb3b1136388f95ed14626ceaea489801be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c5:8c:a0:00:b1:69:21:67:b2:9d:a6:21:0e:
c3:a8:70:22:16:0f:9a:83:aa:50:23:22:34:18:bd:
14:43:1b:4b:4d:f0:99:62:10:f7:cf:9f:a4:40:64:
63:86:7d:a9:13:60:b0:02:34:31:c6:8c:4a:d0:46:
cb:ef:17:0f:c8:40:7b:dc:d1:d8:6a:18:6e:5f:e6:
16:3f:cf:9a:1a:13:34:99:e2:20:d8:ee:61:78:e0:
ca:e9:c0:84:22:95:45:32:e5:dc:07:01:30:c3:09:
5d:5f:32:a0:95:f2:f1:9d:fc:32:33:5a:2c:9c:2e:
f3:a4:92:af:9e:3a:fa:c1:cb:6a:e0:62:c1:89:18:
db:89:5c:bc:de:80:0f:9a:4d:c9:4f:de:9a:84:13:
f3:04:64:32:24:7d:3c:54:07:dc:0c:f8:b4:da:f5:
be:41:81:15:20:60:a4:cb:26:4f:b1:4e:c1:ea:e5:
09:11:49:74:85:b3:68:db:af:3c:c2:a9:05:bd:d6:
3e:0a:9e:77:f7:6a:17:f4:b9:6e:dc:d5:3c:3e:75:
d3:f7:15:dd:41:31:ef:5c:4f:74:9a:67:c3:59:c9:
eb:41:af:e4:d9:b8:c2:95:3a:3d:3c:ad:c6:1f:de:
64:60:f6:73:f9:6e:01:fc:ee:f0:05:42:c6:eb:a0:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5F:3B:B3:B1:13:63:88:F9:5E:D1:46:26:CE:AE:A4:89:80:1B:E5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/UV87s7ETY4j5XtFGJs6upImAG-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.12.0/23
85.122.112.0/23
194.102.168.0/22
194.102.218.0/24
217.156.84.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f9:be:7f:36:0a:9c:7c:01:a4:9d:14:7a:33:f7:46:d4:33:
91:dc:ea:ea:71:e8:ab:e6:8c:67:64:42:db:cf:45:91:ac:a1:
8d:dc:84:d1:5f:29:73:22:84:ee:bf:53:71:23:ea:2c:15:fb:
6d:7d:b9:f4:aa:b4:33:e9:6a:0e:c6:71:ff:a6:2f:d5:4e:2e:
2a:54:97:dd:bc:4d:bd:e0:9c:29:d8:84:22:e0:a2:6f:87:8e:
91:a8:22:ca:e8:95:19:5f:ad:2b:bf:c2:2b:d7:5d:5c:c5:61:
4a:52:eb:c7:2e:d7:3d:a5:b7:59:c9:51:47:94:e7:68:43:32:
96:30:4c:18:4c:9c:eb:8f:51:0f:54:12:36:67:7d:54:a3:2b:
e3:6f:6e:2f:a3:9f:06:9f:f2:e2:6b:21:8f:37:ce:99:65:73:
71:72:b9:fb:f5:04:61:34:bb:bb:dd:33:72:0d:e6:f5:a6:77:
38:21:9c:e1:88:52:18:d0:aa:7d:2a:3f:d8:53:06:3b:ef:6c:
cf:cd:75:b5:aa:f2:7a:7c:27:f5:76:f9:69:45:06:cc:3d:e5:
b2:2e:12:cd:24:93:20:16:4e:08:98:a9:16:03:43:36:63:c0:
4c:5f:bf:4e:1b:8c:de:75:94:a0:fc:c1:8c:82:41:4d:84:c1:
15:24:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org