Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/uIyJYy1TsNoznXoc4B-cTeOJvh8.roa
File: uIyJYy1TsNoznXoc4B-cTeOJvh8.roa (raw, json)
Hash identifier: vxS5xH5wLbv+P/R4R9BLL4XtblCB/sciKin32RauJgw=
Subject key identifier: B8:8C:89:63:2D:53:B0:DA:33:9D:7A:1C:E0:1F:9C:4D:E3:89:BE:1F
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 01856C135BECE098F048332460003F4B7425
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/uIyJYy1TsNoznXoc4B-cTeOJvh8.roa
Signing time: Sun 01 Jan 2023 06:44:46 +0000
ROA not before: Sun 01 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39122
IP address blocks: 185.17.238.0/23 maxlen: 23
2a03:dd41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:5b:ec:e0:98:f0:48:33:24:60:00:3f:4b:74:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Jan 1 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b88c89632d53b0da339d7a1ce01f9c4de389be1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:af:a5:67:82:cb:35:28:ac:1c:6e:93:65:
88:2b:ac:28:ba:ec:f3:79:d6:7d:97:de:8e:b0:ef:
13:92:3d:1c:32:b5:12:e3:6b:ef:5c:5f:b1:64:34:
83:41:c4:63:7b:5a:40:1d:d1:c8:c4:24:04:61:5a:
3c:71:ae:ee:61:5a:90:ad:2c:b6:83:98:c5:17:ce:
7d:45:44:d8:50:10:bb:d7:70:43:48:69:3d:5a:26:
8a:e4:df:4d:0f:d4:c8:22:21:43:8e:4c:43:56:ab:
dc:e8:d7:13:57:23:03:c5:b7:b7:76:b7:96:7b:75:
fe:e6:d0:90:d2:b5:98:52:59:c1:0b:ee:8e:38:3a:
c7:4c:ef:70:8e:f6:2b:d4:d0:f9:cb:a4:c6:db:af:
d2:01:82:a3:57:ba:5c:d5:d6:27:1c:ea:c1:eb:32:
74:8e:c0:d2:b5:e7:20:3c:43:65:21:f7:64:a8:6d:
bb:cb:31:7e:5c:13:6b:11:e0:a9:c2:8d:36:e2:84:
35:1c:4a:7b:39:8f:1e:c3:f1:52:36:7f:ca:66:a3:
f8:87:fb:92:6e:39:97:cd:f8:e4:b0:1c:d7:03:93:
32:08:91:ea:64:35:ec:61:61:d3:02:dc:b1:03:ad:
b0:0c:7c:de:db:30:76:3a:6e:43:c8:d2:f7:04:d7:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8C:89:63:2D:53:B0:DA:33:9D:7A:1C:E0:1F:9C:4D:E3:89:BE:1F
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/uIyJYy1TsNoznXoc4B-cTeOJvh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.238.0/23
IPv6:
2a03:dd41::/32
Signature Algorithm: sha256WithRSAEncryption
91:46:73:ec:a1:fa:35:fe:d2:16:5e:21:c7:48:30:ec:dc:9f:
d6:89:ae:df:0a:da:5a:4f:6e:28:b2:c8:b4:d7:f8:a3:3e:5c:
24:ac:6e:4e:67:6f:a5:f0:4d:df:58:29:07:35:56:eb:25:5d:
ce:ea:4f:c8:58:27:9b:92:36:79:c1:f5:9f:b3:fc:d5:1f:95:
9f:69:60:3d:73:6d:2c:2f:22:c3:d2:ed:59:33:40:d0:01:d1:
68:f8:71:4a:24:ec:8e:f0:08:9a:d1:6b:d5:95:96:fa:d3:7b:
b9:b0:c3:fb:a1:4e:84:b0:09:d2:40:85:a9:e2:48:ee:5d:19:
78:c9:4d:ba:7d:93:dc:0e:ea:1b:c1:96:4c:a5:3c:7b:86:86:
c1:bb:c2:c9:ff:92:43:6f:88:f8:ab:ea:0a:b1:69:76:81:da:
ea:60:6a:47:8a:91:78:18:bd:d4:71:ef:c3:3c:db:e1:83:e4:
2a:79:e3:09:13:0a:23:35:23:40:f4:17:11:5a:ad:f9:b5:c9:
b1:4f:d9:a9:8d:24:8d:e3:3e:81:52:6c:4b:54:0f:69:ee:d0:
a5:a7:26:a2:cb:d5:08:8d:27:16:2b:2b:3e:bb:03:0c:9d:46:
0a:a5:89:93:1c:2a:a4:dc:8e:88:95:68:b6:5a:a8:df:84:2b:
c2:20:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:08 2025 by rpki-client