Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/uVwDDWMxQsFa6U-MAYeHYePI7Vw.roa
File: uVwDDWMxQsFa6U-MAYeHYePI7Vw.roa (raw, json)
Hash identifier: y639ISzadwthayhQu8jNxhKxcBFyRBS3Z3v98hviFog=
Subject key identifier: B9:5C:03:0D:63:31:42:C1:5A:E9:4F:8C:01:87:87:61:E3:C8:ED:5C
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 17CF50D2
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/uVwDDWMxQsFa6U-MAYeHYePI7Vw.roa
Signing time: Sat 01 Jan 2022 02:54:27 +0000
ROA not before: Sat 01 Jan 2022 02:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59545
IP address blocks: 92.63.163.0/24 maxlen: 24
92.63.162.0/24 maxlen: 24
92.63.160.0/24 maxlen: 24
92.63.161.0/24 maxlen: 24
92.63.160.0/21 maxlen: 21
185.69.100.0/22 maxlen: 24
178.20.248.0/21 maxlen: 21
141.138.144.0/21 maxlen: 21
141.138.145.0/24 maxlen: 24
141.138.151.0/24 maxlen: 24
141.138.148.0/24 maxlen: 24
141.138.149.0/24 maxlen: 24
141.138.146.0/24 maxlen: 24
141.138.147.0/24 maxlen: 24
2a01:a680:a1::/48 maxlen: 48
2a01:a680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399462610 (0x17cf50d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Jan 1 02:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b95c030d633142c15ae94f8c01878761e3c8ed5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:e7:e4:f4:d0:1e:73:ea:24:9e:88:85:3b:
e0:7c:70:33:b7:40:11:1c:4c:e5:9e:4f:1b:c3:45:
ce:92:38:ea:40:78:15:5b:b3:a4:c7:82:8c:84:82:
0b:69:2e:7a:ad:11:7d:89:88:29:61:95:c3:94:e8:
19:fd:a3:71:b9:d3:74:39:c4:dc:fd:cd:83:e6:51:
71:b6:b5:00:6c:46:97:c4:a2:33:0c:2b:91:1e:7c:
49:aa:f8:f0:52:82:77:b9:60:be:68:e8:e3:9f:62:
e9:d3:ef:45:ce:92:bd:a7:16:e5:de:68:17:5d:19:
e6:12:39:ca:c7:b5:b4:e0:61:41:f3:e5:a3:a3:a4:
a2:6a:bf:ec:d4:18:c4:ca:f4:cf:18:31:03:ba:6b:
4b:bb:ce:c9:89:79:d2:9b:70:d5:22:c4:ec:fa:ba:
8e:77:14:37:0a:fd:46:ae:6e:42:5b:48:37:bc:ce:
0a:28:38:dd:a8:d3:92:68:49:1a:59:58:ab:8b:74:
50:62:30:f0:87:ed:1c:8b:8a:3e:d6:5b:7a:a5:5b:
73:76:e0:bf:48:ea:26:14:af:7b:c1:47:2c:4f:7a:
de:11:fe:af:10:2a:8d:78:8e:00:1b:c3:eb:73:37:
5f:e9:74:59:d6:9e:4f:68:16:fb:d9:5a:32:ca:ed:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5C:03:0D:63:31:42:C1:5A:E9:4F:8C:01:87:87:61:E3:C8:ED:5C
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/uVwDDWMxQsFa6U-MAYeHYePI7Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.160.0/21
141.138.144.0/21
178.20.248.0/21
185.69.100.0/22
IPv6:
2a01:a680::/32
Signature Algorithm: sha256WithRSAEncryption
0a:d8:81:a0:47:bf:a3:ac:4e:f5:c8:e0:1f:83:a3:94:41:e1:
11:67:1f:e0:6e:fa:a8:48:83:6a:e3:3a:78:f1:4f:a8:ee:43:
ca:1e:b3:1d:90:31:f4:fb:bd:99:0d:93:c4:e0:e1:a5:d9:43:
72:62:98:da:73:56:bf:f9:40:d3:c1:06:35:f6:0b:38:f4:f8:
5a:53:0b:35:f6:36:89:d0:cd:24:5f:4e:c7:8e:f0:db:a6:85:
1d:39:05:05:f7:92:92:a6:91:a0:9f:76:03:38:b3:32:a1:92:
73:a6:49:46:ce:c3:c7:34:01:0a:32:c0:9b:e4:f4:c6:93:3b:
a0:0d:b9:bc:51:22:6b:7f:86:21:ce:a2:2f:f8:2a:ea:fa:cb:
9f:7e:25:8e:c1:52:9f:b2:b9:74:a1:9b:e6:3e:b8:fa:bd:31:
b7:0e:2a:b5:83:5d:2b:4c:b8:8e:5f:0d:14:57:73:a0:a7:67:
6c:ae:b1:7a:4d:bb:c3:34:7e:3d:f3:49:79:2a:62:5a:a5:2d:
fb:21:fe:8f:63:fd:a3:1d:05:ab:69:f0:1f:82:5c:76:b6:72:
ff:92:71:5e:54:29:82:1a:e1:b1:f7:9e:d4:65:b2:9a:86:0e:
8a:73:49:0f:ce:bc:06:c9:ab:70:6d:00:d8:4b:d5:17:4d:d1:
d0:d7:84:68
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEF89Q0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MjQxYWQwZTdmYzIyYmZiYWI1NjdiZTg5ZjYzZDk4MDVlNWViOWFhMB4XDTIyMDEw
MTAyNTQyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjk1YzAzMGQ2MzMx
NDJjMTVhZTk0ZjhjMDE4Nzg3NjFlM2M4ZWQ1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJer5+T00B5z6iSeiIU74HxwM7dAERxM5Z5PG8NFzpI46kB4
FVuzpMeCjISCC2kueq0RfYmIKWGVw5ToGf2jcbnTdDnE3P3Ng+ZRcba1AGxGl8Si
MwwrkR58Sar48FKCd7lgvmjo459i6dPvRc6SvacW5d5oF10Z5hI5yse1tOBhQfPl
o6Okomq/7NQYxMr0zxgxA7prS7vOyYl50ptw1SLE7Pq6jncUNwr9Rq5uQltIN7zO
Cig43ajTkmhJGllYq4t0UGIw8IftHIuKPtZbeqVbc3bgv0jqJhSve8FHLE963hH+
rxAqjXiOABvD63M3X+l0WdaeT2gW+9laMsrtU3MCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBS5XAMNYzFCwVrpT4wBh4dh48jtXDAfBgNVHSMEGDAWgBSSQa0Of8Ir+6tW
e+ifY9mAXl65qjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2trR3REbl9DS191clZudm9uMlBaZ0Y1ZXVhby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmEvZmIxYTZkLTQxMzgtNGM0Zi1hZWQ5LTQ1NDRjNjEwOTcyOS8x
L3VWd0REV014UXNGYTZVLU1BWWVIWWVQSTdWdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEv
ZmIxYTZkLTQxMzgtNGM0Zi1hZWQ5LTQ1NDRjNjEwOTcyOS8xL2trR3REbl9DS191
clZudm9uMlBaZ0Y1ZXVhby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEA1w/oAMEA42KkAMEA7IU+AMEArlF
ZDANBAIAAjAHAwUAKgGmgDANBgkqhkiG9w0BAQsFAAOCAQEACtiBoEe/o6xO9cjg
H4OjlEHhEWcf4G76qEiDauM6ePFPqO5Dyh6zHZAx9Pu9mQ2TxODhpdlDcmKY2nNW
v/lA08EGNfYLOPT4WlMLNfY2idDNJF9Ox47w26aFHTkFBfeSkqaRoJ92AzizMqGS
c6ZJRs7DxzQBCjLAm+T0xpM7oA25vFEia3+GIc6iL/gq6vrLn34ljsFSn7K5dKGb
5j64+r0xtw4qtYNdK0y4jl8NFFdzoKdnbK6xek27wzR+PfNJeSpiWqUt+yH+j2P9
ox0Fq2nwH4JcdrZy/5JxXlQpghrhsfee1GWymoYOinNJD868BsmrcG0A2EvVF03R
0NeEaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:37 2024 by rpki-client on console-fra.rpki-client.org