Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/uWKK4OB3xT13t7b_pKjgmbgPEk0.roa
File: uWKK4OB3xT13t7b_pKjgmbgPEk0.roa (raw, json)
Hash identifier: casYhQ6Q81yGhdZqy/f/HtSB+eHVz6t8FfidopNpzHo=
Subject key identifier: B9:62:8A:E0:E0:77:C5:3D:77:B7:B6:FF:A4:A8:E0:99:B8:0F:12:4D
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 0181ECF3CF273206E1091ED8CAE6CEB9FB10
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/uWKK4OB3xT13t7b_pKjgmbgPEk0.roa
Signing time: Mon 11 Jul 2022 11:10:09 +0000
ROA not before: Mon 11 Jul 2022 11:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50889
IP address blocks: 185.136.71.0/24 maxlen: 24
185.136.69.0/24 maxlen: 24
77.111.250.0/24 maxlen: 24
77.111.248.0/24 maxlen: 24
77.111.249.0/24 maxlen: 24
80.84.163.0/24 maxlen: 24
80.84.160.0/24 maxlen: 24
80.84.161.0/24 maxlen: 24
80.84.162.0/24 maxlen: 24
80.84.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ec:f3:cf:27:32:06:e1:09:1e:d8:ca:e6:ce:b9:fb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Jul 11 11:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9628ae0e077c53d77b7b6ffa4a8e099b80f124d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:ba:5e:9c:03:79:b3:a4:30:66:b0:7f:aa:
e0:b3:de:16:02:cf:94:0a:77:bd:18:55:46:00:88:
a7:d9:12:8b:48:c3:63:49:28:3c:7b:08:ed:48:c1:
8e:64:2e:fb:15:d6:7e:28:f8:f0:f9:92:a7:09:f2:
3a:26:05:26:8d:a4:9a:53:62:e7:b0:73:9e:e8:d6:
dc:30:62:bf:cd:94:7c:f0:84:17:c7:44:ed:0c:76:
58:f3:02:df:83:7b:01:50:36:45:4a:bf:de:a1:55:
6b:d9:c7:3a:93:ae:80:9d:b0:6c:dd:45:36:4d:c8:
c5:86:50:c7:1f:f4:8a:d0:e5:d1:66:d9:49:ea:f6:
e4:20:ca:ab:11:7a:49:c6:62:38:a1:74:af:6e:11:
dd:2b:de:73:ad:7f:97:23:d2:f6:7b:2f:4c:cb:d9:
bb:24:9d:bc:41:6c:db:81:23:a9:31:68:ff:8d:d6:
72:30:90:d9:cd:8b:77:c0:7f:a5:a0:5c:ae:0a:15:
9d:84:80:44:2b:06:e6:f9:e9:f6:82:1b:d6:87:ef:
df:cc:bc:08:04:0f:bf:f1:d3:9f:d1:34:29:70:5d:
5f:a1:62:36:f1:d1:ba:e5:8f:25:a3:7a:f3:5a:bf:
27:0e:63:02:16:6a:30:c5:73:fc:f9:a3:96:c6:42:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:8A:E0:E0:77:C5:3D:77:B7:B6:FF:A4:A8:E0:99:B8:0F:12:4D
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/uWKK4OB3xT13t7b_pKjgmbgPEk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.248.0-77.111.250.255
80.84.160.0/22
80.84.167.0/24
185.136.69.0/24
185.136.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:45:78:e4:e8:9e:1a:c2:28:c7:ff:b7:c1:fa:f7:d7:02:5e:
0d:77:7f:f4:27:29:5e:e1:57:58:a2:36:d0:fe:d6:18:68:83:
a4:f4:06:54:95:d5:3e:1a:7c:7f:0b:71:c6:05:95:3c:b1:b3:
be:a9:ac:11:ab:cb:30:13:6e:43:e7:f8:27:4f:1b:f4:32:f5:
64:93:d6:f2:57:b0:14:ec:a8:91:3f:2f:fd:90:15:ec:c3:a4:
60:84:e9:ef:32:1c:6f:21:82:cd:5e:f9:2d:74:55:72:61:62:
82:16:29:f1:18:c6:9b:6b:b4:ae:c9:a5:4d:63:ce:55:3c:c2:
dd:b3:b0:99:6d:8e:13:4a:e1:2a:64:3c:45:47:69:28:65:12:
04:2a:7b:23:87:71:ec:e7:5f:bc:b1:42:38:03:a0:eb:58:42:
9e:ab:42:c5:32:e5:f1:91:79:a2:05:84:24:bb:d4:ae:63:69:
55:27:24:f9:8c:49:bb:00:f3:41:8c:8b:e6:4a:81:74:24:aa:
9d:ad:27:b0:7d:a3:7a:d4:2c:26:29:36:ce:ee:78:64:17:65:
c9:72:0c:61:52:c5:a1:2d:37:25:eb:e2:26:79:34:05:aa:9d:
6b:02:e0:9a:d6:00:3d:62:a5:2e:56:a0:55:8a:e3:0d:b8:48:
00:c1:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:55 2024 by rpki-client on console-ams.rpki-client.org