Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/UckmdcWnBqNlPhqGFuIe_70-0vA.roa
File: UckmdcWnBqNlPhqGFuIe_70-0vA.roa (raw, json)
Hash identifier: USbBnnw/t0yXL/jPlRZmzbIiXCSLfZkaULuTvXRpPRs=
Subject key identifier: 51:C9:26:75:C5:A7:06:A3:65:3E:1A:86:16:E2:1E:FF:BD:3E:D2:F0
Certificate issuer: /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Certificate serial: A1BC
Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/UckmdcWnBqNlPhqGFuIe_70-0vA.roa
Signing time: Tue 26 Apr 2022 15:26:26 +0000
ROA not before: Tue 26 Apr 2022 15:26:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41404 (0xa1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Validity
Not Before: Apr 26 15:26:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51c92675c5a706a3653e1a8616e21effbd3ed2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:fb:27:c1:2a:80:37:c7:99:4e:94:f6:b6:
37:08:ff:2d:65:49:f6:54:eb:08:ce:5d:41:c4:9d:
9a:46:8c:fc:a5:04:e7:fd:f1:74:31:14:29:fa:b1:
d3:cc:48:24:c3:85:82:78:b2:f7:dd:5d:48:82:e1:
0e:21:3a:1a:da:26:5a:4c:b1:25:33:47:ad:c8:eb:
16:d7:e0:81:29:e1:48:44:9c:3b:8a:7e:16:63:07:
d8:35:47:47:f7:61:57:87:7c:81:1b:65:f7:8b:6c:
33:9c:db:33:ca:ca:a8:ca:49:a9:91:81:2d:fe:c8:
6f:94:4d:5f:49:a5:45:95:39:58:cf:de:7e:9b:99:
2f:12:11:ad:5f:a0:fa:ec:93:5e:73:d3:95:ae:84:
89:61:3d:a0:12:b3:7c:76:ba:d2:7e:43:00:a3:c7:
69:af:e3:af:a9:a6:99:c1:f2:57:a0:f6:da:d3:30:
db:47:06:e3:d8:1f:20:98:ec:db:56:d8:e2:28:a6:
db:91:83:62:bb:f4:c8:91:5a:30:88:fd:23:23:1a:
d1:82:c3:6e:22:28:02:2b:14:e1:78:d7:af:b0:28:
0a:65:a3:da:55:11:55:b7:b9:a3:d8:61:98:1c:bd:
11:ed:78:a4:06:a3:4e:6e:9c:9a:94:1f:fc:fc:ba:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C9:26:75:C5:A7:06:A3:65:3E:1A:86:16:E2:1E:FF:BD:3E:D2:F0
X509v3 Authority Key Identifier:
keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/UckmdcWnBqNlPhqGFuIe_70-0vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e4:11:d1:06:1a:81:a1:fa:84:44:c8:88:69:41:7a:f6:c3:
d4:8f:a8:54:0e:2d:b8:20:9e:9e:41:b7:6c:5e:a8:a5:4a:56:
8a:b6:99:20:f0:c7:f8:fa:17:06:85:61:15:bc:3f:de:47:58:
54:e5:b2:9d:fc:fd:97:cd:f3:d6:f3:6d:cf:a8:79:65:48:c4:
c8:92:0f:81:0f:d7:8e:2f:d9:be:bd:c0:cb:55:d7:7b:17:5d:
53:f0:c8:92:06:da:38:4d:0a:5b:25:09:25:11:ca:51:a8:b8:
70:3f:fb:a6:05:34:61:91:e9:07:2e:ef:fc:24:ca:51:0c:3d:
54:b5:da:b2:29:68:32:e5:49:6f:6a:94:81:15:26:09:b7:7c:
ee:89:92:31:6b:70:f8:71:21:2b:35:54:3c:7c:5a:ea:c8:13:
91:3b:de:89:5c:6b:8d:79:6d:ab:a2:12:d2:6a:58:b3:f0:cc:
c2:0c:ba:d4:36:2c:c3:c8:81:97:bd:17:19:58:db:f6:86:d8:
9c:f9:66:d3:9c:19:e8:cb:9f:ec:47:cf:11:32:ff:a7:5c:ac:
9c:b7:1a:66:e0:3d:49:8e:d6:e9:86:2b:7a:3d:f0:be:2a:fd:
9f:5c:83:6b:b4:11:6c:4a:fd:a7:83:60:dd:a3:9e:ba:0b:30:
aa:1f:7b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:48 2025 by rpki-client