Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/UQzxTPOMx0xW41XmMsRrXe3hWPw.roa
File: UQzxTPOMx0xW41XmMsRrXe3hWPw.roa (raw, json)
Hash identifier: yU9MLGMEPH6beBbdVhXF5VFClbcASmOX4W+Kf3zHelA=
Subject key identifier: 51:0C:F1:4C:F3:8C:C7:4C:56:E3:55:E6:32:C4:6B:5D:ED:E1:58:FC
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0185EFD23EC48C6532717CC06CBD8B1833E1
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/UQzxTPOMx0xW41XmMsRrXe3hWPw.roa
Signing time: Thu 26 Jan 2023 20:43:31 +0000
ROA not before: Thu 26 Jan 2023 20:43:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12912
IP address blocks: 178.183.0.0/18 maxlen: 18
188.146.0.0/19 maxlen: 19
188.146.0.0/18 maxlen: 18
188.146.0.0/16 maxlen: 17
188.147.192.0/19 maxlen: 19
188.146.0.0/15 maxlen: 15
178.183.32.0/24 maxlen: 24
188.147.96.0/19 maxlen: 19
62.152.128.0/19 maxlen: 19
37.30.32.0/19 maxlen: 19
178.180.0.0/14 maxlen: 14
188.146.128.0/19 maxlen: 19
188.146.32.0/19 maxlen: 19
37.30.0.0/19 maxlen: 19
188.146.64.0/19 maxlen: 19
83.220.96.0/19 maxlen: 19
37.30.0.0/15 maxlen: 17
83.220.101.0/24 maxlen: 24
188.146.192.0/19 maxlen: 19
46.204.0.0/19 maxlen: 19
46.204.0.0/15 maxlen: 15
46.205.192.0/20 maxlen: 20
46.205.208.0/20 maxlen: 20
46.204.32.0/19 maxlen: 19
46.205.128.0/19 maxlen: 19
37.30.96.0/19 maxlen: 19
178.182.0.0/18 maxlen: 18
188.147.64.0/19 maxlen: 19
188.147.64.0/18 maxlen: 18
213.158.192.0/19 maxlen: 19
46.204.64.0/19 maxlen: 19
188.147.0.0/19 maxlen: 19
46.205.240.0/21 maxlen: 21
46.204.96.0/19 maxlen: 19
2001:1b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:d2:3e:c4:8c:65:32:71:7c:c0:6c:bd:8b:18:33:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jan 26 20:43:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=510cf14cf38cc74c56e355e632c46b5dede158fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:16:e6:60:9d:96:f4:67:cf:fc:ea:1f:8a:
84:9a:38:f1:1e:6d:a3:75:71:e6:09:58:e2:7f:a4:
2e:13:d1:7d:5b:8c:3c:f7:2a:85:0b:1b:1d:5e:d0:
40:55:ce:ce:2a:6c:09:d6:1e:db:7f:67:d2:ad:17:
d7:a8:53:e5:a4:46:16:78:a2:7d:e9:b1:ec:99:d7:
11:4a:f0:52:a8:4d:a9:4d:5d:6a:fb:31:1e:43:b0:
bf:65:28:5d:9e:7e:29:cd:31:ef:bf:f1:9f:4e:c7:
3d:0d:22:aa:2d:b9:56:0c:79:92:57:a4:ab:b1:3d:
e0:cb:86:9c:c0:c0:f4:74:b5:e8:b8:3a:7f:87:c0:
b6:53:8e:6c:56:6b:35:2d:8e:da:f9:a0:fc:4f:fd:
16:59:f1:fd:0a:b1:4f:02:07:94:e7:3c:00:15:69:
54:aa:51:c9:ef:a0:c0:11:8a:bf:d6:6a:4e:50:b1:
7a:0b:eb:03:14:3d:50:72:6b:dd:21:32:9e:d2:1b:
77:7b:04:b9:2a:11:ad:ec:93:5d:40:5e:c0:3f:a8:
1d:a4:b2:91:c2:1d:97:94:ab:c2:48:5b:a7:32:10:
ed:cb:fe:9a:2c:da:28:b3:27:d6:b9:8c:d7:bf:c6:
0e:2b:46:1a:e9:55:bb:2c:c9:bb:3a:53:89:23:f2:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0C:F1:4C:F3:8C:C7:4C:56:E3:55:E6:32:C4:6B:5D:ED:E1:58:FC
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/UQzxTPOMx0xW41XmMsRrXe3hWPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.30.0.0/15
46.204.0.0/15
62.152.128.0/19
83.220.96.0/19
178.180.0.0/14
188.146.0.0/15
213.158.192.0/19
IPv6:
2001:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:51:e7:dc:64:12:b1:dc:39:0d:3e:c8:02:bc:a9:e2:71:c2:
c5:92:c3:3e:6e:80:ed:6b:bf:ed:3e:31:80:5e:34:b5:38:8d:
25:1d:d0:4c:2e:d2:b1:f1:be:22:ff:a2:84:c0:14:5f:09:d2:
b6:7e:d1:18:ae:9e:b8:ef:3c:dc:70:d6:1a:8c:fe:a6:d6:58:
2f:ba:6f:e7:08:ef:13:b1:97:44:09:18:4c:e4:84:d9:5e:fc:
b6:d0:42:26:ae:3f:9d:5a:ca:ff:b5:b0:b3:3a:ef:27:0f:cf:
15:0f:45:53:ac:0c:bf:91:e8:6a:10:1d:95:c9:76:09:24:5a:
81:22:57:47:14:a9:f2:eb:f2:35:d6:8d:35:7d:f1:89:50:13:
eb:a4:b9:cf:ee:6c:9b:e4:64:15:18:f3:2e:7a:de:fa:c7:d1:
57:c9:5c:d3:05:06:87:8f:7b:2b:a7:49:99:52:f4:b2:3a:20:
3e:09:16:51:df:cd:7e:64:6a:00:c3:74:ff:2c:b6:4a:c4:f9:
87:df:f6:75:90:78:60:ab:d4:7c:48:39:02:f1:fa:79:f5:1e:
8e:a3:67:34:b9:dd:13:16:79:b8:be:b0:5b:a6:d6:2c:83:03:
db:aa:2a:02:65:3d:9d:38:13:af:4d:4a:af:72:ab:08:b6:78:
9d:dc:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:01:21 2025 by rpki-client