Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/ukMPwW9EUjJtSabPv3tNV8DVlYM.roa
File: ukMPwW9EUjJtSabPv3tNV8DVlYM.roa (raw, json)
Hash identifier: 3um8mBdg5hB0Lyhs+dlpfrV8LSTxYDvYgmKlLAxEbD0=
Subject key identifier: BA:43:0F:C1:6F:44:52:32:6D:49:A6:CF:BF:7B:4D:57:C0:D5:95:83
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 01857315BC279907E67868DF8707243CE714
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/ukMPwW9EUjJtSabPv3tNV8DVlYM.roa
Signing time: Mon 02 Jan 2023 15:24:42 +0000
ROA not before: Mon 02 Jan 2023 15:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 91.197.55.0/24 maxlen: 24
2a06:8ac0::/45 maxlen: 45
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:bc:27:99:07:e6:78:68:df:87:07:24:3c:e7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Jan 2 15:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba430fc16f4452326d49a6cfbf7b4d57c0d59583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:03:5a:7f:4b:5f:db:67:fb:09:45:aa:0f:
ef:07:9b:de:8e:bb:25:5d:68:8d:3e:cc:62:21:b2:
03:26:b1:f2:e3:1f:03:4c:28:65:ca:ab:d5:a7:0b:
2a:fc:6c:4f:f3:d7:a8:15:d9:45:19:25:9d:ce:32:
ef:6c:ca:c0:43:53:c9:23:a9:f5:4b:a9:47:bb:77:
3c:e7:44:2f:fe:f3:89:09:7f:73:7c:a4:40:6a:f6:
27:21:4d:e0:09:d9:ec:8b:e3:e4:72:8e:c0:23:c7:
1d:2c:fe:c7:e1:83:a8:24:5b:33:fb:23:e4:cd:79:
0a:45:83:83:3d:a6:56:74:17:17:1a:4f:09:40:95:
51:35:51:49:c5:47:db:8f:0c:e1:63:3e:b5:8d:3f:
f3:d3:2c:22:3d:27:d4:41:8f:48:68:fc:d6:19:8b:
92:86:46:9d:dc:b8:35:a3:01:04:23:c0:34:ae:d6:
d4:75:77:d8:e2:cd:28:3e:0e:d8:55:5d:92:cd:63:
a9:fa:19:29:e9:b7:98:49:94:07:cc:94:20:35:0f:
c7:0e:3b:86:d2:3b:f2:52:b6:6a:8a:d6:7f:1c:05:
1d:b3:db:84:33:36:84:3c:12:72:a7:cd:01:7d:43:
18:ad:ed:8b:78:72:9d:d3:af:e0:8a:9c:20:32:7d:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:0F:C1:6F:44:52:32:6D:49:A6:CF:BF:7B:4D:57:C0:D5:95:83
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/ukMPwW9EUjJtSabPv3tNV8DVlYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.55.0/24
IPv6:
2a06:8ac0::/45
Signature Algorithm: sha256WithRSAEncryption
78:8e:eb:2e:67:cb:d3:24:b6:0a:15:47:f0:18:27:66:a9:c8:
0e:0a:b7:39:e4:54:ae:56:bc:52:8a:ae:52:bf:4b:ff:68:67:
71:6a:bc:ca:cf:59:25:6f:a6:6f:1b:6a:b5:df:b6:8a:b5:fc:
d2:03:40:43:e7:c3:d1:2a:ad:cb:d4:1b:ed:b9:28:e9:1a:db:
00:53:aa:7f:b6:62:32:5d:ef:58:a3:5b:6e:06:cb:53:28:06:
f4:e9:8f:c4:ba:38:9e:04:0d:5b:f6:b2:ad:3d:14:65:0b:b3:
80:5b:f2:b6:07:8b:51:d2:cb:3d:ac:13:40:9f:e9:0c:a9:b8:
c4:0b:ff:61:43:88:83:6c:26:15:20:cd:5e:59:11:1f:b2:60:
fe:95:8e:9f:c9:f1:9b:01:e6:ba:84:ef:8f:3c:ec:ec:62:c0:
ca:60:d8:98:e3:4e:f5:30:07:6b:af:6b:fd:e3:ce:e3:6c:ee:
52:07:ff:47:db:a2:2e:c1:88:9b:4a:6e:7a:f3:f0:86:ae:19:
67:23:9d:9e:35:3f:39:38:2f:96:e5:fb:6a:c5:5e:03:ed:8f:
3d:f2:91:61:1a:58:58:e6:6e:7a:ea:9d:91:ed:f0:e1:74:1a:
38:24:c8:f4:ed:fa:7c:ad:68:20:e6:36:47:5b:5f:91:b2:5a:
b2:bb:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:02 2025 by rpki-client