Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/U4p88P3EPbi_84GJSqro-WYSPCM.roa
File: U4p88P3EPbi_84GJSqro-WYSPCM.roa (raw, json)
Hash identifier: htdfPSdSjG0/olBepbgDLVXiR62yBP3k5WKThumfqgU=
Subject key identifier: 53:8A:7C:F0:FD:C4:3D:B8:BF:F3:81:89:4A:AA:E8:F9:66:12:3C:23
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 05A88F59
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/U4p88P3EPbi_84GJSqro-WYSPCM.roa
Signing time: Thu 30 Jun 2022 19:23:02 +0000
ROA not before: Thu 30 Jun 2022 19:23:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199274
IP address blocks: 194.177.20.0/22 maxlen: 24
176.112.192.0/19 maxlen: 24
185.22.60.0/22 maxlen: 24
91.239.26.0/23 maxlen: 24
2a00:5a60::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94932825 (0x5a88f59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Jun 30 19:23:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=538a7cf0fdc43db8bff381894aaae8f966123c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:36:8c:d6:83:94:30:5e:2a:a1:87:ab:c4:
f7:2d:0b:3a:16:bf:e2:c6:9b:e9:31:8e:2c:13:99:
a5:2c:76:f2:29:f0:db:47:af:bc:59:a8:0a:da:20:
ca:d1:6a:b8:24:cd:13:1d:b7:71:52:0f:c2:0b:2f:
de:ec:45:99:3c:8c:12:93:d3:bc:21:0a:0c:47:a9:
d4:ce:f3:2b:07:6d:3b:83:f0:a8:5e:4e:50:20:f2:
3f:e7:96:2c:8a:a6:40:42:26:01:77:dd:e8:52:36:
28:e4:02:9e:9f:c0:43:f5:17:08:d6:f5:e7:a7:e6:
b9:2d:86:c1:5a:60:f3:2b:27:f0:77:5b:d1:bb:9e:
7e:79:03:43:67:4d:ae:f7:ba:36:eb:92:a5:ec:c9:
61:24:78:c0:0a:1f:c9:75:d4:77:57:ad:bf:20:8f:
4e:6a:1a:38:81:6d:a3:f0:8e:48:01:74:8a:b0:6c:
1e:27:08:03:fc:50:69:85:b3:8c:bd:ea:be:f1:2f:
32:8b:12:aa:da:9b:43:90:db:a5:d6:62:90:e4:a9:
b3:b9:94:c0:ad:23:a6:81:8e:e1:e9:a5:67:e6:29:
48:91:71:e4:68:77:9c:83:02:4e:7c:6c:57:26:77:
6e:4d:4f:0d:de:b8:f7:00:b0:3a:e5:cf:ae:ed:1a:
b9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8A:7C:F0:FD:C4:3D:B8:BF:F3:81:89:4A:AA:E8:F9:66:12:3C:23
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/U4p88P3EPbi_84GJSqro-WYSPCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.26.0/23
176.112.192.0/19
185.22.60.0/22
194.177.20.0/22
IPv6:
2a00:5a60::/32
Signature Algorithm: sha256WithRSAEncryption
c1:fa:aa:0b:71:83:27:d6:44:d1:8a:c7:c5:98:9a:02:8d:59:
2e:86:0d:44:86:29:40:8d:77:19:22:30:6c:a8:68:bd:99:34:
65:39:7a:f1:85:b0:86:c6:73:19:e6:ef:3c:66:ca:51:07:8a:
e4:10:a4:cb:53:85:7b:b4:0c:81:ac:f5:c5:58:9f:e4:1f:e2:
5d:c7:af:63:dc:33:de:72:a7:a7:4f:d3:e7:62:fc:f0:0c:39:
b8:87:c0:7c:bd:63:1f:84:02:b2:cf:c6:d7:d6:22:5e:6c:0c:
7c:34:87:b0:2d:5b:62:b9:8c:92:4c:2b:5f:3b:33:68:b3:4d:
89:04:a9:74:95:7d:3d:98:ac:9d:c4:e1:11:a1:5d:ed:46:02:
4c:81:4a:c9:28:ca:07:ab:48:33:67:ee:ea:9c:86:47:aa:6b:
a9:25:5e:65:98:e2:ed:fe:66:d7:00:5d:37:4d:29:99:05:2c:
20:37:13:f0:ff:3f:cb:c7:75:df:5f:fa:a2:9d:55:63:00:77:
a5:e3:b3:e5:43:69:f7:41:fe:61:57:f8:15:3a:df:79:58:eb:
64:25:fb:12:5a:17:f3:e8:d1:5e:9a:5d:66:0a:f2:c0:74:86:
96:30:76:85:5d:5d:00:23:a1:eb:7e:48:e1:ed:c0:78:cb:2a:
0b:0a:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-ams.rpki-client.org