Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/xUgX3Cgwwh-zemfi-Hl-bZ98ZjU.roa
File: xUgX3Cgwwh-zemfi-Hl-bZ98ZjU.roa (raw, json)
Hash identifier: r9mlR4MaaFisTgSGjr82fZuBEVCRhqW67ATQRQsBJnU=
Subject key identifier: C5:48:17:DC:28:30:C2:1F:B3:7A:67:E2:F8:79:7E:6D:9F:7C:66:35
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0183EF8D81FBCC1493996F95C176E2926302
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/xUgX3Cgwwh-zemfi-Hl-bZ98ZjU.roa
Signing time: Wed 19 Oct 2022 09:22:51 +0000
ROA not before: Wed 19 Oct 2022 09:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203496
IP address blocks: 85.208.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:8d:81:fb:cc:14:93:99:6f:95:c1:76:e2:92:63:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 19 09:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c54817dc2830c21fb37a67e2f8797e6d9f7c6635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:11:e1:7e:f1:85:6f:18:80:a6:fe:a3:45:
b8:ec:a5:9e:29:f2:3d:42:15:6a:51:2d:e9:27:ed:
55:5b:d8:3b:39:9d:2f:b1:a1:ee:24:7c:22:d4:35:
11:84:7f:c4:ac:4a:cd:af:cd:8d:5c:eb:3a:0b:28:
75:b1:8d:b4:bc:cf:b5:13:73:0f:3b:e4:7d:98:fb:
70:b1:94:6d:70:d7:b9:32:08:86:e6:cb:73:7e:a2:
7f:35:8d:e3:89:be:89:11:db:0a:99:69:c8:b5:c0:
43:87:ed:31:ee:e7:56:6f:4e:de:86:61:a5:c2:a3:
2d:c5:f0:5c:7b:e4:6a:ae:5a:58:de:47:46:43:e5:
8d:b4:c8:67:2b:25:d7:97:72:46:c3:d7:a6:c5:8f:
ec:35:14:a0:9d:da:63:a4:f4:e7:bb:42:7c:b7:40:
bb:04:bd:ac:41:5e:b7:a7:1f:a6:7a:c8:6c:bd:1b:
d9:a4:d0:9e:09:f4:22:96:42:1e:7e:9d:3a:a7:e2:
4c:aa:21:88:e7:8b:ae:3d:6f:78:be:a1:a9:77:41:
ef:7b:4d:e5:62:b0:2c:86:27:01:9e:1a:e1:e5:70:
e6:d8:b8:78:4a:ba:6f:54:1b:de:c0:df:a3:aa:ec:
e9:54:c2:e9:6d:ed:6d:06:b5:85:ed:ac:c8:f4:77:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:48:17:DC:28:30:C2:1F:B3:7A:67:E2:F8:79:7E:6D:9F:7C:66:35
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/xUgX3Cgwwh-zemfi-Hl-bZ98ZjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6e:f8:e8:cc:11:62:8a:0b:54:61:a3:d1:f4:58:91:55:8a:
18:a1:e9:d9:04:71:48:fa:75:b4:6f:33:9c:ce:ab:c7:62:0d:
65:93:b2:f2:60:68:d5:cd:5d:4b:f8:04:3a:15:b4:d9:26:cb:
99:bf:1d:18:6c:c9:9a:77:6c:7f:f1:e0:85:dd:26:41:f9:f6:
0d:a9:d7:09:6a:34:cd:7c:0d:fb:22:03:e0:84:d9:a3:06:71:
d2:22:6f:07:e9:2d:af:66:47:eb:a7:43:16:43:4d:c6:5c:0f:
cc:09:56:2a:84:87:f5:bc:d6:70:61:e2:d9:30:e3:cb:21:ec:
40:bc:36:3c:0e:29:7a:fd:9c:00:6c:2b:28:d1:04:93:6d:a3:
bc:8b:ee:cd:65:8b:d7:63:d1:8b:a2:cf:66:b3:7a:3a:11:a3:
e1:9d:93:41:f5:41:17:2e:a5:05:ee:b9:a7:60:aa:ee:52:36:
97:eb:69:52:16:28:53:ae:de:f0:9b:a9:1b:eb:b1:44:5a:86:
2e:f6:13:4a:24:a1:16:18:43:69:5c:62:40:a6:40:2a:48:cc:
8e:3a:f7:fa:68:51:f8:a7:b2:e3:3f:08:97:8b:40:fa:fd:43:
5f:6d:65:4d:95:fc:13:ef:b3:88:ba:cf:03:e6:3f:f1:5a:0c:
13:1b:5b:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPvjYH7zBSTmW+VwXbikmMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjIxMDE5MDkyMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTQ4MTdkYzI4MzBjMjFmYjM3YTY3ZTJmODc5N2U2ZDlmN2M2NjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOQR4X7xhW8YgKb+o0W47KWeKfI9
QhVqUS3pJ+1VW9g7OZ0vsaHuJHwi1DURhH/ErErNr82NXOs6Cyh1sY20vM+1E3MP
O+R9mPtwsZRtcNe5MgiG5stzfqJ/NY3jib6JEdsKmWnItcBDh+0x7udWb07ehmGl
wqMtxfBce+RqrlpY3kdGQ+WNtMhnKyXXl3JGw9emxY/sNRSgndpjpPTnu0J8t0C7
BL2sQV63px+meshsvRvZpNCeCfQilkIefp06p+JMqiGI54uuPW94vqGpd0Hve03l
YrAshicBnhrh5XDm2Lh4SrpvVBvewN+jquzpVMLpbe1tBrWF7azI9HdBEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMVIF9woMMIfs3pn4vh5fm2ffGY1MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEveFVnWDNDZ3d3aC16ZW1maS1IbC1iWjk4WmpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdBoMA0G
CSqGSIb3DQEBCwUAA4IBAQBsbvjozBFiigtUYaPR9FiRVYoYoenZBHFI+nW0bzOc
zqvHYg1lk7LyYGjVzV1L+AQ6FbTZJsuZvx0YbMmad2x/8eCF3SZB+fYNqdcJajTN
fA37IgPghNmjBnHSIm8H6S2vZkfrp0MWQ03GXA/MCVYqhIf1vNZwYeLZMOPLIexA
vDY8Dil6/ZwAbCso0QSTbaO8i+7NZYvXY9GLos9ms3o6EaPhnZNB9UEXLqUF7rmn
YKruUjaX62lSFihTrt7wm6kb67FEWoYu9hNKJKEWGENpXGJApkAqSMyOOvf6aFH4
p7LjPwiXi0D6/UNfbWVNlfwT77OIus8D5j/xWgwTG1tU
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:23 2023 by rpki-client on console-ams.rpki-client.org