Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/UeeSx0qGW6Ubg-N8fLfeEsTC1h8.roa
File: UeeSx0qGW6Ubg-N8fLfeEsTC1h8.roa (raw, json)
Hash identifier: BbC8XA724EAGgWDWmySLZcvRGrw0cl34+KXZdVbxyGw=
Subject key identifier: 51:E7:92:C7:4A:86:5B:A5:1B:83:E3:7C:7C:B7:DE:12:C4:C2:D6:1F
Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial: 38283FF1
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/UeeSx0qGW6Ubg-N8fLfeEsTC1h8.roa
Signing time: Sat 01 Jan 2022 09:56:19 +0000
ROA not before: Sat 01 Jan 2022 09:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44302
IP address blocks: 92.61.112.0/20 maxlen: 20
92.61.118.0/24 maxlen: 24
217.27.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942161905 (0x38283ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Validity
Not Before: Jan 1 09:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51e792c74a865ba51b83e37c7cb7de12c4c2d61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:73:dc:48:ed:3a:bd:47:cd:c5:c6:76:78:
c7:7f:62:59:8d:ac:20:51:6f:19:37:69:75:c9:89:
be:e8:bb:5e:ca:2c:bb:0b:95:b3:f6:c2:b9:07:a9:
62:0c:63:78:b7:53:6a:ed:cd:fe:30:88:1b:83:e5:
06:ad:17:cb:2c:f6:59:84:1f:fc:f3:72:6f:bf:b1:
e3:4b:54:65:79:98:1d:77:d5:b7:2a:b3:dd:64:16:
0d:ca:8a:7f:13:fc:ec:65:99:e0:a2:5a:c9:84:a6:
c9:3c:4e:74:10:51:52:44:97:72:63:8a:4f:2b:5c:
62:10:ea:f3:12:41:6a:e9:50:b6:bf:0c:3a:5c:d8:
42:ef:08:57:32:4b:43:92:9c:0e:7a:9e:cc:99:4c:
6b:83:39:43:06:1b:3c:33:db:18:a2:f6:52:70:bf:
58:5a:1a:99:7c:4c:d7:fe:24:09:0b:0b:6e:27:49:
df:a7:1e:0c:29:e1:d8:6f:29:6d:e8:2d:b4:1a:ef:
d1:a7:a3:e2:74:fb:a7:f0:f8:35:6b:50:b2:ff:50:
a3:49:8d:df:16:30:a4:6f:f7:a6:1d:4a:e2:fc:f6:
8c:b5:05:a8:c0:c4:33:e1:11:d3:c3:44:62:7a:81:
ea:4b:96:e8:72:23:22:60:b6:80:48:7a:aa:83:7e:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E7:92:C7:4A:86:5B:A5:1B:83:E3:7C:7C:B7:DE:12:C4:C2:D6:1F
X509v3 Authority Key Identifier:
keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/UeeSx0qGW6Ubg-N8fLfeEsTC1h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.112.0/20
217.27.208.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:c4:5c:8b:c0:a4:4c:2a:fd:92:70:3f:01:0d:b2:69:57:0f:
4d:de:49:75:95:c0:d7:2a:90:a1:69:12:9a:cd:09:b4:98:74:
2e:9b:19:3d:d1:39:6a:1b:f0:61:a8:48:52:dd:df:57:c3:14:
08:16:3b:ba:7b:52:eb:a5:f1:b1:db:53:bf:1d:6c:a5:10:cb:
5f:84:5f:49:17:7e:67:52:cc:b3:a8:29:76:d4:45:8d:98:ab:
e7:8f:14:dc:1a:3b:f2:03:83:e1:2a:1f:c0:c5:d4:b9:f5:e8:
77:ad:43:27:65:00:ac:0e:61:f9:18:aa:1f:1a:49:1f:52:52:
3d:7d:a9:0e:b5:fb:0f:c3:58:24:08:57:44:03:f9:db:9d:c6:
05:8c:2d:32:30:37:0b:92:04:6d:9f:bc:eb:48:ce:49:05:e8:
04:e4:8c:d8:19:92:e5:a5:dd:2e:8d:52:d1:79:d5:55:ef:0b:
d4:b8:18:fd:cb:6a:11:55:6b:ac:02:d5:6b:d5:c9:5d:67:03:
44:57:31:92:63:47:d6:ee:27:54:e9:60:b9:fc:aa:15:29:03:
4c:25:5a:ac:8b:a9:65:db:5d:02:5e:1e:da:8b:ca:47:58:21:
c8:e2:52:5e:dd:59:dd:56:13:6e:fb:17:5b:0d:a5:82:e1:0d:
13:7d:81:09
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOCg/8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTkwYzg1Y2ZhMGNlZDUyODM2MzQ5OTdlN2E0YWE4Y2U3ODM2ZGI2MB4XDTIyMDEw
MTA5NTYxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTFlNzkyYzc0YTg2
NWJhNTFiODNlMzdjN2NiN2RlMTJjNGMyZDYxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtJc9xI7Tq9R83FxnZ4x39iWY2sIFFvGTdpdcmJvui7Xsos
uwuVs/bCuQepYgxjeLdTau3N/jCIG4PlBq0Xyyz2WYQf/PNyb7+x40tUZXmYHXfV
tyqz3WQWDcqKfxP87GWZ4KJayYSmyTxOdBBRUkSXcmOKTytcYhDq8xJBaulQtr8M
OlzYQu8IVzJLQ5KcDnqezJlMa4M5QwYbPDPbGKL2UnC/WFoamXxM1/4kCQsLbidJ
36ceDCnh2G8pbegttBrv0aej4nT7p/D4NWtQsv9Qo0mN3xYwpG/3ph1K4vz2jLUF
qMDEM+ER08NEYnqB6kuW6HIjImC2gEh6qoN+mR8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRR55LHSoZbpRuD43x8t94SxMLWHzAfBgNVHSMEGDAWgBS5kMhc+gztUoNj
SZfnpKqM54NttjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaRElYUG9NN1ZLRFkwbVg1NlNxak9lRGJiWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzMvMTcwZWNkLWU1NzctNDA1OC05MzU4LTQ3M2YxNWVjMGQ1Mi8x
L1VlZVN4MHFHVzZVYmctTjhmTGZlRXNUQzFoOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMv
MTcwZWNkLWU1NzctNDA1OC05MzU4LTQ3M2YxNWVjMGQ1Mi8xL3VaRElYUG9NN1ZL
RFkwbVg1NlNxak9lRGJiWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBFw9cAMEBNkb0DANBgkqhkiG9w0B
AQsFAAOCAQEAqsRci8CkTCr9knA/AQ2yaVcPTd5JdZXA1yqQoWkSms0JtJh0LpsZ
PdE5ahvwYahIUt3fV8MUCBY7untS66XxsdtTvx1spRDLX4RfSRd+Z1LMs6gpdtRF
jZir548U3Bo78gOD4SofwMXUufXod61DJ2UArA5h+RiqHxpJH1JSPX2pDrX7D8NY
JAhXRAP5253GBYwtMjA3C5IEbZ+860jOSQXoBOSM2BmS5aXdLo1S0XnVVe8L1LgY
/ctqEVVrrALVa9XJXWcDRFcxkmNH1u4nVOlgufyqFSkDTCVarIupZdtdAl4e2ovK
R1ghyOJSXt1Z3VYTbvsXWw2lguENE32BCQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:55 2023 by rpki-client on console-fra.rpki-client.org