Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/UxTv_YanE4QZNljz9lgPTbAWUc8.roa
File: UxTv_YanE4QZNljz9lgPTbAWUc8.roa (raw, json)
Hash identifier: Jk7RbtyjVn3ACxTLq3GxhfDvipcuMXM52CShdQlKSlQ=
Subject key identifier: 53:14:EF:FD:86:A7:13:84:19:36:58:F3:F6:58:0F:4D:B0:16:51:CF
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 018A4BE0491CE98276F99EE933FA62F371F7
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/UxTv_YanE4QZNljz9lgPTbAWUc8.roa
Signing time: Thu 31 Aug 2023 13:55:04 +0000
ROA not before: Thu 31 Aug 2023 13:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57469
IP address blocks: 178.22.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:e0:49:1c:e9:82:76:f9:9e:e9:33:fa:62:f3:71:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Aug 31 13:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5314effd86a71384193658f3f6580f4db01651cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:98:2c:d5:a2:4a:b9:a7:97:11:d3:73:da:ca:
b8:ec:c9:37:b8:bd:33:8d:91:43:6b:dc:fa:01:c3:
29:a0:c9:a5:ec:2e:d5:02:c8:ed:d5:4b:81:15:bb:
8d:26:56:5a:2b:16:d7:83:78:38:48:e5:1a:ae:0d:
3f:32:03:4b:c9:aa:01:cc:a9:d7:32:07:63:4c:39:
44:3b:c9:4e:29:f2:5b:f1:7b:57:d7:b3:e9:6d:91:
05:d3:3f:d9:c2:07:84:a9:0b:3e:c7:17:93:61:86:
1d:99:61:04:5f:f5:03:f3:b1:67:88:6a:9f:da:2e:
7d:2d:40:46:e8:b7:86:4e:0c:1d:fb:1b:bc:b7:e1:
8b:04:6a:3f:b2:74:91:dd:06:50:a6:7b:d8:1f:97:
af:20:b0:53:01:27:79:b6:d4:72:bc:f9:38:aa:ab:
e2:f0:46:b5:05:d8:84:03:df:11:00:6d:7b:07:51:
76:56:23:a9:85:d1:cb:f5:ad:a6:ee:c4:be:f9:8a:
5d:8d:20:c5:0f:ec:ea:08:0f:6d:2b:af:a2:c3:db:
cd:d5:2f:c1:ce:16:47:98:06:d3:36:5f:76:ba:9d:
af:53:b9:8c:f9:d8:96:8f:8a:3a:71:bf:dd:39:1f:
07:bf:3e:a9:61:43:ab:1c:45:25:54:15:99:5c:e0:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:14:EF:FD:86:A7:13:84:19:36:58:F3:F6:58:0F:4D:B0:16:51:CF
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/UxTv_YanE4QZNljz9lgPTbAWUc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0f:95:7c:42:22:9e:c9:68:7c:9e:93:d5:1e:96:02:fe:42:
ad:06:c4:fb:07:e3:90:cf:f1:4d:d3:64:a6:1d:d0:29:ea:05:
c5:8b:39:6b:a7:bc:1b:a3:02:73:44:4d:57:23:90:14:df:95:
3d:32:2c:89:1a:56:da:a9:80:4b:b8:9d:19:8a:d2:ac:53:11:
a9:50:a6:83:14:3b:92:d9:f5:10:af:72:19:3f:a8:1e:74:76:
f7:f7:6d:1d:1e:8e:71:5f:fc:00:bf:60:20:2b:cd:25:70:ea:
f8:b4:b5:15:b6:cf:0c:23:10:54:06:a3:c2:9c:84:6e:40:15:
d2:11:d3:c3:21:cf:e4:0d:53:25:ed:01:76:25:83:46:b4:21:
f3:23:87:91:a6:bf:99:e6:5a:da:52:c7:38:2e:ac:8e:aa:b3:
c5:b2:f7:d7:4e:f3:d6:37:ba:c4:de:41:75:d3:11:74:67:af:
d3:65:cc:88:13:b4:c8:d5:d5:f5:d0:02:ea:6c:24:f9:04:64:
5a:d1:d7:bf:07:2c:fb:65:cf:59:34:3b:86:56:63:db:6f:63:
77:12:88:96:9a:9e:7d:98:0b:14:5a:34:7d:79:63:87:a6:95:
2e:18:89:8f:db:da:67:dd:79:09:2e:32:c9:76:be:ef:d3:fe:
f2:b8:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:55 2025 by rpki-client