Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/uMpFsm0JVff5YyVHOUQjEXeuhkI.roa
File: uMpFsm0JVff5YyVHOUQjEXeuhkI.roa (raw, json)
Hash identifier: R6HFWGpUuoXui+T7UZE4mVlaZQThpCLfNfM4zcta5OI=
Subject key identifier: B8:CA:45:B2:6D:09:55:F7:F9:63:25:47:39:44:23:11:77:AE:86:42
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 02483138
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/uMpFsm0JVff5YyVHOUQjEXeuhkI.roa
Signing time: Sat 01 Jan 2022 16:02:08 +0000
ROA not before: Sat 01 Jan 2022 16:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3561
IP address blocks: 109.166.40.0/21 maxlen: 21
109.166.48.0/21 maxlen: 21
151.248.72.0/21 maxlen: 21
151.248.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38285624 (0x2483138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 16:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8ca45b26d0955f7f96325473944231177ae8642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:67:21:c8:45:6b:ff:cc:83:e5:63:ca:df:
7c:27:ee:d9:73:0a:f4:39:0e:d8:0d:00:d0:04:29:
43:19:04:2e:e4:55:42:45:63:8c:d8:00:dd:60:3a:
52:27:1c:cf:8f:98:82:82:42:83:44:08:5d:4e:10:
8e:3d:4c:6d:be:e3:c1:30:dc:dd:51:34:24:65:3c:
09:62:78:f4:4b:1a:f7:63:ce:39:44:54:79:b6:7b:
55:16:da:9b:22:f4:f5:40:80:c4:9f:42:64:3c:54:
fa:6b:ad:3d:5d:a3:b4:fc:37:b8:4a:6c:21:b2:12:
2e:e6:35:5a:aa:9a:11:a7:7c:04:7b:ac:77:ee:80:
85:e7:a1:61:e9:77:91:9e:9e:47:36:f2:0a:a8:39:
87:b7:5c:d1:85:d5:31:27:b2:0f:0e:72:0e:24:c4:
e1:db:19:6e:7b:dd:0e:99:5c:14:4f:51:54:55:e1:
e5:84:8f:b5:b4:ab:ff:76:af:a2:aa:da:8b:09:b7:
4d:6e:73:8f:bc:73:57:0e:76:da:90:4f:e0:df:80:
c3:d1:fc:73:ee:2d:e4:5e:89:86:f5:98:1a:c0:6c:
2d:4b:18:1d:38:86:67:f7:64:ef:6d:4e:ba:ff:b6:
21:e8:ae:cf:0e:ae:7d:85:90:c6:2b:dc:6c:5c:3c:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:45:B2:6D:09:55:F7:F9:63:25:47:39:44:23:11:77:AE:86:42
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/uMpFsm0JVff5YyVHOUQjEXeuhkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.166.40.0-109.166.55.255
151.248.72.0-151.248.87.255
Signature Algorithm: sha256WithRSAEncryption
4b:25:56:84:2c:01:34:b2:0f:f8:76:60:07:62:2f:77:d7:1a:
55:f8:ce:51:a3:5c:43:b6:55:68:39:3a:88:77:40:58:e1:93:
7c:f5:27:1c:73:d8:99:d8:f4:58:11:7e:e3:29:9d:01:94:7b:
9b:8d:e6:90:66:fb:93:bd:a3:bc:10:b6:f2:09:17:28:bd:ba:
57:89:ee:3d:d1:0d:25:2f:86:8c:67:c7:de:10:10:3c:31:35:
f2:9d:c0:30:70:66:f5:ee:d1:6e:10:9c:d9:29:e1:23:f8:dd:
43:e2:1b:16:15:a2:3c:ff:55:d6:00:89:41:86:9a:55:08:e5:
9d:69:41:fa:56:d6:9e:99:69:cf:0a:85:c6:be:e9:80:e4:00:
ff:ba:31:8a:ba:c6:fa:ee:cc:3a:2d:98:5c:b5:0d:74:d1:c3:
d8:00:58:81:78:f2:45:4b:4c:05:4a:03:a5:56:7b:74:8e:7b:
34:95:b2:94:d9:7f:e2:ac:b2:67:87:8e:2b:68:74:29:0c:83:
94:18:0e:36:42:6c:57:4b:b4:68:a1:67:42:b8:58:29:58:db:
a6:5c:6c:17:c8:e6:a0:81:84:d1:ec:ff:9d:65:ec:ab:8d:d6:
c1:2c:0f:e0:2a:28:a3:ef:84:93:76:a0:38:37:57:61:c9:2c:
5b:4f:39:5f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEAkgxODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmYyYzJlN2JjMWRhNTRkOTE5Y2E1YjU5NDFkMzc4ODkyYjJjY2IyMB4XDTIyMDEw
MTE2MDIwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjhjYTQ1YjI2ZDA5
NTVmN2Y5NjMyNTQ3Mzk0NDIzMTE3N2FlODY0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANp3ZyHIRWv/zIPlY8rffCfu2XMK9DkO2A0A0AQpQxkELuRV
QkVjjNgA3WA6Uiccz4+YgoJCg0QIXU4Qjj1Mbb7jwTDc3VE0JGU8CWJ49Esa92PO
OURUebZ7VRbamyL09UCAxJ9CZDxU+mutPV2jtPw3uEpsIbISLuY1WqqaEad8BHus
d+6AheehYel3kZ6eRzbyCqg5h7dc0YXVMSeyDw5yDiTE4dsZbnvdDplcFE9RVFXh
5YSPtbSr/3avoqraiwm3TW5zj7xzVw522pBP4N+Aw9H8c+4t5F6JhvWYGsBsLUsY
HTiGZ/dk721Ouv+2Ieiuzw6ufYWQxivcbFw8sR0CAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBS4ykWybQlV9/ljJUc5RCMRd66GQjAfBgNVHSMEGDAWgBQi8sLnvB2lTZGc
pbWUHTeIkrLMsjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0l2TEM1N3dkcFUyUm5LVzFsQjAzaUpLeXpMSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvNjAyNTMwLTZkMjItNDZmMS04ZTA1LTAyZGVmNmU4NGM5MS8x
L3VNcEZzbTBKVmZmNVl5VkhPVVFqRVhldWhrSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
NjAyNTMwLTZkMjItNDZmMS04ZTA1LTAyZGVmNmU4NGM5MS8xL0l2TEM1N3dkcFUy
Um5LVzFsQjAzaUpLeXpMSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwIgQCAAEwHDAMAwQDbaYoAwQDbaYwMAwDBAOX+EgD
BAOX+FAwDQYJKoZIhvcNAQELBQADggEBAEslVoQsATSyD/h2YAdiL3fXGlX4zlGj
XEO2VWg5Ooh3QFjhk3z1Jxxz2JnY9FgRfuMpnQGUe5uN5pBm+5O9o7wQtvIJFyi9
uleJ7j3RDSUvhoxnx94QEDwxNfKdwDBwZvXu0W4QnNkp4SP43UPiGxYVojz/VdYA
iUGGmlUI5Z1pQfpW1p6Zac8Khca+6YDkAP+6MYq6xvruzDotmFy1DXTRw9gAWIF4
8kVLTAVKA6VWe3SOezSVspTZf+KssmeHjitodCkMg5QYDjZCbFdLtGihZ0K4WClY
26ZcbBfI5qCBhNHs/51l7KuN1sEsD+AqKKPvhJN2oDg3V2HJLFtPOV8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:21 2023 by rpki-client on console-fra.rpki-client.org