Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/uVUSY0lTYzp6bsO6lOZZiWM4BT0.roa
File: uVUSY0lTYzp6bsO6lOZZiWM4BT0.roa (raw, json)
Hash identifier: 8nZr2ohjONAmZ14Yrn08vSDJXvsqnVZyGNZ/ElIe2AU=
Subject key identifier: B9:55:12:63:49:53:63:3A:7A:6E:C3:BA:94:E6:59:89:63:38:05:3D
Certificate issuer: /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial: 018572C38C1519E0F6F6EA96A4C901977DC7
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/uVUSY0lTYzp6bsO6lOZZiWM4BT0.roa
Signing time: Mon 02 Jan 2023 13:54:56 +0000
ROA not before: Mon 02 Jan 2023 13:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211090
IP address blocks: 185.253.78.0/24 maxlen: 24
91.239.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:8c:15:19:e0:f6:f6:ea:96:a4:c9:01:97:7d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Validity
Not Before: Jan 2 13:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b95512634953633a7a6ec3ba94e659896338053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:60:27:a2:45:62:1e:64:28:42:81:29:c9:
10:26:88:80:50:2e:0f:b9:cb:1e:30:3e:ee:22:f5:
59:a9:5c:70:84:73:63:21:f0:a4:bb:3e:92:e8:24:
be:bd:ae:e2:82:04:1b:2c:4d:f2:22:54:fc:60:b1:
ae:aa:50:15:2a:69:e8:30:d2:50:bc:4f:16:d1:a7:
72:a2:a7:b9:02:67:d2:57:ad:f3:b4:28:02:49:e5:
19:65:d7:32:2f:0c:77:08:2c:2d:f7:fe:dc:06:d3:
5b:22:23:cd:91:26:53:a4:09:68:37:b2:7c:9b:e2:
6a:a6:5d:8e:10:82:95:ac:fe:98:7b:e6:c5:48:56:
08:16:b1:91:15:98:c0:ce:9a:67:c5:51:cd:88:00:
8d:09:e2:c2:75:ea:80:4f:87:6a:98:c1:c7:e7:d2:
8d:1b:60:97:da:b6:72:f9:9b:41:32:75:2e:e6:80:
df:c3:1b:38:a6:6a:6d:66:0d:6f:a0:ba:ce:b6:fc:
1c:f8:9c:0e:e9:af:dd:e5:cb:03:2e:6f:01:bb:58:
3a:50:0a:3c:32:5d:3f:80:da:25:65:0d:72:41:55:
0b:a3:d6:f4:8d:e2:85:57:3b:73:25:38:7e:e6:19:
3e:f9:7b:a1:06:9f:00:9b:c5:75:78:5f:0d:e0:cf:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:55:12:63:49:53:63:3A:7A:6E:C3:BA:94:E6:59:89:63:38:05:3D
X509v3 Authority Key Identifier:
keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/uVUSY0lTYzp6bsO6lOZZiWM4BT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.119.0/24
185.253.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f4:61:75:c3:14:ec:16:ad:f3:02:c2:65:42:69:11:5e:94:
87:d8:f6:b3:2b:21:ea:90:59:19:fe:c6:96:c0:d8:16:d0:46:
06:2c:c4:06:c0:38:67:79:a8:b1:81:dd:45:f5:9f:c3:02:74:
bd:08:f2:72:c3:3b:2c:0b:b1:6a:21:f4:a2:0c:ac:73:5f:e7:
6a:a9:0b:b5:ac:91:4f:41:bd:34:ed:3e:63:94:6e:73:d5:06:
f5:5e:11:da:9a:29:c6:9d:6a:95:8d:b2:c4:13:9f:a0:0c:7f:
6c:7e:fc:f4:3a:42:62:2d:03:5b:a6:e5:56:bc:b1:5c:bf:32:
3a:11:74:81:44:cd:a0:05:84:4b:fc:2f:ef:52:a5:f4:81:82:
11:24:00:88:53:e6:93:3a:86:0b:b2:37:3e:fc:36:47:fe:a2:
c3:73:bd:fb:11:5f:06:81:41:2a:ba:ba:3e:d2:f2:f4:ec:a1:
a0:eb:b3:14:a4:31:a7:df:3b:33:05:1f:40:f1:e6:3a:70:20:
a3:0f:fc:8f:2d:8f:70:2f:29:6e:1f:55:53:a5:de:c3:3c:07:
16:ff:82:83:3c:3a:4f:37:d3:78:49:10:a0:57:14:24:02:1a:
f4:ae:5a:10:93:61:67:cc:e3:52:00:4b:54:eb:b8:72:1d:3e:
ad:e7:83:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyw4wVGeD29uqWpMkBl33HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMjYzOWIzNWU1ZDlkMGZiMzY5NmZlMmZkNjFjYjZmNGMz
ZmE1MDQwHhcNMjMwMTAyMTM1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTU1MTI2MzQ5NTM2MzNhN2E2ZWMzYmE5NGU2NTk4OTYzMzgwNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w5gJ6JFYh5kKEKBKckQJoiAUC4P
ucseMD7uIvVZqVxwhHNjIfCkuz6S6CS+va7iggQbLE3yIlT8YLGuqlAVKmnoMNJQ
vE8W0adyoqe5AmfSV63ztCgCSeUZZdcyLwx3CCwt9/7cBtNbIiPNkSZTpAloN7J8
m+Jqpl2OEIKVrP6Ye+bFSFYIFrGRFZjAzppnxVHNiACNCeLCdeqAT4dqmMHH59KN
G2CX2rZy+ZtBMnUu5oDfwxs4pmptZg1voLrOtvwc+JwO6a/d5csDLm8Bu1g6UAo8
Ml0/gNolZQ1yQVULo9b0jeKFVztzJTh+5hk++XuhBp8Am8V1eF8N4M+OWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLlVEmNJU2M6em7DupTmWYljOAU9MB8GA1UdIwQY
MBaAFDImObNeXZ0Ps2lv4v1hy29MP6UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NjJmYmYtNTU3Ni00NTk1LTg5MmIt
YjViM2FlYWU5OGVhLzEvdVZVU1kwbFRZenA2YnNPNmxPWlppV000QlQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82NjJmYmYtNTU3Ni00NTk1LTg5MmItYjViM2FlYWU5OGVh
LzEvTWlZNXMxNWRuUS16YVdfaV9XSExiMHdfcFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+93AwQA
uf1OMA0GCSqGSIb3DQEBCwUAA4IBAQAe9GF1wxTsFq3zAsJlQmkRXpSH2PazKyHq
kFkZ/saWwNgW0EYGLMQGwDhneaixgd1F9Z/DAnS9CPJywzssC7FqIfSiDKxzX+dq
qQu1rJFPQb007T5jlG5z1Qb1XhHaminGnWqVjbLEE5+gDH9sfvz0OkJiLQNbpuVW
vLFcvzI6EXSBRM2gBYRL/C/vUqX0gYIRJACIU+aTOoYLsjc+/DZH/qLDc737EV8G
gUEquro+0vL07KGg67MUpDGn3zszBR9A8eY6cCCjD/yPLY9wLyluH1VTpd7DPAcW
/4KDPDpPN9N4SRCgVxQkAhr0rloQk2FnzONSAEtU67hyHT6t54OF
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:01 2025 by rpki-client