Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/UqJN94TS1juvFUcbkruqlX8M6DI.roa
File: UqJN94TS1juvFUcbkruqlX8M6DI.roa (raw, json)
Hash identifier: qJD6h3vQaC8RT5Ao1iWNo27jjN+/jJt202/efJDHwok=
Subject key identifier: 52:A2:4D:F7:84:D2:D6:3B:AF:15:47:1B:92:BB:AA:95:7F:0C:E8:32
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 368A4482
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/UqJN94TS1juvFUcbkruqlX8M6DI.roa
Signing time: Thu 07 Apr 2022 07:52:30 +0000
ROA not before: Thu 07 Apr 2022 07:52:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31376
IP address blocks: 217.119.16.0/20 maxlen: 28
213.108.32.0/21 maxlen: 21
91.215.252.0/23 maxlen: 23
91.190.80.0/21 maxlen: 21
93.92.192.0/21 maxlen: 28
109.71.176.0/21 maxlen: 28
185.42.60.0/22 maxlen: 28
91.219.180.0/22 maxlen: 22
80.79.240.0/21 maxlen: 21
80.79.248.0/22 maxlen: 22
80.79.252.0/23 maxlen: 23
91.215.255.0/24 maxlen: 24
91.215.254.0/24 maxlen: 24
80.249.176.0/20 maxlen: 28
80.73.192.0/20 maxlen: 20
188.93.240.0/21 maxlen: 28
93.190.224.0/21 maxlen: 28
193.110.237.0/24 maxlen: 24
2a02:16e8::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915031170 (0x368a4482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Apr 7 07:52:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52a24df784d2d63baf15471b92bbaa957f0ce832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:20:6c:ba:5e:5b:4f:75:d7:47:53:81:6f:
f8:ed:fb:93:1e:f6:7b:8b:ad:c3:e9:ca:91:ff:c2:
39:99:b3:f7:2f:4e:00:18:9d:aa:49:6d:22:cf:7f:
d5:47:15:23:23:25:93:8f:cc:a0:07:60:33:a6:22:
fc:d7:4d:47:bf:ed:86:15:8e:08:6e:a7:74:f6:2d:
32:9f:7e:cb:8d:ff:18:80:0c:ca:15:c2:22:17:ea:
c3:9d:6b:4e:6d:76:5e:52:5a:bf:27:94:75:5d:aa:
57:f6:70:b8:ef:e7:ec:6b:e2:87:c8:bd:81:a6:55:
d1:83:2a:20:c7:a8:d8:41:cb:19:d9:77:ff:b1:56:
18:3d:c1:d3:ba:37:56:5f:cb:d2:5b:19:8c:83:99:
de:ae:8c:f4:a7:d7:6f:b7:ab:d0:b5:aa:52:f9:8f:
bd:9d:ef:aa:2a:8d:41:bd:e0:a0:de:3c:52:b8:4c:
be:20:88:02:6f:1c:82:6d:48:98:16:6d:be:3c:bc:
dc:2d:e4:dd:7d:c3:4c:e9:81:94:7e:7c:b7:1c:e2:
5a:72:09:61:24:84:bf:95:26:a6:e0:73:7e:f7:1d:
ea:7b:d2:2b:2f:55:d4:d9:aa:c3:4d:3e:a9:00:61:
b8:b0:01:d8:f6:3d:50:67:82:93:28:24:d1:96:a5:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:4D:F7:84:D2:D6:3B:AF:15:47:1B:92:BB:AA:95:7F:0C:E8:32
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/UqJN94TS1juvFUcbkruqlX8M6DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.192.0/20
80.79.240.0-80.79.253.255
80.249.176.0/20
91.190.80.0/21
91.215.252.0/22
91.219.180.0/22
93.92.192.0/21
93.190.224.0/21
109.71.176.0/21
185.42.60.0/22
188.93.240.0/21
193.110.237.0/24
213.108.32.0/21
217.119.16.0/20
IPv6:
2a02:16e8::/32
Signature Algorithm: sha256WithRSAEncryption
ab:56:ae:4d:dd:64:be:7d:2d:89:c6:1b:70:cc:f1:2f:9e:3e:
f1:bb:ed:f3:04:87:b2:4b:0d:ad:28:c2:76:c6:a0:17:f0:2c:
4b:bd:6a:ba:31:f4:62:f5:bc:5c:23:a8:f1:12:cd:ff:11:76:
53:6b:0c:f9:2b:af:4e:39:38:a1:49:03:a2:ce:75:be:44:a8:
78:48:c1:bc:08:f0:55:3c:ac:3f:dc:29:95:0f:8e:1a:d1:34:
12:f6:89:d1:ba:a7:09:7f:a9:0c:3c:67:c4:e7:6c:69:93:07:
5c:f0:4e:f4:20:a2:4c:ad:3b:3a:2c:eb:97:c7:e2:77:ce:44:
4f:81:1b:fe:fd:9a:14:26:a4:f4:da:97:28:cb:26:d0:6f:c6:
de:e3:1f:df:10:be:c0:4f:f2:e9:50:0e:51:e4:a0:0a:39:4d:
c3:1d:97:b3:f5:9c:e6:dc:2e:c6:a0:59:f7:40:10:2a:54:d7:
a3:aa:48:4f:7e:3b:90:1c:2b:46:12:3e:4e:6a:57:f2:37:16:
30:33:27:fb:77:0c:fb:fb:7e:27:05:6e:16:93:f0:0a:aa:26:
14:37:18:77:e4:ea:e0:6f:bf:de:a4:f8:24:fa:09:5a:b6:09:
e9:92:2b:c8:ac:d4:a8:35:d7:6d:a4:02:ca:f8:e9:6e:cc:a1:
8c:52:60:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:34 2023 by rpki-client on console-fra.rpki-client.org