Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/uu6n40afOJnK4R2odUyBaWmRM8U.roa
File: uu6n40afOJnK4R2odUyBaWmRM8U.roa (raw, json)
Hash identifier: j8+RM4YJTcLwtHRhfWBGaF0GWfEX/uDaJUI0YKi7alg=
Subject key identifier: BA:EE:A7:E3:46:9F:38:99:CA:E1:1D:A8:75:4C:81:69:69:91:33:C5
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 17E08228
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/uu6n40afOJnK4R2odUyBaWmRM8U.roa
Signing time: Sat 01 Jan 2022 02:55:47 +0000
ROA not before: Sat 01 Jan 2022 02:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30781
IP address blocks: 185.61.163.0/24 maxlen: 24
185.61.162.0/24 maxlen: 24
185.61.161.0/24 maxlen: 24
185.61.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400589352 (0x17e08228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Jan 1 02:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baeea7e3469f3899cae11da8754c8169699133c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:71:bd:64:8c:30:dc:46:26:c5:5a:5e:b1:
00:df:75:cd:47:b5:8a:a1:91:64:c6:8d:e3:e5:8e:
c3:f7:7f:2f:c9:c1:14:db:1c:11:8d:03:9a:0e:e1:
8e:9b:d8:c3:e0:57:86:62:a7:84:89:b2:52:4f:f0:
d4:e1:0e:25:f8:ad:9c:df:f6:7d:63:d2:cc:ff:fb:
49:5a:e1:fc:30:5d:ba:9f:fa:09:28:6d:7d:b0:d1:
b9:8b:27:ce:8e:50:30:ea:c3:db:13:ad:fb:2b:a4:
00:cf:e9:c9:e7:73:be:78:90:3a:dd:ae:bf:6e:32:
e3:2f:95:e2:c6:cd:55:86:bc:8c:09:43:3b:a2:f9:
30:74:df:bc:6b:47:dc:ac:25:f3:a5:e5:11:80:de:
b9:a9:fd:5c:de:17:47:4b:a7:a5:05:96:af:a4:17:
85:d8:14:42:01:8c:90:b3:ec:3e:f6:54:2f:bc:b8:
b8:32:42:b6:07:6d:fc:cc:62:87:a8:8f:64:59:cd:
cb:b5:e1:52:01:12:73:de:8f:8b:58:a7:5f:31:d2:
c9:77:f0:66:39:11:07:14:1e:e9:0c:65:68:2f:50:
08:87:2a:63:78:ce:cc:6e:49:bc:ec:c9:17:68:32:
21:89:59:a1:ba:e1:df:b6:1c:54:60:de:bb:73:1b:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:A7:E3:46:9F:38:99:CA:E1:1D:A8:75:4C:81:69:69:91:33:C5
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/uu6n40afOJnK4R2odUyBaWmRM8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:7d:c0:b0:8e:ae:8a:87:dd:f0:a2:d1:ca:dc:7a:49:4b:cb:
a1:56:78:f8:a8:c7:1b:b7:60:15:88:cc:5c:f3:a8:cd:13:84:
7e:63:46:9d:0a:fa:cc:e1:90:bd:62:11:61:15:25:6b:f1:23:
22:49:8e:cb:e2:03:49:93:f9:18:d4:40:d7:fb:af:ce:35:db:
30:15:26:9d:8a:0f:77:ca:e0:f3:e2:77:69:16:ee:40:57:6e:
bc:f5:95:63:f5:85:ce:d0:37:12:1f:e7:c2:a5:05:b3:be:3d:
39:a9:8b:24:3b:1d:9c:41:51:c1:0d:15:49:23:f0:80:21:68:
3f:90:ee:45:fe:80:17:00:be:e4:3b:c0:95:ac:a9:16:9c:9c:
71:1d:7d:78:a0:39:81:4d:74:27:74:80:58:a9:ed:f3:4d:34:
de:c6:0c:83:b8:2b:9b:19:37:72:0f:b2:f6:e0:5d:0c:c1:d1:
8a:18:62:f2:81:a3:a1:5b:1d:d0:df:c2:99:86:f2:33:b6:c7:
04:0f:2f:3e:2d:ac:7a:ec:d2:24:a6:21:6e:cb:28:57:a5:89:
f8:ce:3c:63:0f:f4:62:2a:0d:34:bb:b2:b0:da:94:ea:37:f5:
94:e7:bf:88:9d:cc:ac:a0:7a:85:63:ed:a7:58:93:02:f0:5b:
fb:8b:bf:f3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF+CCKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZmMyNDc0MzMwNGI3ZmQ5YTA2NWQyMmNkODljZGE5NTA0NWUyNjljMB4XDTIyMDEw
MTAyNTU0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmFlZWE3ZTM0Njlm
Mzg5OWNhZTExZGE4NzU0YzgxNjk2OTkxMzNjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2Ecb1kjDDcRibFWl6xAN91zUe1iqGRZMaN4+WOw/d/L8nB
FNscEY0Dmg7hjpvYw+BXhmKnhImyUk/w1OEOJfitnN/2fWPSzP/7SVrh/DBdup/6
CShtfbDRuYsnzo5QMOrD2xOt+yukAM/pyedzvniQOt2uv24y4y+V4sbNVYa8jAlD
O6L5MHTfvGtH3Kwl86XlEYDeuan9XN4XR0unpQWWr6QXhdgUQgGMkLPsPvZUL7y4
uDJCtgdt/Mxih6iPZFnNy7XhUgESc96Pi1inXzHSyXfwZjkRBxQe6QxlaC9QCIcq
Y3jOzG5JvOzJF2gyIYlZobrh37YcVGDeu3Mb/0ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS67qfjRp84mcrhHah1TIFpaZEzxTAfBgNVHSMEGDAWgBRfwkdDMEt/2aBl
0izYnNqVBF4mnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1g4SkhRekJMZjltZ1pkSXMySnphbFFSZUpwdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvZTVhMmM3LTA0NTMtNDhiYS1iMTBjLTBiYTk2NzlkZTJlNi8x
L3V1Nm40MGFmT0puSzRSMm9kVXlCYVdtUk04VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
ZTVhMmM3LTA0NTMtNDhiYS1iMTBjLTBiYTk2NzlkZTJlNi8xL1g4SkhRekJMZjlt
Z1pkSXMySnphbFFSZUpwdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArk9oDANBgkqhkiG9w0BAQsFAAOC
AQEAT33AsI6uiofd8KLRytx6SUvLoVZ4+KjHG7dgFYjMXPOozROEfmNGnQr6zOGQ
vWIRYRUla/EjIkmOy+IDSZP5GNRA1/uvzjXbMBUmnYoPd8rg8+J3aRbuQFduvPWV
Y/WFztA3Eh/nwqUFs749OamLJDsdnEFRwQ0VSSPwgCFoP5DuRf6AFwC+5DvAlayp
FpyccR19eKA5gU10J3SAWKnt80003sYMg7grmxk3cg+y9uBdDMHRihhi8oGjoVsd
0N/CmYbyM7bHBA8vPi2seuzSJKYhbssoV6WJ+M48Yw/0YioNNLuysNqU6jf1lOe/
iJ3MrKB6hWPtp1iTAvBb+4u/8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:53 2024 by rpki-client on console-fra.rpki-client.org