Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/uuRhDuWSE-_87ynLno0Vv9SZc7w.roa
File: uuRhDuWSE-_87ynLno0Vv9SZc7w.roa (raw, json)
Hash identifier: DK3fsQYUysNOm6OM3uYkC/AG6WmDIrrBwabGem7pwf4=
Subject key identifier: BA:E4:61:0E:E5:92:13:EF:FC:EF:29:CB:9E:8D:15:BF:D4:99:73:BC
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 01826836938AE04B8781D88CE62F6EBBCDDA
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/uuRhDuWSE-_87ynLno0Vv9SZc7w.roa
Signing time: Thu 04 Aug 2022 09:36:23 +0000
ROA not before: Thu 04 Aug 2022 09:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49129
IP address blocks: 185.110.164.0/22 maxlen: 22
178.236.48.0/20 maxlen: 20
31.192.0.0/20 maxlen: 20
31.192.16.0/20 maxlen: 20
77.242.48.0/20 maxlen: 20
31.192.32.0/20 maxlen: 20
80.77.48.0/20 maxlen: 20
31.192.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:36:93:8a:e0:4b:87:81:d8:8c:e6:2f:6e:bb:cd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Aug 4 09:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bae4610ee59213effcef29cb9e8d15bfd49973bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:21:ad:fc:b6:2c:d5:25:6d:00:44:93:e9:
52:13:dc:58:dc:21:2a:8d:34:3f:f4:56:96:5a:24:
65:cb:58:8b:6b:c7:ea:84:a2:54:e6:f2:50:49:42:
9f:da:cd:4b:f7:42:23:d1:58:29:6a:2d:fc:01:d9:
89:ea:c6:0f:fa:db:2b:6f:63:9c:5c:57:d5:e5:e2:
b3:99:c0:51:e5:82:c1:10:a3:f2:fb:73:5d:2a:98:
09:92:c7:6f:77:4e:ed:a7:b9:53:1a:83:e7:ad:9f:
87:ad:50:2b:65:59:51:81:e2:c1:19:ab:61:5d:45:
66:78:06:de:80:5e:26:5e:e7:41:3f:6e:3a:34:c4:
c9:36:5e:e1:b2:5f:e2:f0:76:15:c4:d2:bc:21:a7:
5c:47:e0:93:73:cd:56:d6:09:67:1a:09:28:cb:f8:
a0:35:d5:82:fb:46:bd:29:e8:1c:63:77:90:3a:fc:
9b:20:7c:3b:c1:bd:75:07:09:63:21:f3:54:0e:35:
4d:51:d6:e3:df:f9:c8:05:99:c3:fc:99:38:27:3f:
6e:fa:d5:6a:07:95:72:1b:73:b3:a8:d4:4e:5c:49:
71:13:59:ec:e2:e2:d0:0f:bb:f4:82:3e:10:cb:87:
d5:81:aa:de:60:15:25:76:7d:f0:fa:0d:ee:ab:b6:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:61:0E:E5:92:13:EF:FC:EF:29:CB:9E:8D:15:BF:D4:99:73:BC
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/uuRhDuWSE-_87ynLno0Vv9SZc7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.0.0/18
77.242.48.0/20
80.77.48.0/20
178.236.48.0/20
185.110.164.0/22
Signature Algorithm: sha256WithRSAEncryption
59:a5:60:d2:12:d2:a6:03:c1:0c:08:6f:66:a7:57:c0:f9:b0:
b8:60:e8:c6:2a:e4:28:37:0c:75:7c:fa:1e:bd:f0:39:a3:ea:
04:72:bc:2b:da:e9:12:d0:ea:e5:c4:82:6b:95:45:f2:df:61:
08:2d:5f:36:a6:b5:62:64:e2:46:70:93:e9:1d:31:93:c8:b0:
32:9c:1c:97:ef:74:4f:ed:99:01:82:2b:e3:0f:d6:16:7f:84:
8d:a8:d4:4b:18:8b:ed:15:26:93:f0:5c:fd:29:f0:ba:3e:d8:
ca:92:96:98:0f:fa:d8:4e:ba:a5:98:98:50:58:9e:df:fb:36:
87:44:fd:12:da:7e:91:5b:80:16:77:a7:02:23:68:81:fa:c7:
ab:1c:21:c0:5f:a1:f4:06:a2:d3:d2:72:3f:dd:ce:5b:a4:58:
9f:1d:36:63:3a:7d:bd:5b:82:d4:3d:6d:ec:e2:88:b5:7f:40:
ce:fd:19:f9:4d:c6:7a:b2:a6:18:34:7a:c1:75:87:29:11:a4:
97:cb:3e:29:1f:9f:7f:88:6f:12:4a:d7:d3:7c:e3:c3:ac:66:
2d:92:f6:23:c8:85:04:87:8d:dd:d1:26:df:f6:d2:9b:1e:d7:
5c:33:28:fa:72:66:18:c7:ac:35:b0:0e:df:d7:c4:cc:da:c4:
c3:69:ed:d0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYJoNpOK4EuHgdiM5i9uu83aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZGUyN2ZhODg3OTA1ZTBjOWMxZjUzZjY3ZjIzZjI5NmQw
NDVmMGUwHhcNMjIwODA0MDkzNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWU0NjEwZWU1OTIxM2VmZmNlZjI5Y2I5ZThkMTViZmQ0OTk3M2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLshrfy2LNUlbQBEk+lSE9xY3CEq
jTQ/9FaWWiRly1iLa8fqhKJU5vJQSUKf2s1L90Ij0Vgpai38AdmJ6sYP+tsrb2Oc
XFfV5eKzmcBR5YLBEKPy+3NdKpgJksdvd07tp7lTGoPnrZ+HrVArZVlRgeLBGath
XUVmeAbegF4mXudBP246NMTJNl7hsl/i8HYVxNK8IadcR+CTc81W1glnGgkoy/ig
NdWC+0a9KegcY3eQOvybIHw7wb11BwljIfNUDjVNUdbj3/nIBZnD/Jk4Jz9u+tVq
B5VyG3OzqNROXElxE1ns4uLQD7v0gj4Qy4fVgareYBUldn3w+g3uq7YqFQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLrkYQ7lkhPv/O8py56NFb/UmXO8MB8GA1UdIwQY
MBaAFELeJ/qIeQXgycH1P2fyPyltBF8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQt
ZDI5YjdkNDc4NjMxLzEvdXVSaER1V1NFLV84N3luTG5vMFZ2OVNaYzd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQtZDI5YjdkNDc4NjMx
LzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQGH8AAAwQE
TfIwAwQEUE0wAwQEsuwwAwQCuW6kMA0GCSqGSIb3DQEBCwUAA4IBAQBZpWDSEtKm
A8EMCG9mp1fA+bC4YOjGKuQoNwx1fPoevfA5o+oEcrwr2ukS0OrlxIJrlUXy32EI
LV82prViZOJGcJPpHTGTyLAynByX73RP7ZkBgivjD9YWf4SNqNRLGIvtFSaT8Fz9
KfC6PtjKkpaYD/rYTrqlmJhQWJ7f+zaHRP0S2n6RW4AWd6cCI2iB+serHCHAX6H0
BqLT0nI/3c5bpFifHTZjOn29W4LUPW3s4oi1f0DO/Rn5TcZ6sqYYNHrBdYcpEaSX
yz4pH59/iG8SStfTfOPDrGYtkvYjyIUEh43d0Sbf9tKbHtdcMyj6cmYYx6w1sA7f
18TM2sTDae3Q
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org