Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/D-UC0hC_PlrcViWSESxGtjoQcTA.roa
File: D-UC0hC_PlrcViWSESxGtjoQcTA.roa (raw, json)
Hash identifier: lifzsK20TQ93zYTcK/lMnCUOZbtAweQCeMMGILmBxk0=
Subject key identifier: 0F:E5:02:D2:10:BF:3E:5A:DC:56:25:92:11:2C:46:B6:3A:10:71:30
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 05C20C71
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/D-UC0hC_PlrcViWSESxGtjoQcTA.roa
Signing time: Sat 01 Jan 2022 12:00:35 +0000
ROA not before: Sat 01 Jan 2022 12:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62382
IP address blocks: 185.37.191.0/24 maxlen: 24
185.37.188.0/22 maxlen: 22
185.37.189.0/24 maxlen: 24
185.37.188.0/24 maxlen: 24
80.72.219.0/24 maxlen: 24
80.72.218.0/24 maxlen: 24
80.72.217.0/24 maxlen: 24
80.72.216.0/21 maxlen: 21
80.72.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96603249 (0x5c20c71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: Jan 1 12:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fe502d210bf3e5adc562592112c46b63a107130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:26:60:ea:23:57:50:96:1e:99:97:27:e0:
76:e8:e6:20:9e:e8:d8:66:91:17:28:83:a7:fd:f4:
3d:9f:38:6d:ea:98:56:a4:76:04:d9:55:b1:20:2a:
fe:6b:b3:8a:67:10:80:8f:83:7f:8b:99:90:88:90:
ff:2b:b0:35:1d:d2:6d:47:5a:2f:9a:56:c5:c9:cc:
cf:a1:4e:96:85:1b:6f:50:f9:d7:24:c4:d0:46:c7:
5e:6f:32:a0:e6:3d:f3:fe:60:e8:31:1b:f5:85:b6:
e7:ce:87:d9:3f:fd:c3:0d:61:45:fc:51:b5:d9:0f:
b9:8a:b7:a3:65:d3:4b:b6:03:49:a3:1c:51:f7:4a:
b5:a9:55:4d:ed:7e:ce:a4:04:18:dc:9c:a1:ed:bd:
74:3d:b7:8f:ae:14:c1:9e:10:2c:4a:60:0f:f8:be:
73:a6:c3:22:33:53:ed:92:b6:3b:12:e2:e6:1b:25:
24:6a:24:b0:10:14:fd:78:88:53:4f:38:02:e5:37:
1c:c1:3b:e7:da:94:14:a3:60:2a:32:3c:91:cf:a3:
c4:51:06:d0:cf:bf:6e:81:96:16:89:d5:d2:6d:97:
ac:4a:b2:be:61:4b:14:1c:34:e6:64:61:da:77:4a:
e5:c7:84:04:0a:e5:5d:34:cc:d1:2c:80:dc:9c:7d:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E5:02:D2:10:BF:3E:5A:DC:56:25:92:11:2C:46:B6:3A:10:71:30
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/D-UC0hC_PlrcViWSESxGtjoQcTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.216.0/21
185.37.188.0/22
Signature Algorithm: sha256WithRSAEncryption
98:07:af:71:f4:de:5c:a5:61:c5:ab:6a:e5:19:5f:ea:bc:bc:
ce:65:77:34:6e:13:27:24:6f:27:b4:cf:ae:0a:e7:9e:15:59:
e8:fb:4a:8a:e8:41:d1:10:f6:bc:81:56:a5:5e:3d:90:8e:40:
c3:ab:a3:f7:e5:bd:a1:da:9c:d5:a8:72:17:02:e0:28:bb:d3:
46:d8:ee:93:42:f2:ce:47:57:dd:77:bb:85:13:32:48:15:20:
be:0c:6b:95:65:81:1b:33:1e:de:82:54:b7:23:a6:19:4e:4d:
c0:ba:cf:48:98:0d:12:5d:32:9c:d6:2b:0d:8d:7a:04:63:11:
64:77:5e:48:80:3e:01:29:9e:70:0a:a1:51:17:83:cc:db:31:
76:d4:c7:46:b1:4e:8b:ac:d8:ee:84:58:44:c5:c2:5d:42:0e:
79:c3:4c:36:10:6a:48:5a:2c:1a:79:7e:9c:dd:25:2b:c9:d5:
0e:1c:cb:40:a5:13:20:0a:68:ff:5f:b6:f6:46:97:49:36:01:
1d:be:77:40:c4:e2:f0:2f:f1:aa:de:b6:8d:9e:2e:2a:31:22:
a9:e3:61:65:86:9b:18:28:6a:39:3c:3a:6a:9f:a4:db:5c:81:
c4:18:60:10:bc:33:cb:ea:1c:57:75:02:bd:c8:43:a0:03:17:
ee:34:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:47:23 2025 by rpki-client