Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/uObp-XeB84eeyKboQImAJZK4ZyE.roa
File: uObp-XeB84eeyKboQImAJZK4ZyE.roa (raw, json)
Hash identifier: kt424VIFvnDrsri4L1nPhNIyGAVvm6lu0JelVSMcrYs=
Subject key identifier: B8:E6:E9:F9:77:81:F3:87:9E:C8:A6:E8:40:89:80:25:92:B8:67:21
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 388938FB
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/uObp-XeB84eeyKboQImAJZK4ZyE.roa
Signing time: Wed 01 Jun 2022 13:10:20 +0000
ROA not before: Wed 01 Jun 2022 13:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 80.82.4.0/24 maxlen: 24
80.82.3.0/24 maxlen: 24
80.82.0.0/24 maxlen: 24
80.82.2.0/24 maxlen: 24
80.82.1.0/24 maxlen: 24
80.82.11.0/24 maxlen: 24
80.82.10.0/24 maxlen: 24
80.82.5.0/24 maxlen: 24
80.82.7.0/24 maxlen: 24
80.82.6.0/24 maxlen: 24
80.82.9.0/24 maxlen: 24
80.82.8.0/24 maxlen: 24
80.82.12.0/24 maxlen: 24
80.82.14.0/24 maxlen: 24
80.82.13.0/24 maxlen: 24
80.82.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948517115 (0x388938fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jun 1 13:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8e6e9f97781f3879ec8a6e84089802592b86721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:dd:49:17:cd:35:19:08:22:38:68:b9:fd:
bb:9c:b9:3c:22:cb:ce:cf:50:04:02:d3:85:ff:e2:
21:e7:2a:76:d7:14:cd:69:1c:50:f4:b1:14:01:72:
2e:e8:52:37:26:17:5c:ee:13:36:af:f3:3a:18:02:
98:79:1f:22:8b:44:33:40:9b:b9:ac:d6:dc:32:91:
cf:65:13:96:98:20:3a:9c:b3:cd:aa:ac:95:db:75:
d8:ff:10:0a:1b:f3:26:8b:39:8d:b5:cb:ab:f9:cc:
fc:76:23:e1:9c:9f:76:3e:ad:ef:df:f4:e3:d7:64:
ef:14:d1:67:28:b3:6b:4c:2e:41:2e:84:a4:7a:11:
92:da:7d:b6:f7:e0:ed:98:de:03:14:ac:b9:c1:9f:
d5:78:c5:f2:1a:05:c8:cb:41:ab:56:e8:8b:7b:47:
52:bd:10:62:d8:3f:fd:24:8f:45:33:9b:53:4d:10:
ed:01:1a:61:52:1e:e2:2b:e6:29:a3:e0:f8:ad:b7:
92:20:7d:8a:fb:37:45:dc:ad:c0:95:2a:6d:bc:22:
20:27:56:77:65:76:c1:24:38:56:34:35:ec:55:46:
39:01:0e:f2:a9:cf:65:9a:b9:79:3a:ba:55:22:c5:
12:54:49:f0:98:4b:ab:9e:39:e9:55:58:6f:e0:05:
51:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:E9:F9:77:81:F3:87:9E:C8:A6:E8:40:89:80:25:92:B8:67:21
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/uObp-XeB84eeyKboQImAJZK4ZyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.0.0/20
Signature Algorithm: sha256WithRSAEncryption
83:c1:28:8f:17:54:22:08:0e:5a:df:e2:16:bc:21:90:2e:f4:
be:d2:0a:bf:8b:fd:55:3c:42:8e:b3:d0:76:a3:35:7b:29:cb:
4c:86:b0:12:e3:fc:b8:47:7a:32:81:db:f0:98:c1:65:01:4f:
85:63:ef:e5:df:92:12:c1:0a:5d:7e:cb:10:85:e9:8f:22:54:
25:85:a9:1f:59:08:2a:66:8c:11:19:9a:82:e5:fa:39:4a:71:
fd:ed:7a:6b:c1:ca:ba:b1:37:1d:1a:77:39:20:ca:8b:97:b0:
11:bb:04:13:da:b6:cb:47:81:83:6f:e9:ab:5c:02:6b:ae:ee:
8d:10:64:87:29:10:18:b6:28:5a:74:9f:04:cb:4d:6b:61:bb:
b7:d5:c5:bc:fc:3b:a4:da:5c:22:65:04:7e:da:94:a0:38:7b:
3e:3f:b3:2f:af:f0:16:b0:9f:65:8b:20:87:ba:8a:ed:48:37:
fd:bd:a6:61:8c:01:3a:d1:d4:34:e5:40:c9:02:9b:94:7b:5d:
96:29:04:60:e7:7c:d5:ad:a7:bc:eb:21:b6:f8:17:35:0f:be:
8f:35:ed:f1:4d:b4:58:2f:14:b8:95:15:64:6b:b2:5b:77:3a:
09:93:c6:3a:be:da:69:f9:e6:33:e4:c6:0d:b8:3e:d4:1f:b8:
87:a5:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:32 2023 by rpki-client on console-fra.rpki-client.org