Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/UQS5MGVPPNL8FZadGmBOiE9Vycc.roa
File: UQS5MGVPPNL8FZadGmBOiE9Vycc.roa (raw, json)
Hash identifier: FSO4EBvYFwcY20tYQoUDTat+6OhaSKZE6bqZ2xtZAFc=
Subject key identifier: 51:04:B9:30:65:4F:3C:D2:FC:15:96:9D:1A:60:4E:88:4F:55:C9:C7
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 04614EB9
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/UQS5MGVPPNL8FZadGmBOiE9Vycc.roa
Signing time: Sat 01 Jan 2022 05:58:57 +0000
ROA not before: Sat 01 Jan 2022 05:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208015
IP address blocks: 45.92.112.0/22 maxlen: 22
2a0e:20c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73486009 (0x4614eb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Jan 1 05:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5104b930654f3cd2fc15969d1a604e884f55c9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:78:2a:d9:9b:28:b4:5c:3a:59:33:38:c0:
90:97:68:21:55:27:27:86:79:bd:2e:1e:ac:21:f9:
74:b5:28:2d:a3:3e:87:59:31:39:5c:60:4e:11:fd:
14:e6:94:cf:37:b2:08:5c:02:d5:ee:e4:83:c8:f2:
c7:ba:c3:d5:1a:41:72:66:3d:e0:ad:25:0c:6e:a8:
1f:57:39:19:45:d7:29:f1:3c:af:46:98:07:a2:65:
26:13:9f:5c:40:48:b8:3e:00:10:c2:d9:38:2e:88:
35:11:1d:eb:c2:0c:af:f2:54:da:8b:e3:91:d6:27:
b3:ec:b4:bb:64:e3:62:e7:62:cf:f7:f8:3a:f7:67:
4f:02:66:6b:c8:ee:58:5c:cf:aa:29:37:b8:6e:d0:
1c:e2:ae:52:d4:6d:3e:be:aa:24:97:1e:48:08:d1:
64:8f:2d:7d:cf:84:2f:ca:ca:6c:d0:e4:6f:f5:44:
41:02:c3:2e:1d:64:a1:28:6b:9f:35:ad:c0:a3:9a:
bb:a7:cd:91:39:c2:62:fd:b1:8b:15:d1:9c:67:c5:
61:c5:01:fc:f5:b2:59:65:de:0f:13:1d:ca:2e:84:
a8:bd:58:af:ee:8b:80:35:dd:74:47:67:73:d1:ad:
34:57:a4:15:2e:3a:ec:1d:f8:fb:57:d1:39:33:9e:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:B9:30:65:4F:3C:D2:FC:15:96:9D:1A:60:4E:88:4F:55:C9:C7
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/UQS5MGVPPNL8FZadGmBOiE9Vycc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.112.0/22
IPv6:
2a0e:20c0::/29
Signature Algorithm: sha256WithRSAEncryption
99:c6:b9:fa:1d:a8:b3:31:2c:f3:04:26:9c:5d:b8:c4:35:2e:
f5:bf:90:8b:57:e4:de:f5:39:97:24:c2:3f:66:7a:28:7d:46:
25:1f:52:2a:43:5c:38:e2:12:70:73:33:cd:42:e1:a5:7b:3d:
4c:5b:32:1b:8d:77:33:d4:db:f6:4c:64:b2:f2:3b:9b:b9:c6:
8b:0a:ff:d2:55:d0:70:bb:ca:29:7d:6c:10:90:da:78:5f:21:
ad:8d:5b:cf:57:7d:4a:03:e5:9a:34:8a:2b:9c:8c:db:61:c5:
c3:1f:fb:4b:2e:b1:ac:f9:bc:a6:73:07:38:97:7e:4a:75:98:
9f:04:ac:93:05:45:62:c8:b2:b2:50:11:b0:ab:b7:6e:fe:a1:
ae:06:ea:98:9b:81:90:eb:ab:a4:6a:58:56:79:5f:aa:a3:2b:
ef:eb:36:c0:14:b5:73:c6:67:9a:26:3a:a1:2b:a6:cc:81:1e:
07:09:8b:83:5a:08:38:64:35:d8:01:f9:f4:0c:2b:7d:14:a7:
e8:56:dc:4b:1e:8b:83:48:2c:53:81:43:0d:cd:2d:cf:60:63:
cf:67:1c:de:a4:bb:e0:f6:06:68:2c:35:54:7f:79:ae:af:62:
9b:40:7a:88:1c:58:cf:15:ce:cd:87:bb:9d:a7:b9:7f:69:b8:
0c:d0:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:44 2025 by rpki-client