Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/UqRxQLfeF4xe80UHPkAAgBvZY00.roa
File: UqRxQLfeF4xe80UHPkAAgBvZY00.roa (raw, json)
Hash identifier: QspE2iR2qLrpyf4fNI5iS7CEHl8cePvkbrb2auY+H+I=
Subject key identifier: 52:A4:71:40:B7:DE:17:8C:5E:F3:45:07:3E:40:00:80:1B:D9:63:4D
Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial: 0A8E6288
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/UqRxQLfeF4xe80UHPkAAgBvZY00.roa
Signing time: Sat 01 Jan 2022 06:53:07 +0000
ROA not before: Sat 01 Jan 2022 06:53:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197288
IP address blocks: 86.52.0.0/16 maxlen: 16
212.10.0.0/16 maxlen: 16
85.218.128.0/17 maxlen: 17
62.107.0.0/16 maxlen: 16
178.155.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177103496 (0xa8e6288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Validity
Not Before: Jan 1 06:53:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52a47140b7de178c5ef345073e4000801bd9634d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:13:1d:e6:02:f0:5a:d6:3b:84:17:14:b5:
b6:47:72:72:63:ae:76:3a:65:64:68:9e:c9:db:b6:
e1:8a:67:b6:3a:b2:8e:b0:04:a6:81:8d:fb:cb:72:
c8:3d:63:d5:c1:3c:11:e6:f8:87:68:f5:82:6a:27:
4d:5b:18:a0:d6:6d:cf:29:27:76:5f:3c:e9:a3:09:
1a:99:cd:72:b5:e5:55:dd:b5:67:4c:76:3e:63:d9:
6c:60:e4:bc:4c:49:47:2f:54:79:9a:b3:48:12:0e:
e9:d2:15:f5:f1:84:39:1c:bd:ca:c3:17:d6:ef:e8:
60:0b:ca:d8:c0:b4:e6:b2:9f:b6:d3:a6:c3:ec:ff:
37:98:ec:f6:00:d7:d5:ef:d0:c9:c4:ec:d2:3c:47:
bf:b7:b6:b3:06:c5:0a:5b:cb:b1:30:7e:8d:e7:78:
10:bd:68:6d:c7:3f:23:ad:57:3d:8b:57:49:1c:b9:
bf:44:65:f8:53:ea:a4:aa:74:fc:f9:e8:cd:6e:d4:
ef:ea:c8:d7:ae:e0:b2:1b:51:a7:a2:e0:da:2d:af:
fd:8c:ab:50:d8:2e:e2:6e:ae:3e:5e:a1:9a:bd:53:
d4:9c:98:1f:68:14:11:de:aa:fb:5f:d7:6d:e5:1d:
57:34:9d:57:39:8e:98:d2:8d:98:95:17:80:d9:dc:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A4:71:40:B7:DE:17:8C:5E:F3:45:07:3E:40:00:80:1B:D9:63:4D
X509v3 Authority Key Identifier:
keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/UqRxQLfeF4xe80UHPkAAgBvZY00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.107.0.0/16
85.218.128.0/17
86.52.0.0/16
178.155.128.0/17
212.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:d5:20:76:da:58:d7:f0:a2:e5:a0:81:65:41:02:16:17:08:
2b:6a:93:9d:8e:c6:db:58:67:07:61:c6:34:7f:5d:64:31:50:
f3:6d:8f:16:6f:32:18:06:62:67:02:e4:b3:e9:13:1e:b0:5d:
e0:08:21:17:61:9e:06:9f:ea:97:4b:bd:31:95:25:62:ed:2e:
5d:88:ac:ae:ed:1b:14:d6:8c:66:80:95:9c:a4:0a:bc:f5:85:
2f:59:0c:2a:77:d5:e8:2d:77:14:73:10:40:9d:ce:a6:51:ed:
bf:0d:ca:65:6e:d7:e1:d4:7f:2d:8c:56:99:34:76:52:b3:12:
2e:d0:71:74:dd:00:fc:c3:04:16:4d:e7:d1:b2:35:0e:48:18:
c7:fd:ca:ee:0c:32:cf:62:cc:e5:77:90:09:83:c8:9a:c8:37:
c9:50:7a:83:03:b9:2c:78:a3:13:bb:37:80:ed:2e:5a:25:67:
0d:3e:53:13:cb:b0:4f:d6:88:6d:82:87:6e:2d:e3:a1:9e:f0:
6d:ec:ae:30:5d:6e:43:34:aa:ac:9f:7f:15:9e:a4:80:64:36:
eb:35:6c:f1:f1:fd:54:c6:62:a7:94:21:f5:b0:e8:d5:91:f0:
28:74:ab:3a:cd:f1:e9:bd:93:88:70:83:3a:64:4a:a4:6f:48:
e9:ec:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:53 2024 by rpki-client on console-fra.rpki-client.org