Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/uBg--OcxD1LD7LzFKueo1MKDce8.roa
File: uBg--OcxD1LD7LzFKueo1MKDce8.roa (raw, json)
Hash identifier: FDRIECU+bLH8VX/c2E6i68zS/CGJKQoxkGQh7v8pS7E=
Subject key identifier: B8:18:3E:F8:E7:31:0F:52:C3:EC:BC:C5:2A:E7:A8:D4:C2:83:71:EF
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 018C32B574421146898C26918A3468F69DE4
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/uBg--OcxD1LD7LzFKueo1MKDce8.roa
Signing time: Mon 04 Dec 2023 02:43:21 +0000
ROA not before: Mon 04 Dec 2023 02:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62419
IP address blocks: 62.201.237.0/24 maxlen: 24
185.90.104.0/22 maxlen: 24
185.90.104.0/24 maxlen: 24
185.90.105.0/24 maxlen: 24
185.90.106.0/24 maxlen: 24
185.90.107.0/24 maxlen: 24
62.201.192.0/24 maxlen: 24
62.201.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:32:b5:74:42:11:46:89:8c:26:91:8a:34:68:f6:9d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Dec 4 02:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8183ef8e7310f52c3ecbcc52ae7a8d4c28371ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:2f:43:22:b3:55:30:99:bf:6c:7c:c5:22:
b0:1f:5a:7c:88:21:2f:fd:a8:a6:af:bf:81:1e:5f:
67:12:1b:d4:ac:34:0a:b0:25:ca:b8:b2:5f:90:bb:
ce:f3:06:9c:9e:e4:d0:1d:96:37:56:a7:a6:f0:ba:
c8:74:5b:f8:ca:36:b9:e9:1b:67:8c:19:d1:e2:13:
b1:ab:cc:3f:56:1f:0c:31:b2:3a:a8:17:87:bb:2b:
65:10:a0:44:31:0e:d4:21:15:aa:20:5c:09:21:a4:
70:00:f1:f6:15:57:b9:7a:a8:88:17:93:55:8e:5d:
de:c8:eb:d3:f7:00:81:c8:b2:25:b5:b5:b1:7b:17:
9e:19:48:07:2e:6e:df:fe:22:05:11:22:4b:88:a7:
3e:0a:36:36:fe:d5:58:d1:0a:49:f4:77:f5:39:b7:
a3:4f:8a:7e:69:d5:58:e3:a5:a0:eb:12:46:8b:fa:
e6:4c:2a:f2:88:80:ea:2a:9f:1d:50:49:88:d4:cc:
2b:12:ed:fe:af:a8:e1:59:d0:2b:ce:05:a4:20:fe:
06:cf:a8:cd:33:c6:00:77:d6:ef:b6:a5:16:02:a6:
ef:e1:10:82:2b:94:54:e7:14:0b:47:18:1b:b3:17:
e6:34:08:79:b2:fa:c5:34:61:16:00:c5:d8:75:90:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:18:3E:F8:E7:31:0F:52:C3:EC:BC:C5:2A:E7:A8:D4:C2:83:71:EF
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/uBg--OcxD1LD7LzFKueo1MKDce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.206.0/24
62.201.237.0/24
185.90.104.0/22
Signature Algorithm: sha256WithRSAEncryption
39:f5:0e:60:8b:b5:71:ea:22:a8:86:60:c0:7a:76:06:5d:57:
f9:da:78:d3:c5:fe:56:2c:ce:b2:70:71:59:0c:49:63:bf:10:
07:f9:96:a4:97:ea:0e:08:54:a7:4f:2c:9b:81:bc:f0:b9:e1:
1a:bd:4b:a4:58:1b:3f:84:db:9c:96:be:3d:31:ea:f2:83:2e:
68:07:81:d1:32:3e:30:e4:c6:3c:18:4e:07:d4:f8:6a:e3:f6:
09:85:b6:53:53:67:93:03:ff:c4:45:90:c3:2f:65:a0:57:eb:
84:c1:5a:84:0d:df:c6:19:13:23:3a:ec:b1:7c:33:d9:7e:bc:
15:96:8f:33:5f:55:5e:4c:f0:f4:3d:48:be:7d:d2:eb:46:06:
7e:8a:b1:b9:07:30:c6:b5:84:d7:95:de:25:d7:f4:33:51:3c:
55:eb:2a:30:4b:a4:63:9c:3e:c8:aa:54:0b:d3:68:57:c4:87:
64:8d:cc:93:3b:ab:7e:68:c8:3a:cc:24:c7:9e:fb:44:df:74:
0c:30:4e:61:4d:57:1f:bf:df:c7:c6:57:29:a0:bd:b8:8f:8f:
be:0e:eb:0e:45:60:11:f3:21:1d:4e:a6:13:71:a9:24:99:ec:
00:ea:2d:72:b2:5a:8b:f0:d5:f0:e9:4b:74:a3:36:cf:9d:15:
fb:d2:b4:7f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYwytXRCEUaJjCaRijRo9p3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjMxMjA0MDI0MzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODE4M2VmOGU3MzEwZjUyYzNlY2JjYzUyYWU3YThkNGMyODM3MWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRIvQyKzVTCZv2x8xSKwH1p8iCEv
/aimr7+BHl9nEhvUrDQKsCXKuLJfkLvO8wacnuTQHZY3Vqem8LrIdFv4yja56Rtn
jBnR4hOxq8w/Vh8MMbI6qBeHuytlEKBEMQ7UIRWqIFwJIaRwAPH2FVe5eqiIF5NV
jl3eyOvT9wCByLIltbWxexeeGUgHLm7f/iIFESJLiKc+CjY2/tVY0QpJ9Hf1Obej
T4p+adVY46Wg6xJGi/rmTCryiIDqKp8dUEmI1MwrEu3+r6jhWdArzgWkIP4Gz6jN
M8YAd9bvtqUWAqbv4RCCK5RU5xQLRxgbsxfmNAh5svrFNGEWAMXYdZBL/QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLgYPvjnMQ9Sw+y8xSrnqNTCg3HvMB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvdUJnLS1PY3hEMUxEN0x6Rkt1ZW8xTUtEY2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPsnAAwQA
PsnOAwQAPsntAwQCuVpoMA0GCSqGSIb3DQEBCwUAA4IBAQA59Q5gi7Vx6iKohmDA
enYGXVf52njTxf5WLM6ycHFZDEljvxAH+Zakl+oOCFSnTyybgbzwueEavUukWBs/
hNuclr49Merygy5oB4HRMj4w5MY8GE4H1Phq4/YJhbZTU2eTA//ERZDDL2WgV+uE
wVqEDd/GGRMjOuyxfDPZfrwVlo8zX1VeTPD0PUi+fdLrRgZ+irG5BzDGtYTXld4l
1/QzUTxV6yowS6RjnD7IqlQL02hXxIdkjcyTO6t+aMg6zCTHnvtE33QMME5hTVcf
v9/HxlcpoL24j4++DusORWAR8yEdTqYTcakkmewA6i1yslqL8NXw6Ut0ozbPnRX7
0rR/
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:07 2025 by rpki-client