Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/Ujy7oFKGB4TfghmJIWQaYmLe8WY.roa
File: Ujy7oFKGB4TfghmJIWQaYmLe8WY.roa (raw, json)
Hash identifier: BRDVwScii0T+tpC2gXehju4aysQJjgucSmvWle6EOcg=
Subject key identifier: 52:3C:BB:A0:52:86:07:84:DF:82:19:89:21:64:1A:62:62:DE:F1:66
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 018B8005F4BFAA9B3753FAC63C1BE4E6747F
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/Ujy7oFKGB4TfghmJIWQaYmLe8WY.roa
Signing time: Mon 30 Oct 2023 09:59:15 +0000
ROA not before: Mon 30 Oct 2023 09:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61090
IP address blocks: 185.152.15.0/24 maxlen: 24
185.152.12.0/24 maxlen: 24
185.152.13.0/24 maxlen: 24
185.152.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:05:f4:bf:aa:9b:37:53:fa:c6:3c:1b:e4:e6:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Oct 30 09:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=523cbba052860784df82198921641a6262def166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:c2:b6:6a:3d:60:22:e7:19:52:e2:fc:83:
40:4f:ae:b6:ae:b6:3a:31:9f:9e:a9:20:d9:1b:e0:
75:1a:04:31:18:2f:07:0f:36:2e:48:13:2c:0a:c6:
59:bb:61:7d:aa:e3:33:73:7a:44:5f:33:ab:65:cd:
a9:95:06:95:18:9c:3e:80:17:04:85:22:68:b8:7e:
5e:4b:e9:bf:10:fc:03:7d:2c:0d:50:85:b2:08:04:
de:7e:69:74:b3:a1:95:03:73:38:d3:98:6e:d0:6c:
e9:7b:0f:60:47:87:36:75:71:b7:05:51:9c:c6:62:
47:b1:20:4c:59:db:a3:3a:96:0a:4b:72:69:e6:99:
2d:87:26:c4:fb:bc:a8:b1:22:d7:bc:7a:9e:94:ed:
0d:71:8e:10:ae:c3:3b:fd:72:80:a4:14:c3:ef:33:
14:8b:30:a3:6d:00:f7:b2:62:45:e3:15:8a:0b:0c:
35:90:91:b7:21:09:63:b1:b3:93:4a:34:c2:c4:ce:
76:0c:fd:9b:4f:a8:f0:30:44:f1:2a:8b:bc:3c:65:
11:91:4b:58:f7:55:b8:13:f0:64:9d:f2:1e:c4:eb:
33:61:72:70:95:8e:25:40:c7:de:75:d8:a5:1a:99:
81:e3:27:b4:39:d1:f7:26:f0:2d:30:bd:64:a1:82:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:BB:A0:52:86:07:84:DF:82:19:89:21:64:1A:62:62:DE:F1:66
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/Ujy7oFKGB4TfghmJIWQaYmLe8WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.12.0/22
Signature Algorithm: sha256WithRSAEncryption
92:8a:6a:1d:a8:26:2c:d2:53:21:3a:3d:c3:fb:55:10:33:58:
9e:f6:33:b8:2a:bd:fd:7b:2d:22:89:9e:02:6d:37:9e:3d:e2:
11:e9:2d:af:69:39:92:27:fb:61:c6:e6:74:bd:63:29:83:a9:
c3:f4:33:2b:94:30:30:dc:66:86:af:60:bd:d4:bf:4b:d4:2b:
df:35:f9:02:48:b4:02:65:3c:91:ce:8f:49:46:a2:7d:5f:9a:
3e:14:e3:c2:b5:ee:80:07:26:15:bb:f9:65:4f:9a:e8:a8:a1:
52:ca:45:e8:92:34:a8:56:cc:2e:1a:c5:51:67:83:a9:17:98:
d2:90:76:6c:58:ce:f4:e9:eb:04:fe:76:fc:1d:0f:c2:b6:bd:
45:c3:c9:41:a7:e7:92:88:62:f6:2d:3e:0b:4d:e9:b2:79:75:
24:4f:6d:d4:41:21:2d:26:08:8e:d6:96:d3:30:dc:ed:7f:b1:
57:fb:da:9c:d2:4f:45:50:4a:8e:80:99:7d:b3:27:5a:12:53:
bf:67:f4:ec:e3:73:f8:0b:63:a5:f3:bd:48:06:2e:5c:0d:7d:
1d:a4:dc:c0:a6:cf:b1:0a:cc:62:72:45:c4:9a:ef:f1:35:40:
ac:06:e8:e9:9d:ae:a7:c1:a1:89:ee:fe:45:ba:49:3a:14:5f:
c9:2f:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:47 2025 by rpki-client