Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/UoePzxPRNjfVagd6nS-ZnnhfF08.roa
File: UoePzxPRNjfVagd6nS-ZnnhfF08.roa (raw, json)
Hash identifier: HiO2fGUBsxJt/D24hvlXehtAolwBEJ8iTBaM6VTzR2Q=
Subject key identifier: 52:87:8F:CF:13:D1:36:37:D5:6A:07:7A:9D:2F:99:9E:78:5F:17:4F
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 018BC850E8C277163F60BD835393518DD111
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/UoePzxPRNjfVagd6nS-ZnnhfF08.roa
Signing time: Mon 13 Nov 2023 10:53:47 +0000
ROA not before: Mon 13 Nov 2023 10:53:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198293
IP address blocks: 81.162.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:50:e8:c2:77:16:3f:60:bd:83:53:93:51:8d:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Nov 13 10:53:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52878fcf13d13637d56a077a9d2f999e785f174f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:26:a6:65:ba:0f:fb:82:cd:d2:1f:86:5d:
22:ba:a9:01:05:91:4d:62:50:3a:d6:1c:32:ec:39:
ef:c8:b4:1d:1a:00:df:8e:76:ac:1a:44:c0:78:fd:
3e:10:d2:64:15:57:c9:df:b2:ef:54:81:0a:06:62:
21:a1:36:e9:aa:70:6d:30:42:09:f5:3f:89:8b:e5:
41:d4:d3:02:2c:c1:14:14:25:4c:fd:d6:cc:bf:89:
41:ab:23:7f:f8:b9:1a:d7:16:7c:ec:e9:ab:03:bb:
7d:c5:08:a2:e7:d7:42:c7:a6:28:37:a7:f1:cb:ae:
f9:59:14:1d:b5:a3:b9:45:1c:18:4b:8f:87:17:62:
5b:8f:84:c8:d8:7c:9f:3f:24:24:dc:22:52:b9:93:
24:a6:73:a1:5c:73:16:6a:b8:53:a7:db:80:50:1f:
9b:7f:43:ae:c5:2d:f1:48:79:de:e1:25:0a:48:30:
65:b7:b9:fc:8c:dd:3b:34:8a:f6:74:8e:b4:19:57:
13:39:2e:96:a0:77:f0:34:d0:54:8f:ea:fa:ba:5c:
92:af:9b:7d:52:7e:57:39:a4:96:d6:0d:0c:1e:9f:
10:50:63:ba:ac:90:87:cd:ab:97:5a:46:8e:a5:03:
fb:0d:05:4f:fb:41:c5:d7:4e:ff:ba:c8:c7:a1:e1:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:87:8F:CF:13:D1:36:37:D5:6A:07:7A:9D:2F:99:9E:78:5F:17:4F
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/UoePzxPRNjfVagd6nS-ZnnhfF08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.64.0/20
Signature Algorithm: sha256WithRSAEncryption
58:48:45:14:eb:83:13:e7:d5:f0:b5:cf:e8:2d:89:28:0e:22:
74:68:e0:e6:40:f9:50:35:f1:74:87:15:65:9b:74:67:9f:cf:
1b:4b:5a:0c:a1:63:56:be:83:66:e5:63:e3:a6:7c:84:f9:32:
8d:da:a2:2a:09:70:64:57:4c:79:f2:1e:00:43:9a:87:30:1f:
92:96:46:75:64:6c:2f:57:13:3e:36:df:9b:96:15:d6:d0:8b:
28:68:08:7f:47:d7:a0:c2:97:bc:1c:40:85:41:02:e5:55:17:
9d:5f:de:84:f0:cb:ba:a4:4c:1f:07:15:a5:32:26:7f:f8:bd:
25:5d:7e:22:84:fe:82:98:b7:64:ef:3f:09:2f:03:0a:0e:25:
d5:3c:87:46:ae:d6:de:9c:98:f8:2a:3e:c1:0f:41:53:a3:6a:
c9:11:72:0b:b1:d4:d7:41:e1:91:3b:49:0e:e7:0b:f5:0b:a2:
21:f7:02:f0:e6:00:5c:6a:01:b5:f7:b3:7b:50:29:5d:4c:ef:
e9:94:64:a7:aa:83:36:b4:22:3d:26:68:70:5a:e0:79:44:46:
a7:3a:5a:fb:4a:c4:69:a9:8f:b5:1b:44:21:21:65:2a:40:b2:
08:08:3f:cf:e9:b5:9b:72:ba:bf:bf:20:f5:e0:95:21:1b:d1:
4c:31:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:14:02 2025 by rpki-client