Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/uagfCSCw1mSO0rGYhJ_BlcpyRjs.roa
File: uagfCSCw1mSO0rGYhJ_BlcpyRjs.roa (raw, json)
Hash identifier: 3Ls9uTxUGeOMQPELS6fPHsYNFRSIlyamRzw0ONOfkyc=
Subject key identifier: B9:A8:1F:09:20:B0:D6:64:8E:D2:B1:98:84:9F:C1:95:CA:72:46:3B
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 03BCD6C7
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/uagfCSCw1mSO0rGYhJ_BlcpyRjs.roa
Signing time: Wed 15 Jun 2022 13:29:44 +0000
ROA not before: Wed 15 Jun 2022 13:29:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25591
IP address blocks: 80.242.96.0/22 maxlen: 22
80.242.104.0/22 maxlen: 22
80.242.100.0/22 maxlen: 22
80.242.108.0/22 maxlen: 22
93.190.176.0/22 maxlen: 22
37.75.216.0/22 maxlen: 22
37.75.220.0/22 maxlen: 22
31.3.24.0/22 maxlen: 22
31.3.28.0/22 maxlen: 22
185.14.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62707399 (0x3bcd6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Jun 15 13:29:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9a81f0920b0d6648ed2b198849fc195ca72463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:5d:8d:09:af:42:64:a2:18:89:dc:eb:9d:
7a:6f:c3:e9:2c:21:62:87:b1:93:b8:8e:56:cf:05:
ca:92:77:2d:5d:73:1e:e3:1f:9d:f6:68:95:14:e3:
30:f8:fa:b8:65:f2:bc:0e:af:b2:a8:9d:ad:34:77:
06:9d:07:e7:e6:12:4b:65:f3:da:70:df:be:c3:19:
d2:96:f3:7c:64:21:68:58:a4:9b:14:da:9d:e2:6e:
ac:51:15:44:be:e0:d7:81:82:9a:13:a4:c4:3c:36:
fb:8e:c3:22:8d:e5:4a:c3:a1:10:6d:98:e0:4c:6b:
b1:df:4b:eb:b5:7c:f9:f6:ba:63:82:b9:3c:b4:97:
b6:53:6d:57:66:7c:0a:cd:a9:8a:6b:3e:83:cf:cc:
8c:bf:bc:27:9e:61:78:22:b0:47:6d:90:ea:8c:7c:
21:2f:9a:3b:59:0c:c9:1c:8f:d2:23:ed:f4:d1:44:
d9:e9:2c:f6:db:19:67:95:98:e1:74:af:d1:c5:4e:
b0:08:97:ce:be:d1:51:97:96:9a:1e:48:ab:31:34:
d4:2d:86:4c:a4:92:b8:11:2d:ac:2f:a4:0a:9e:0c:
f5:55:32:4e:60:c0:b6:d4:0e:95:36:db:7f:62:07:
9c:ff:4b:96:46:c5:4f:2d:b3:62:04:65:ab:04:2f:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A8:1F:09:20:B0:D6:64:8E:D2:B1:98:84:9F:C1:95:CA:72:46:3B
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/uagfCSCw1mSO0rGYhJ_BlcpyRjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.24.0/21
37.75.216.0/21
80.242.96.0/20
93.190.176.0/22
185.14.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:87:91:50:60:b4:35:26:f0:e2:b8:62:6f:77:cc:66:42:68:
24:2a:a2:d4:64:a2:4e:1b:6a:e2:6a:56:e6:43:73:84:3e:f9:
bc:ab:24:3f:86:d6:80:76:95:c8:ca:9b:b1:12:9e:16:e4:2a:
85:31:6d:3f:29:f2:f6:6e:50:4d:cd:2c:24:67:f0:64:9b:85:
28:fd:be:32:c8:b5:7c:f0:f7:91:87:d9:e5:db:c3:3c:e7:58:
8f:5b:f3:ce:4a:19:99:c9:45:27:71:94:fc:e6:1f:95:28:1f:
57:29:e7:b9:82:d1:97:90:37:af:bb:6b:71:bf:01:6a:9c:41:
7e:64:c3:9b:69:f1:17:3c:32:4e:69:e8:b9:aa:07:52:e1:2d:
69:64:97:94:03:0f:fa:9e:00:9d:29:56:29:0b:c8:ae:d7:83:
ff:f5:c2:72:40:11:46:b9:d5:e0:99:cc:e9:e1:c8:63:a4:0b:
a4:9f:60:b9:da:bf:a2:8a:9f:25:f4:a1:b2:ac:69:35:71:40:
dc:1f:c4:ac:4b:7a:f6:27:62:2e:e3:8f:ae:a5:75:86:3a:42:
6f:79:1e:b9:35:f6:b5:1e:59:da:6b:58:c7:b1:33:11:49:b4:
82:42:be:89:99:48:4d:16:42:02:e9:ca:70:f3:5e:53:12:0a:
3f:f4:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:47 2025 by rpki-client