Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/UjsGHNomZnfgxSIxNSufL44PTso.roa
File: UjsGHNomZnfgxSIxNSufL44PTso.roa (raw, json)
Hash identifier: RIbVWo1/9wW7woNhqFdmThzvJBcTNv1z0AaiWCupazM=
Subject key identifier: 52:3B:06:1C:DA:26:66:77:E0:C5:22:31:35:2B:9F:2F:8E:0F:4E:CA
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 018AB16D6203C17A661DADEBFAEA47B99DAE
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/UjsGHNomZnfgxSIxNSufL44PTso.roa
Signing time: Wed 20 Sep 2023 07:10:50 +0000
ROA not before: Wed 20 Sep 2023 07:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8648
IP address blocks: 213.146.96.0/19 maxlen: 19
82.141.0.0/18 maxlen: 18
212.110.96.0/19 maxlen: 19
195.62.96.0/19 maxlen: 19
185.117.248.0/22 maxlen: 24
185.84.80.0/23 maxlen: 23
185.84.82.0/24 maxlen: 24
2a02:248::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:6d:62:03:c1:7a:66:1d:ad:eb:fa:ea:47:b9:9d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Sep 20 07:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=523b061cda266677e0c52231352b9f2f8e0f4eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:c8:11:d5:e9:d5:12:2e:5e:16:fb:4a:0e:
b4:1c:d7:65:75:c4:ac:c1:e4:74:9d:a0:8d:dd:ad:
23:90:32:fc:fa:11:38:3f:c2:ae:90:15:cd:2f:ac:
8b:f0:9f:f2:cb:c3:fe:f6:3a:a6:f1:55:20:f7:61:
d5:30:f4:9c:e8:ba:04:e1:d3:b6:f0:5b:01:49:22:
37:30:88:a9:84:88:44:79:b7:e7:7a:6f:62:57:b3:
70:ef:8d:1e:8d:cc:ea:42:69:b2:08:49:f7:c9:06:
2f:f4:4c:a0:81:29:b0:50:5e:9f:a8:9d:5e:5f:1e:
7d:df:0a:36:3f:01:ff:4f:ef:5f:8c:93:a5:cc:ce:
1d:19:d8:cc:61:d9:b4:7f:a6:16:19:38:84:01:77:
51:14:3e:52:00:62:3d:a6:f4:54:8f:3b:8b:7a:dc:
db:29:1f:f1:62:70:b4:11:cd:54:1c:fe:aa:0a:f5:
73:55:72:cd:5e:c0:3f:6a:76:d6:6d:06:be:4b:02:
7f:32:0e:eb:08:12:90:67:1b:1e:55:c1:5b:c1:bb:
9b:6e:c6:66:5e:e5:ad:f8:00:9c:17:7d:82:f3:54:
15:e8:56:db:c8:cb:5b:4b:3f:7a:cb:c5:8c:99:0f:
46:f7:80:da:9a:39:a7:01:f0:8f:a4:8f:e0:01:8b:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:06:1C:DA:26:66:77:E0:C5:22:31:35:2B:9F:2F:8E:0F:4E:CA
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/UjsGHNomZnfgxSIxNSufL44PTso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.141.0.0/18
185.84.80.0-185.84.82.255
185.117.248.0/22
195.62.96.0/19
212.110.96.0/19
213.146.96.0/19
IPv6:
2a02:248::/32
Signature Algorithm: sha256WithRSAEncryption
44:09:5e:cb:fc:62:f6:e9:a3:8a:1a:d3:c9:7e:e6:fd:03:8e:
d9:a9:6d:d0:09:87:1b:55:d4:b0:e0:b4:a1:4d:9b:3c:e6:82:
df:d9:f4:d8:b4:8c:61:c7:55:ea:6a:9e:46:ea:41:a4:8b:8c:
08:01:3d:ee:b5:09:97:e2:d5:da:1e:e3:5e:f6:7d:05:49:c9:
29:4a:5d:4a:a6:d2:86:1f:6b:cc:51:64:82:00:ec:42:d4:1e:
21:22:e7:16:02:d8:68:74:cd:b2:0f:1a:6c:30:e3:d7:8b:0a:
b2:ac:18:35:8c:39:0e:d5:bc:1c:ed:39:6b:f5:89:59:79:b1:
2c:1e:09:54:d6:14:c0:ef:82:55:bd:fb:f6:04:31:dd:a5:78:
1b:cf:10:5e:1d:e7:88:0f:1c:56:a5:e6:db:d2:98:71:64:63:
2f:73:08:3c:e7:98:8f:60:4f:78:64:82:dc:bd:99:47:af:c2:
4e:5e:70:28:bc:76:16:03:54:61:0e:30:73:79:65:22:1b:51:
96:43:82:a3:c0:3c:fc:7f:1c:fe:d9:23:b4:4d:a8:8b:37:eb:
11:bb:9f:62:08:3a:7e:10:0c:ed:e0:d9:6c:ce:3d:0c:6a:c4:
a6:d5:a6:ed:bd:7c:c3:f6:ab:bd:21:d7:44:d2:cc:9a:da:8d:
b5:60:07:ab
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAYqxbWIDwXpmHa3r+upHuZ2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1
ZmIwMmYwHhcNMjMwOTIwMDcxMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjNiMDYxY2RhMjY2Njc3ZTBjNTIyMzEzNTJiOWYyZjhlMGY0ZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnbIEdXp1RIuXhb7Sg60HNdldcSs
weR0naCN3a0jkDL8+hE4P8KukBXNL6yL8J/yy8P+9jqm8VUg92HVMPSc6LoE4dO2
8FsBSSI3MIiphIhEebfnem9iV7Nw740ejczqQmmyCEn3yQYv9EyggSmwUF6fqJ1e
Xx593wo2PwH/T+9fjJOlzM4dGdjMYdm0f6YWGTiEAXdRFD5SAGI9pvRUjzuLetzb
KR/xYnC0Ec1UHP6qCvVzVXLNXsA/anbWbQa+SwJ/Mg7rCBKQZxseVcFbwbubbsZm
XuWt+ACcF32C81QV6FbbyMtbSz96y8WMmQ9G94DamjmnAfCPpI/gAYuGNQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFFI7BhzaJmZ34MUiMTUrny+OD07KMB8GA1UdIwQY
MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt
NzQxYzFkOGRlYTJiLzEvVWpzR0hOb21abmZneFNJeE5TdWZMNDRQVHNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi
LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQGUo0AMAwD
BAS5VFADBAC5VFIDBAK5dfgDBAXDPmADBAXUbmADBAXVkmAwDQQCAAIwBwMFACoC
AkgwDQYJKoZIhvcNAQELBQADggEBAEQJXsv8Yvbpo4oa08l+5v0DjtmpbdAJhxtV
1LDgtKFNmzzmgt/Z9Ni0jGHHVepqnkbqQaSLjAgBPe61CZfi1doe4172fQVJySlK
XUqm0oYfa8xRZIIA7ELUHiEi5xYC2Gh0zbIPGmww49eLCrKsGDWMOQ7VvBztOWv1
iVl5sSweCVTWFMDvglW9+/YEMd2leBvPEF4d54gPHFal5tvSmHFkYy9zCDznmI9g
T3hkgty9mUevwk5ecCi8dhYDVGEOMHN5ZSIbUZZDgqPAPPx/HP7ZI7RNqIs36xG7
n2IIOn4QDO3g2WzOPQxqxKbVpu29fMP2q70h10TSzJrajbVgB6s=
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:53:05 2025 by rpki-client