Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/hUKAy7n9MWD2TQkVQ7GsqAU5YW8.roa
File: hUKAy7n9MWD2TQkVQ7GsqAU5YW8.roa (raw, json)
Hash identifier: AkUSWOejWbGQhco5oCp+TJmd+WCSwH6f5BDPRdRXUrM=
Subject key identifier: 85:42:80:CB:B9:FD:31:60:F6:4D:09:15:43:B1:AC:A8:05:39:61:6F
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 3D48C052
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/hUKAy7n9MWD2TQkVQ7GsqAU5YW8.roa
Signing time: Sat 01 Jan 2022 06:55:07 +0000
ROA not before: Sat 01 Jan 2022 06:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 5.152.182.0/24 maxlen: 24
5.152.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028178002 (0x3d48c052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 06:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=854280cbb9fd3160f64d091543b1aca80539616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:6c:a1:5e:33:b2:96:c6:39:55:a8:9b:c5:
18:42:79:e1:a7:42:78:fb:76:d2:0b:25:a4:3a:db:
e1:55:5b:9a:af:bf:64:66:c8:14:4c:8b:fc:c2:5e:
01:a3:9d:f1:52:8f:04:6a:15:bc:b9:83:c2:5d:15:
55:50:c1:23:b9:94:64:79:6c:c0:a5:cd:a8:c3:f8:
2a:ff:87:d8:ab:e6:f2:4f:00:09:c2:68:d2:e8:98:
23:41:4f:1a:bd:79:94:75:f8:d9:4e:8c:59:f1:f6:
06:4d:6a:2b:64:f6:b0:51:36:51:fa:47:08:2d:ec:
87:c5:5b:b8:8c:1d:6f:e2:01:65:fb:fa:f6:da:d1:
f3:d1:72:85:6d:f9:df:7c:19:0c:3c:ee:db:c5:2d:
c0:31:81:d8:ec:f2:7b:cd:e7:0c:78:4f:36:7c:3f:
3b:28:e3:a1:53:c6:1e:3d:0b:25:20:1a:7c:6d:81:
d2:fe:8e:88:d6:02:ab:e2:77:52:b5:de:6d:11:cf:
1c:79:6b:7e:41:3f:9c:0c:2e:d6:2b:f0:48:75:22:
5f:da:2e:93:22:e2:03:e0:12:57:d7:7b:89:4d:29:
a2:0b:99:72:38:8c:92:c4:ce:54:06:71:2e:fa:10:
13:85:f5:4e:ba:52:69:5b:c5:05:d0:ba:73:d4:29:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:42:80:CB:B9:FD:31:60:F6:4D:09:15:43:B1:AC:A8:05:39:61:6F
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/hUKAy7n9MWD2TQkVQ7GsqAU5YW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.182.0/23
Signature Algorithm: sha256WithRSAEncryption
40:97:c7:48:76:45:82:89:f6:c2:eb:ad:f9:cb:64:ed:b5:7f:
19:9f:05:b5:48:2b:08:88:47:51:87:0b:e5:b4:ba:1d:af:ec:
f4:28:6d:bd:2d:ca:87:7c:46:a1:8b:33:c0:1a:f3:6b:ea:84:
49:94:82:0a:74:96:b4:06:ee:74:b3:72:08:8a:05:94:62:31:
90:f6:2e:f3:57:93:db:b9:f7:40:08:86:28:d5:52:bc:5d:1e:
a0:76:e5:c4:31:b9:3c:75:25:6c:fa:e5:e2:64:4d:f4:0b:74:
46:d2:a5:81:20:a8:58:6b:7c:2a:39:bf:dc:a6:24:3d:58:21:
76:3c:e5:60:d1:aa:6b:4a:0a:82:9a:1d:0f:63:1b:c7:bc:5f:
1e:a0:e2:20:bd:11:48:f3:ce:6d:4b:76:2d:53:45:1b:05:ee:
50:a6:5b:8b:e4:7c:04:da:dd:65:af:c4:df:e8:02:eb:81:eb:
b0:eb:3c:7b:fb:66:a8:93:29:78:92:67:25:5b:5a:62:13:90:
c6:80:64:7a:f7:41:99:16:b4:c3:6a:a0:63:97:44:8e:66:f3:
0e:9d:e3:74:b8:14:25:18:82:ac:34:cd:c1:e7:76:73:10:b9:
90:1a:61:7d:d0:0e:15:be:5e:ec:a5:e3:bd:38:bf:62:5d:9b:
c2:6d:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:42 2025 by rpki-client