Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/uvWfAxsKhzLpaw2xRTzY3ERaOZU.roa
File: uvWfAxsKhzLpaw2xRTzY3ERaOZU.roa (raw, json)
Hash identifier: 03He9BKipodSnlFm+gz7J/g3BRBAUUCvWLVRapjmyyA=
Subject key identifier: BA:F5:9F:03:1B:0A:87:32:E9:6B:0D:B1:45:3C:D8:DC:44:5A:39:95
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0399963D
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/uvWfAxsKhzLpaw2xRTzY3ERaOZU.roa
Signing time: Sat 01 Jan 2022 13:56:09 +0000
ROA not before: Sat 01 Jan 2022 13:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 213.21.226.0/24 maxlen: 24
193.68.91.0/24 maxlen: 24
193.68.92.0/24 maxlen: 24
193.68.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60397117 (0x399963d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 13:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baf59f031b0a8732e96b0db1453cd8dc445a3995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:1f:85:7f:28:d3:c6:95:b8:37:b2:9b:f7:
07:41:b3:fa:ca:56:27:a4:f1:57:08:ec:96:a7:7c:
71:8c:28:1b:d8:f1:4b:b7:b1:30:a1:2b:fb:b2:80:
d7:e5:13:96:fc:71:db:af:dd:69:79:1a:b4:bd:21:
b3:b1:7b:ac:06:b3:bd:e2:bc:f1:ef:c9:a8:c4:63:
85:6a:5c:55:ae:6a:88:41:4d:5c:64:8d:ab:ff:cb:
87:31:e2:f5:ae:94:57:f2:48:a2:73:c4:37:98:fc:
d2:f3:d7:92:80:a1:e6:8e:ea:b2:9f:d4:5b:2f:d3:
53:5e:62:11:6a:31:e9:17:50:b5:4f:25:13:af:46:
f1:ce:fc:d5:81:03:27:39:08:f1:cb:c6:d8:aa:a4:
66:ec:49:3a:2b:01:53:4a:dc:4d:8a:d2:57:83:2e:
57:11:57:b7:9b:1e:fa:1d:8a:3f:69:ef:78:ef:ad:
01:78:3b:fa:f8:46:15:fb:00:29:92:87:88:11:3b:
6f:6f:45:93:37:91:55:85:6c:75:e7:3a:c3:db:da:
f8:3c:b7:c2:ab:96:74:20:ea:56:46:d5:a7:a9:45:
5d:03:32:0c:2b:78:67:cf:eb:d6:34:63:a4:92:9b:
f9:6a:74:25:8c:7b:1f:03:81:88:57:b9:b4:70:da:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F5:9F:03:1B:0A:87:32:E9:6B:0D:B1:45:3C:D8:DC:44:5A:39:95
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/uvWfAxsKhzLpaw2xRTzY3ERaOZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.91.0-193.68.92.255
193.68.95.0/24
213.21.226.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e0:04:55:fb:3b:f5:ce:a3:0f:b7:f2:2e:d5:e5:76:e7:52:
f2:d0:e8:8b:bb:d7:17:81:be:07:86:00:26:3e:0e:25:af:8e:
f9:42:44:52:e7:8b:78:0d:f5:34:1f:71:f8:60:25:76:33:8b:
e7:4c:a1:06:b7:6c:89:01:0d:1b:9b:2e:57:03:17:48:98:e2:
b5:7f:d6:f1:26:f2:c6:b6:46:6d:a5:49:a9:09:28:72:64:73:
47:0b:3d:be:d8:5c:97:a4:e1:56:01:9c:f4:1c:b3:3b:77:03:
7b:3e:d1:b6:fa:f8:0c:09:a8:a2:97:dd:7a:68:ae:30:c7:2e:
38:d2:10:bc:d8:9e:f5:94:9d:50:e3:6c:d4:1c:84:57:46:2c:
9b:8c:78:02:4d:43:f2:d6:0c:02:9a:61:ef:7e:fa:50:53:2d:
05:26:19:32:01:a9:33:38:5b:b1:e7:67:d1:7c:9e:ee:70:a1:
55:2a:e0:de:a6:1a:be:75:5d:f6:97:be:1c:86:05:a7:f4:05:
78:97:28:f0:be:e3:50:85:02:db:3c:2b:cd:12:df:39:51:a4:
64:70:67:f8:4c:c2:3e:22:4d:99:79:4c:c1:f3:6b:f8:64:f9:
e3:90:e8:a7:2c:f6:b9:61:25:35:e3:11:28:41:0f:56:e0:f2:
d5:06:35:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEA5mWPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
Y2ZkZmU2ZGNhOGFjN2JmYTFhOTQ1MGVmOTlmZDMxNWVkMDJhY2Q5MB4XDTIyMDEw
MTEzNTYwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmFmNTlmMDMxYjBh
ODczMmU5NmIwZGIxNDUzY2Q4ZGM0NDVhMzk5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVJH4V/KNPGlbg3spv3B0Gz+spWJ6TxVwjslqd8cYwoG9jx
S7exMKEr+7KA1+UTlvxx26/daXkatL0hs7F7rAazveK88e/JqMRjhWpcVa5qiEFN
XGSNq//LhzHi9a6UV/JIonPEN5j80vPXkoCh5o7qsp/UWy/TU15iEWox6RdQtU8l
E69G8c781YEDJzkI8cvG2KqkZuxJOisBU0rcTYrSV4MuVxFXt5se+h2KP2nveO+t
AXg7+vhGFfsAKZKHiBE7b29FkzeRVYVsdec6w9va+Dy3wquWdCDqVkbVp6lFXQMy
DCt4Z8/r1jRjpJKb+Wp0JYx7HwOBiFe5tHDaznsCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBS69Z8DGwqHMulrDbFFPNjcRFo5lTAfBgNVHSMEGDAWgBS8/f5tyorHv6Gp
RQ75n9MV7QKs2TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZQMy1iY3FLeDctaHFVVU8tWl9URmUwQ3JOay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvYzlkZTEzLTViNzQtNDEzZC1iMmZiLTFhZjI0NjVhOGVlYy8x
L3V2V2ZBeHNLaHpMcGF3MnhSVHpZM0VSYU9aVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
YzlkZTEzLTViNzQtNDEzZC1iMmZiLTFhZjI0NjVhOGVlYy8xL3ZQMy1iY3FLeDct
aHFVVU8tWl9URmUwQ3JOay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQAwURbAwQAwURcAwQAwURfAwQA
1RXiMA0GCSqGSIb3DQEBCwUAA4IBAQBl4ARV+zv1zqMPt/Iu1eV251Ly0OiLu9cX
gb4HhgAmPg4lr475QkRS54t4DfU0H3H4YCV2M4vnTKEGt2yJAQ0bmy5XAxdImOK1
f9bxJvLGtkZtpUmpCShyZHNHCz2+2FyXpOFWAZz0HLM7dwN7PtG2+vgMCaiil916
aK4wxy440hC82J71lJ1Q42zUHIRXRiybjHgCTUPy1gwCmmHvfvpQUy0FJhkyAakz
OFux52fRfJ7ucKFVKuDephq+dV32l74chgWn9AV4lyjwvuNQhQLbPCvNEt85UaRk
cGf4TMI+Ik2ZeUzB82v4ZPnjkOinLPa5YSU14xEoQQ9W4PLVBjWQ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:20 2023 by rpki-client on console-fra.rpki-client.org