Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/rUFP9MC-adeHlcL9yXqi-YnMA6U.roa
File: rUFP9MC-adeHlcL9yXqi-YnMA6U.roa (raw, json)
Hash identifier: dwfiJ7XWCNits35+/cAoYH6gY1NI/JLWnqNIYMwEyic=
Subject key identifier: AD:41:4F:F4:C0:BE:69:D7:87:95:C2:FD:C9:7A:A2:F9:89:CC:03:A5
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 09AD3549
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/rUFP9MC-adeHlcL9yXqi-YnMA6U.roa
Signing time: Sat 01 Jan 2022 10:55:10 +0000
ROA not before: Sat 01 Jan 2022 10:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35046
IP address blocks: 213.226.208.0/20 maxlen: 20
94.143.232.0/21 maxlen: 21
185.133.100.0/22 maxlen: 22
2a00:5100::/32 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162346313 (0x9ad3549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Jan 1 10:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad414ff4c0be69d78795c2fdc97aa2f989cc03a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:4d:ae:c5:b2:cb:60:80:0f:c5:a5:34:f1:
b5:be:58:7b:e7:bd:53:b2:34:ec:d9:4e:4e:db:91:
9b:d5:17:11:90:12:8e:c4:1d:66:ea:70:2b:47:5e:
57:4d:58:a2:c5:8e:d5:fb:eb:99:1f:82:05:bb:fc:
56:fe:5e:bd:b2:ff:0e:6a:48:a0:6e:7b:bc:ea:6b:
02:4f:8b:b6:8d:24:50:98:1a:30:8f:8b:11:94:fd:
6b:93:1f:4c:a1:de:ec:cb:fc:6c:20:0a:b1:bd:5a:
5b:1f:dd:09:d6:88:7d:9e:52:e5:12:f3:ed:de:de:
49:be:dc:c9:77:35:c0:ed:e0:f7:13:f2:2b:ef:23:
05:45:89:1f:8f:c0:1f:3f:0b:5e:a7:1f:95:07:b4:
d1:42:f7:00:42:c5:b7:e6:00:ac:73:b2:a9:e9:fa:
f9:5a:a5:43:b2:48:c5:e3:d5:3a:21:03:1b:45:4b:
6e:22:54:64:ac:d7:a3:aa:59:bc:95:9c:d6:7f:e3:
2e:f2:10:97:50:60:d1:0b:a2:89:1b:ae:b1:ea:e9:
df:c8:fe:84:8d:17:31:76:da:27:37:93:ba:40:41:
36:9c:87:f3:74:cc:3c:1d:d8:b4:4b:22:d3:9c:e1:
47:0d:cb:e5:e6:65:f2:df:77:6d:b8:70:29:4b:e4:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:4F:F4:C0:BE:69:D7:87:95:C2:FD:C9:7A:A2:F9:89:CC:03:A5
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/rUFP9MC-adeHlcL9yXqi-YnMA6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.232.0/21
185.133.100.0/22
213.226.208.0/20
IPv6:
2a00:5100::/32
Signature Algorithm: sha256WithRSAEncryption
0f:2c:90:6a:e9:b4:c7:e3:a6:c0:f0:f4:15:62:ee:a2:e6:c4:
01:cb:e7:4a:84:25:fd:e8:05:d9:1f:b7:fb:6c:4e:09:7b:33:
6d:9d:d4:4b:86:d0:d2:cf:73:85:4a:21:f1:6a:88:0d:11:d6:
a2:7e:e7:6e:0b:1f:73:bc:43:9a:d9:d9:ca:b6:fb:80:4b:75:
a9:13:d4:b6:79:ed:74:2c:d9:74:fb:72:41:1e:81:e2:6c:b2:
97:ef:9b:41:51:47:3a:04:d2:80:3b:5b:31:ae:36:54:d5:53:
4a:7a:81:9f:99:ba:e4:d7:a1:50:eb:a0:cf:3d:fb:be:6c:26:
f5:08:66:f0:2a:78:f7:05:64:03:aa:4e:32:90:0a:48:92:c3:
bb:c4:ee:bf:66:d0:78:95:a4:d7:95:08:db:69:eb:52:f7:03:
fb:a2:dc:59:cb:e4:9b:e4:4a:29:88:fa:b9:f0:8a:99:90:bb:
2e:df:4c:b9:76:4f:95:64:c7:f4:e7:c4:e6:52:c1:36:37:e8:
cc:dc:6e:0b:06:e8:a0:cc:25:68:fe:9f:3b:c6:39:f9:02:06:
d9:de:08:b0:9e:7f:84:20:4d:c3:ca:3f:7e:5e:43:0b:20:ef:
ae:65:c4:c4:aa:09:2c:2d:13:2e:94:4d:91:03:cd:92:27:8c:
9c:09:c6:97
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIECa01STANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NGIwY2FjODM4ZjI4MmUwNDI5NDhmOWQyYjJjZDU3NTRkMmU4YzQ3MB4XDTIyMDEw
MTEwNTUxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWQ0MTRmZjRjMGJl
NjlkNzg3OTVjMmZkYzk3YWEyZjk4OWNjMDNhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKBoTa7FsstggA/FpTTxtb5Ye+e9U7I07NlOTtuRm9UXEZAS
jsQdZupwK0deV01YosWO1fvrmR+CBbv8Vv5evbL/DmpIoG57vOprAk+Lto0kUJga
MI+LEZT9a5MfTKHe7Mv8bCAKsb1aWx/dCdaIfZ5S5RLz7d7eSb7cyXc1wO3g9xPy
K+8jBUWJH4/AHz8LXqcflQe00UL3AELFt+YArHOyqen6+VqlQ7JIxePVOiEDG0VL
biJUZKzXo6pZvJWc1n/jLvIQl1Bg0QuiiRuuserp38j+hI0XMXbaJzeTukBBNpyH
83TMPB3YtEsi05zhRw3L5eZl8t93bbhwKUvklPsCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBStQU/0wL5p14eVwv3JeqL5icwDpTAfBgNVHSMEGDAWgBSEsMrIOPKC4EKU
j50rLNV1TS6MRzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hMREt5RGp5Z3VCQ2xJLWRLeXpWZFUwdWpFYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjMvZTk0ODdmLWZkYzctNDBhNy04YTY3LTFiZTY5Y2EzOTNiYS8x
L3JVRlA5TUMtYWRlSGxjTDl5WHFpLVluTUE2VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMv
ZTk0ODdmLWZkYzctNDBhNy04YTY3LTFiZTY5Y2EzOTNiYS8xL2hMREt5RGp5Z3VC
Q2xJLWRLeXpWZFUwdWpFYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEA16P6AMEArmFZAMEBNXi0DANBAIA
AjAHAwUAKgBRADANBgkqhkiG9w0BAQsFAAOCAQEADyyQaum0x+OmwPD0FWLuoubE
AcvnSoQl/egF2R+3+2xOCXszbZ3US4bQ0s9zhUoh8WqIDRHWon7nbgsfc7xDmtnZ
yrb7gEt1qRPUtnntdCzZdPtyQR6B4myyl++bQVFHOgTSgDtbMa42VNVTSnqBn5m6
5NehUOugzz37vmwm9Qhm8Cp49wVkA6pOMpAKSJLDu8Tuv2bQeJWk15UI22nrUvcD
+6LcWcvkm+RKKYj6ufCKmZC7Lt9MuXZPlWTH9OfE5lLBNjfozNxuCwbooMwlaP6f
O8Y5+QIG2d4IsJ5/hCBNw8o/fl5DCyDvrmXExKoJLC0TLpRNkQPNkieMnAnGlw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:17 2024 by rpki-client on console-ams.rpki-client.org