Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/UMUuF2TACxG4dqKeDukWzsD9fpI.roa
File: UMUuF2TACxG4dqKeDukWzsD9fpI.roa (raw, json)
Hash identifier: U1itmZkzbD49WDCIOWodOPKulZm6gKqnVJkntK1XlA4=
Subject key identifier: 50:C5:2E:17:64:C0:0B:11:B8:76:A2:9E:0E:E9:16:CE:C0:FD:7E:92
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 03DB2DE2
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/UMUuF2TACxG4dqKeDukWzsD9fpI.roa
Signing time: Sat 01 Jan 2022 11:56:44 +0000
ROA not before: Sat 01 Jan 2022 11:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39043
IP address blocks: 91.211.68.0/22 maxlen: 22
195.66.156.0/23 maxlen: 23
195.66.156.0/24 maxlen: 24
195.66.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64695778 (0x3db2de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Jan 1 11:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50c52e1764c00b11b876a29e0ee916cec0fd7e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:f2:da:cc:b2:47:49:bc:75:76:a6:39:f0:
ec:af:04:eb:62:04:52:49:34:36:a6:ec:d7:25:53:
3f:c3:17:93:cd:69:43:c0:cc:fb:ca:4e:2b:45:27:
11:f8:01:2c:c3:38:ec:b0:ac:0a:a1:4c:e9:ef:ed:
8b:be:80:e8:10:9d:59:97:77:dd:25:35:1f:ba:96:
3a:96:1b:9f:3e:36:41:d1:04:0e:8f:cc:67:a5:29:
4c:14:17:26:38:87:d1:d6:1b:d5:22:38:27:0a:8e:
a1:be:26:3f:0c:a8:f3:59:73:d3:bd:b9:0e:f4:86:
78:ec:df:b2:73:26:35:37:6a:b5:15:c0:48:df:da:
e3:90:89:61:9d:1d:eb:e0:45:04:e5:a8:52:96:57:
f4:b8:4a:71:c4:ac:ae:e2:97:85:94:ce:30:64:43:
53:23:48:d4:ed:62:43:22:00:13:ce:ad:68:e4:a4:
0f:c2:7d:ae:4e:53:94:21:05:2a:83:e5:e2:bd:ad:
49:66:ef:d4:83:e5:7c:75:49:1a:c4:b0:c9:09:53:
fa:14:7b:c5:46:32:96:d7:63:7d:99:59:a3:34:3b:
20:fd:da:20:47:49:1e:1b:9a:cd:9f:85:92:cc:ff:
1b:e5:9c:3b:5b:f6:5e:c9:d6:1b:a2:53:ba:84:e9:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C5:2E:17:64:C0:0B:11:B8:76:A2:9E:0E:E9:16:CE:C0:FD:7E:92
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/UMUuF2TACxG4dqKeDukWzsD9fpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.68.0/22
195.66.156.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:d3:d0:4c:17:57:16:71:4c:12:41:09:b6:6b:d8:62:3b:9c:
dc:f7:85:4b:5a:b9:13:a2:ea:4a:4a:68:77:5e:14:2b:6d:d6:
95:f7:c3:05:93:19:b6:fd:8e:53:2a:e4:eb:f4:c5:a0:9e:f6:
8f:b5:6e:84:77:86:a1:1c:3f:ce:e5:35:04:91:4a:fa:6f:58:
d8:10:23:33:39:5e:a1:3d:3e:2e:71:c6:03:64:22:1e:ff:29:
f4:37:20:ec:ac:af:38:ef:c7:c6:76:d7:95:5a:97:34:09:11:
0d:da:93:f3:59:4b:e8:f0:c3:ae:4b:a7:76:da:4c:b9:91:80:
ab:a3:35:31:68:26:2a:87:34:66:07:15:8b:58:be:40:a9:4e:
ef:c5:12:0e:50:a9:d2:68:4f:c0:82:38:8f:ba:7c:72:25:f8:
3f:f8:0c:3a:83:db:3f:1f:a2:98:da:de:7e:41:60:10:a2:a6:
5f:c3:f7:7d:10:ee:05:24:1b:2b:14:3c:98:a6:f1:16:38:e1:
07:cb:26:b2:ae:0f:ba:64:1c:d5:51:c7:96:71:49:16:db:fb:
40:ff:3c:ec:9f:0a:3e:ef:44:d8:6e:dc:0d:de:4a:10:e0:00:
11:39:da:ae:3e:99:d6:21:bd:f3:bd:5e:e5:05:d6:37:93:49:
e7:1e:c6:f5
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA9st4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YTE3ZDI1NDc3NGM5N2E5YzY4NWE5ZWM1ZDI0ZjJmYzY5Njg5OTA4MB4XDTIyMDEw
MTExNTY0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBjNTJlMTc2NGMw
MGIxMWI4NzZhMjllMGVlOTE2Y2VjMGZkN2U5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMbb8trMskdJvHV2pjnw7K8E62IEUkk0Nqbs1yVTP8MXk81p
Q8DM+8pOK0UnEfgBLMM47LCsCqFM6e/ti76A6BCdWZd33SU1H7qWOpYbnz42QdEE
Do/MZ6UpTBQXJjiH0dYb1SI4JwqOob4mPwyo81lz0725DvSGeOzfsnMmNTdqtRXA
SN/a45CJYZ0d6+BFBOWoUpZX9LhKccSsruKXhZTOMGRDUyNI1O1iQyIAE86taOSk
D8J9rk5TlCEFKoPl4r2tSWbv1IPlfHVJGsSwyQlT+hR7xUYyltdjfZlZozQ7IP3a
IEdJHhuazZ+Fksz/G+WcO1v2XsnWG6JTuoTpKx0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRQxS4XZMALEbh2op4O6RbOwP1+kjAfBgNVHSMEGDAWgBQqF9JUd0yXqcaF
qexdJPL8aWiZCDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0toZlNWSGRNbDZuR2hhbnNYU1R5X0dsb21RZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjIvNjZhNDM5LWNmMzMtNDdjNS05MmFiLTgwYjUxMThhYmFmNi8x
L1VNVXVGMlRBQ3hHNGRxS2VEdWtXenNEOWZwSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIv
NjZhNDM5LWNmMzMtNDdjNS05MmFiLTgwYjUxMThhYmFmNi8xL0toZlNWSGRNbDZu
R2hhbnNYU1R5X0dsb21RZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvTRAMEAcNCnDANBgkqhkiG9w0B
AQsFAAOCAQEAj9PQTBdXFnFMEkEJtmvYYjuc3PeFS1q5E6LqSkpod14UK23WlffD
BZMZtv2OUyrk6/TFoJ72j7VuhHeGoRw/zuU1BJFK+m9Y2BAjMzleoT0+LnHGA2Qi
Hv8p9Dcg7KyvOO/HxnbXlVqXNAkRDdqT81lL6PDDrkundtpMuZGAq6M1MWgmKoc0
ZgcVi1i+QKlO78USDlCp0mhPwII4j7p8ciX4P/gMOoPbPx+imNrefkFgEKKmX8P3
fRDuBSQbKxQ8mKbxFjjhB8smsq4PumQc1VHHlnFJFtv7QP887J8KPu9E2G7cDd5K
EOAAETnarj6Z1iG9871e5QXWN5NJ5x7G9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org