Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/uOv08ykFBQ1TdKpMHIBsKQqqbrk.roa
File: uOv08ykFBQ1TdKpMHIBsKQqqbrk.roa (raw, json)
Hash identifier: HndKbM5lu01ePR2MrcXnuucbUHRZRAWtLU1tdvWkJvc=
Subject key identifier: B8:EB:F4:F3:29:05:05:0D:53:74:AA:4C:1C:80:6C:29:0A:AA:6E:B9
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 0AD0C0A9
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/uOv08ykFBQ1TdKpMHIBsKQqqbrk.roa
Signing time: Sat 01 Jan 2022 15:02:53 +0000
ROA not before: Sat 01 Jan 2022 15:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12813
IP address blocks: 212.11.224.0/24 maxlen: 24
212.11.224.0/19 maxlen: 19
212.11.226.0/24 maxlen: 24
212.11.225.0/24 maxlen: 24
212.11.227.0/24 maxlen: 24
2a00:1278::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181452969 (0xad0c0a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Jan 1 15:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8ebf4f32905050d5374aa4c1c806c290aaa6eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ff:00:31:ad:c2:94:16:2f:8a:1a:0b:77:3b:
e7:dd:50:18:fd:b7:e3:b2:b9:99:07:cb:bb:1f:2e:
d2:d6:f2:53:de:a7:8d:9a:ab:09:54:51:4c:57:ae:
a0:f9:e6:8b:fc:17:97:9b:17:66:fb:8f:3e:2f:95:
2b:68:ab:66:05:90:4a:bd:2c:20:38:62:fc:99:79:
4d:d3:7e:b6:27:e9:02:4a:e3:98:b6:9c:bd:33:58:
40:93:1a:e3:03:db:d8:b2:fb:ae:da:8d:d7:63:5a:
fc:bf:c3:d9:16:04:da:dc:92:34:a2:ae:be:5f:94:
a5:c7:e4:d1:10:a1:19:68:da:a5:cd:74:27:ac:54:
c2:81:ae:f6:c2:e3:80:5a:8e:10:b4:8c:66:28:34:
c3:2f:60:46:48:45:15:13:64:d3:b7:4f:9d:5c:2e:
6b:39:1d:62:2d:f0:dc:b3:70:ef:18:65:68:71:73:
9a:d7:eb:71:3f:46:60:56:16:b5:2c:e9:b0:b6:63:
74:1a:3d:93:01:9d:7d:0f:3c:c3:23:69:6a:cd:1b:
52:ce:60:77:62:b0:2a:c2:d2:d0:8b:91:51:51:ee:
e1:62:67:10:49:51:40:6b:47:57:c8:92:f5:b9:b6:
a0:52:17:06:b6:e8:10:df:84:3f:cd:32:43:40:1a:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:F4:F3:29:05:05:0D:53:74:AA:4C:1C:80:6C:29:0A:AA:6E:B9
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/uOv08ykFBQ1TdKpMHIBsKQqqbrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.224.0/19
IPv6:
2a00:1278::/32
Signature Algorithm: sha256WithRSAEncryption
11:bf:dc:a1:f0:5c:fa:77:a1:8c:7a:4c:33:87:13:0d:6b:86:
2c:90:cc:b7:90:78:a2:ff:a7:09:1b:65:be:03:1a:dc:60:b0:
a3:51:72:b9:52:08:a7:46:a1:27:81:23:31:7f:9c:fb:f9:31:
da:2c:b4:10:81:e0:fa:2d:f1:8c:07:a5:9b:29:25:22:c3:26:
1d:cc:5b:8f:23:f9:e7:bb:e5:c1:33:43:22:a7:b3:4c:45:ca:
e3:3e:65:d2:21:83:c5:74:17:e2:fd:0b:ce:6f:b8:c4:41:ae:
a9:2e:58:fa:4c:51:d2:27:98:7b:65:19:ed:ac:48:89:ec:e4:
66:a0:43:aa:97:23:1f:eb:71:30:24:a6:23:5e:37:59:3a:c6:
c5:b0:16:24:1c:6d:f8:93:1c:4d:2f:98:1d:0a:48:c0:54:aa:
6d:b8:e9:bd:72:f1:3f:6c:4e:c0:21:bd:a4:c1:7e:b2:03:6a:
31:37:4c:a2:87:40:84:1f:63:7f:72:7d:2b:25:ba:7c:b5:02:
3d:4a:14:9e:28:db:b4:60:c1:33:7e:e3:04:76:90:df:64:68:
24:a8:47:b2:6f:42:15:79:07:06:37:36:d7:a8:f1:f1:1e:b0:
74:73:a0:ac:d1:14:0a:8a:38:b5:be:42:3c:9d:d9:03:51:b1:
89:1f:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:15 2025 by rpki-client