Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/uHjJCp26uJUtv6k89rRSSujBaA4.roa
File: uHjJCp26uJUtv6k89rRSSujBaA4.roa (raw, json)
Hash identifier: CjrRZqqBBi/T8MtlQvwPVg+q6LTQFtX2cRfxBYwY8SM=
Subject key identifier: B8:78:C9:0A:9D:BA:B8:95:2D:BF:A9:3C:F6:B4:52:4A:E8:C1:68:0E
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01847829EC32DE4F56B3B52E6C56B67E4568
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/uHjJCp26uJUtv6k89rRSSujBaA4.roa
Signing time: Mon 14 Nov 2022 22:02:04 +0000
ROA not before: Mon 14 Nov 2022 22:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61976
IP address blocks: 79.141.65.0/24 maxlen: 24
79.141.66.0/24 maxlen: 24
78.155.198.0/24 maxlen: 24
185.193.90.0/23 maxlen: 23
92.255.62.0/23 maxlen: 23
79.141.64.0/20 maxlen: 20
79.141.64.0/24 maxlen: 24
2a00:ab00:6000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:78:29:ec:32:de:4f:56:b3:b5:2e:6c:56:b6:7e:45:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Nov 14 22:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b878c90a9dbab8952dbfa93cf6b4524ae8c1680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:06:4e:90:52:fe:a0:d6:87:ef:a8:53:63:6c:
0d:cb:b5:52:8d:97:cd:62:6d:a2:d5:43:1a:6e:aa:
0f:05:1e:b5:fe:61:82:dc:ea:ef:07:c4:fe:f0:8e:
07:e0:9c:a3:6d:7d:e9:2a:49:d2:c8:14:82:0e:c0:
85:7d:d9:2a:a3:9c:84:a4:c9:bd:13:d5:2e:33:f7:
45:93:e0:cb:58:7d:0a:c0:36:74:b2:93:a8:76:5c:
50:eb:0b:4b:3d:1a:a8:ca:ab:bb:00:8b:2c:59:48:
e8:04:2e:64:f9:0e:0f:b7:72:a7:68:c6:a6:8e:9d:
c0:2d:5c:53:74:09:94:30:56:a3:81:ba:06:ef:09:
e0:71:96:7a:8e:ba:43:b5:c5:bc:dc:bd:64:74:96:
7a:d6:db:e2:e7:1d:ac:7a:22:4b:93:21:70:f8:88:
eb:a6:03:1b:67:fd:79:ca:48:a2:25:0b:e7:55:42:
f6:2c:78:81:ce:69:2f:2e:2f:2c:0b:62:a2:24:77:
89:99:e1:ae:2f:18:6e:29:5c:9f:16:1d:c3:9d:0f:
80:6e:e0:b5:1c:a6:fb:4a:fc:94:0b:12:38:cf:3c:
05:cf:a9:95:54:7f:ff:83:1b:04:ed:30:17:a0:cf:
13:bf:df:18:aa:26:70:39:45:a3:27:95:29:83:da:
34:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:C9:0A:9D:BA:B8:95:2D:BF:A9:3C:F6:B4:52:4A:E8:C1:68:0E
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/uHjJCp26uJUtv6k89rRSSujBaA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.155.198.0/24
79.141.64.0/20
92.255.62.0/23
185.193.90.0/23
IPv6:
2a00:ab00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
3d:17:f6:36:2f:43:a4:a5:71:91:75:a8:de:8d:f6:72:92:be:
5f:41:40:99:0e:1b:6c:e2:8b:db:88:3f:e8:8f:94:5e:9b:fc:
e1:a1:26:7b:02:49:ff:c7:92:54:f2:00:2c:06:91:b3:a1:bf:
eb:60:8f:de:af:fd:d9:e3:2b:8e:36:ed:1c:d4:b2:7e:44:87:
e3:cf:25:d2:13:c8:90:61:9c:2f:c0:79:c3:7f:83:e1:ee:79:
0f:50:ad:fb:ec:3c:71:40:e6:3b:aa:09:f5:18:df:f4:6f:be:
2b:c6:b0:89:b4:5e:d1:74:82:7e:ca:39:3c:1a:50:57:75:65:
68:f0:6b:12:5e:60:46:7b:29:d6:7a:fd:2b:eb:f9:df:ea:17:
bd:5d:6e:54:4c:b4:a3:84:f1:9c:c8:09:bf:96:23:8f:2e:2d:
6f:55:b7:a7:1e:f9:83:a8:75:ed:77:08:e2:7d:ba:8d:f4:a9:
cd:35:3e:2d:3a:ac:9e:da:2f:e5:eb:e6:c3:0a:c3:32:c1:7c:
c4:5d:b8:f9:9f:5b:06:c3:1c:7c:c0:6a:90:49:72:bc:32:20:
c4:46:88:28:ba:19:29:df:f4:82:4a:cf:e7:76:e8:2c:e6:8b:
52:a8:9e:94:77:b0:d9:eb:d8:bb:4c:14:8f:46:54:a5:16:86:
90:a3:6b:17
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYR4Kewy3k9Ws7UubFa2fkVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4
MGEzMDEwHhcNMjIxMTE0MjIwMjA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODc4YzkwYTlkYmFiODk1MmRiZmE5M2NmNmI0NTI0YWU4YzE2ODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAZOkFL+oNaH76hTY2wNy7VSjZfN
Ym2i1UMabqoPBR61/mGC3OrvB8T+8I4H4JyjbX3pKknSyBSCDsCFfdkqo5yEpMm9
E9UuM/dFk+DLWH0KwDZ0spOodlxQ6wtLPRqoyqu7AIssWUjoBC5k+Q4Pt3KnaMam
jp3ALVxTdAmUMFajgboG7wngcZZ6jrpDtcW83L1kdJZ61tvi5x2seiJLkyFw+Ijr
pgMbZ/15ykiiJQvnVUL2LHiBzmkvLi8sC2KiJHeJmeGuLxhuKVyfFh3DnQ+AbuC1
HKb7SvyUCxI4zzwFz6mVVH//gxsE7TAXoM8Tv98YqiZwOUWjJ5Upg9o0+wIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFLh4yQqduriVLb+pPPa0UkrowWgOMB8GA1UdIwQY
MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt
ZDE2OWMwODhiNDEyLzEvdUhqSkNwMjZ1SlV0djZrODlyUlNTdWpCYUE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy
LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQATpvGAwQE
T41AAwQBXP8+AwQBucFaMA4EAgACMAgDBgQqAKsAYDANBgkqhkiG9w0BAQsFAAOC
AQEAPRf2Ni9DpKVxkXWo3o32cpK+X0FAmQ4bbOKL24g/6I+UXpv84aEmewJJ/8eS
VPIALAaRs6G/62CP3q/92eMrjjbtHNSyfkSH488l0hPIkGGcL8B5w3+D4e55D1Ct
++w8cUDmO6oJ9Rjf9G++K8awibRe0XSCfso5PBpQV3VlaPBrEl5gRnsp1nr9K+v5
3+oXvV1uVEy0o4TxnMgJv5Yjjy4tb1W3px75g6h17XcI4n26jfSpzTU+LTqsntov
5evmwwrDMsF8xF24+Z9bBsMcfMBqkElyvDIgxEaIKLoZKd/0gkrP53boLOaLUqie
lHew2evYu0wUj0ZUpRaGkKNrFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:19 2024 by rpki-client on console-ams.rpki-client.org