Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/uxWIxqve5iEpHibApTezk4aKYxo.roa
File: uxWIxqve5iEpHibApTezk4aKYxo.roa (raw, json)
Hash identifier: SVCd2hxYOnX8cqcbrCaXL7vLdXg+CBJaEk66/WwupYY=
Subject key identifier: BB:15:88:C6:AB:DE:E6:21:29:1E:26:C0:A5:37:B3:93:86:8A:63:1A
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 03FD69B6
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/uxWIxqve5iEpHibApTezk4aKYxo.roa
Signing time: Thu 20 Jan 2022 13:10:14 +0000
ROA not before: Thu 20 Jan 2022 13:10:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 37.72.192.0/19 maxlen: 19
37.72.243.0/24 maxlen: 24
37.72.242.0/24 maxlen: 24
37.72.244.0/22 maxlen: 22
37.72.252.0/22 maxlen: 22
37.72.248.0/24 maxlen: 24
37.72.250.0/23 maxlen: 23
37.72.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66939318 (0x3fd69b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Jan 20 13:10:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb1588c6abdee621291e26c0a537b393868a631a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:a9:b8:70:95:cc:e7:b6:e9:6f:56:3e:0a:
36:67:e0:49:f4:20:c2:c4:23:ea:fa:e4:70:94:46:
a1:4c:3e:40:49:57:0a:b7:62:a7:1e:ab:69:6e:7d:
2b:b3:04:82:01:e0:47:c9:cd:51:5f:56:b4:be:3d:
2a:d0:d6:21:1f:da:42:d8:e7:53:f5:b0:62:e3:a1:
13:9c:6c:62:1c:2f:19:d8:2f:df:22:10:87:75:48:
79:ed:a9:2e:11:ac:8e:db:ca:6d:a1:72:5a:83:2f:
95:ad:60:fc:94:44:31:73:2c:1d:3a:7e:bf:12:cd:
30:10:b9:e7:2f:c6:af:11:62:c9:3f:60:4e:84:e1:
7e:50:a1:37:9f:e0:65:2b:36:9f:7c:b0:ba:f2:ba:
05:5f:25:fa:e1:f6:4f:3b:3d:95:d0:90:3e:d0:25:
32:c7:5b:23:27:53:48:fe:7d:ed:10:92:ed:c3:6f:
2c:b1:a5:55:f3:bb:74:4c:a1:35:26:44:bd:91:8e:
c9:cf:de:ed:50:5e:25:c7:ab:81:03:c6:d8:ce:66:
d9:c4:18:f5:56:06:d2:fa:09:4b:8c:82:ee:73:8c:
c0:52:03:06:bf:fc:b6:f6:02:8c:b5:89:89:1f:78:
09:db:4b:d3:5e:58:73:4a:8b:13:14:0d:8c:f7:98:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:15:88:C6:AB:DE:E6:21:29:1E:26:C0:A5:37:B3:93:86:8A:63:1A
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/uxWIxqve5iEpHibApTezk4aKYxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.192.0/19
37.72.242.0-37.72.255.255
Signature Algorithm: sha256WithRSAEncryption
89:c9:e4:f1:4c:70:d3:fe:02:44:27:6d:04:40:9e:ad:ab:59:
91:72:78:fb:13:0e:3b:01:59:42:2f:97:9e:6d:0d:70:40:c6:
b6:a4:70:f5:9e:ca:3d:e3:3b:cd:1d:4c:dd:e7:14:34:b1:6e:
2d:37:de:53:e6:db:fc:35:8d:c2:42:8b:37:22:42:cd:3a:04:
83:df:3f:b1:0a:18:0e:e9:31:71:90:19:25:ad:f3:9e:58:6f:
89:4f:53:a0:24:f1:a7:8f:2e:9c:40:f6:19:07:45:c3:a3:a3:
5b:cc:da:33:d8:ac:1b:41:ba:f7:09:dd:e6:67:8d:5e:6a:29:
85:30:27:ab:76:c6:7e:07:99:7d:aa:6a:6a:b9:35:e2:54:04:
4a:46:f9:79:da:4d:74:26:4c:c5:e6:fe:19:a9:e0:1a:48:a3:
06:f7:b5:84:16:1e:15:ad:13:32:7b:42:bc:17:e4:77:86:1a:
28:b9:9d:53:d3:5f:28:12:5b:3d:35:cb:49:c1:b5:51:86:44:
b5:83:91:9a:24:4b:7f:5d:79:2d:3e:1d:62:e9:df:20:29:84:
b0:46:88:ef:4d:3f:2d:08:96:05:12:05:92:24:1f:52:74:c2:
fe:17:70:af:91:f5:d2:4e:01:cc:75:d1:1f:74:00:8b:51:de:
5d:9a:a2:22
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIEA/1ptjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ODEyZTQ5MWFhYTY1NWI2MzI0ZGJjYzBjZmYwMGE4ZDYzMTkxMDc2MB4XDTIyMDEy
MDEzMTAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmIxNTg4YzZhYmRl
ZTYyMTI5MWUyNmMwYTUzN2IzOTM4NjhhNjMxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTMqbhwlczntulvVj4KNmfgSfQgwsQj6vrkcJRGoUw+QElX
Crdipx6raW59K7MEggHgR8nNUV9WtL49KtDWIR/aQtjnU/WwYuOhE5xsYhwvGdgv
3yIQh3VIee2pLhGsjtvKbaFyWoMvla1g/JREMXMsHTp+vxLNMBC55y/GrxFiyT9g
ToThflChN5/gZSs2n3ywuvK6BV8l+uH2Tzs9ldCQPtAlMsdbIydTSP597RCS7cNv
LLGlVfO7dEyhNSZEvZGOyc/e7VBeJcergQPG2M5m2cQY9VYG0voJS4yC7nOMwFID
Br/8tvYCjLWJiR94CdtL015Yc0qLExQNjPeYf7sCAwEAAaOCAhYwggISMB0GA1Ud
DgQWBBS7FYjGq97mISkeJsClN7OThopjGjAfBgNVHSMEGDAWgBSYEuSRqqZVtjJN
vMDP8AqNYxkQdjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21CTGtrYXFtVmJZeVRiekF6X0FLaldNWkVIWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTYvMGU3ZWQzLTQ4Y2ItNGFmZS04ZDE1LWRmZmUxN2YzZGI1NC8x
L3V4V0l4cXZlNWlFcEhpYkFwVGV6azRhS1l4by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYv
MGU3ZWQzLTQ4Y2ItNGFmZS04ZDE1LWRmZmUxN2YzZGI1NC8xL21CTGtrYXFtVmJZ
eVRiekF6X0FLaldNWkVIWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAs
BggrBgEFBQcBBwEB/wQdMBswGQQCAAEwEwMEBSVIwDALAwQBJUjyAwMAJUgwDQYJ
KoZIhvcNAQELBQADggEBAInJ5PFMcNP+AkQnbQRAnq2rWZFyePsTDjsBWUIvl55t
DXBAxrakcPWeyj3jO80dTN3nFDSxbi033lPm2/w1jcJCizciQs06BIPfP7EKGA7p
MXGQGSWt855Yb4lPU6Ak8aePLpxA9hkHRcOjo1vM2jPYrBtBuvcJ3eZnjV5qKYUw
J6t2xn4HmX2qamq5NeJUBEpG+XnaTXQmTMXm/hmp4BpIowb3tYQWHhWtEzJ7QrwX
5HeGGii5nVPTXygSWz01y0nBtVGGRLWDkZokS39deS0+HWLp3yAphLBGiO9NPy0I
lgUSBZIkH1J0wv4XcK+R9dJOAcx10R90AItR3l2aoiI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:36 2023 by rpki-client on console-fra.rpki-client.org