Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/ueLGHOw5d83mrstowjngr2BnTjw.roa
File: ueLGHOw5d83mrstowjngr2BnTjw.roa (raw, json)
Hash identifier: eAWBKfYfW6azgKyCFU/msj4gTexZMV5RIwk9Zxegk+k=
Subject key identifier: B9:E2:C6:1C:EC:39:77:CD:E6:AE:CB:68:C2:39:E0:AF:60:67:4E:3C
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 0181F2C81D6549A6D65686346128FBD869F0
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/ueLGHOw5d83mrstowjngr2BnTjw.roa
Signing time: Tue 12 Jul 2022 14:20:09 +0000
ROA not before: Tue 12 Jul 2022 14:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51011
IP address blocks: 2a03:5a00:2e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:c8:1d:65:49:a6:d6:56:86:34:61:28:fb:d8:69:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jul 12 14:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9e2c61cec3977cde6aecb68c239e0af60674e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:74:0c:57:dc:31:37:96:0c:e4:ac:74:11:
d1:dc:0e:41:b2:c8:33:22:b2:57:4c:88:ac:40:ba:
f7:e4:40:85:22:19:97:a1:29:80:9f:33:50:08:bd:
e1:59:62:b4:f5:43:e7:61:6e:61:bc:0b:f9:c7:7e:
0e:15:38:78:2d:0b:72:eb:bf:62:d2:ab:6a:30:eb:
87:34:b6:f8:9c:8a:24:4c:bb:d7:db:9e:7f:3c:7b:
cf:b7:11:dd:6d:79:59:01:75:63:03:45:57:c4:a9:
a3:d4:b1:3b:75:22:25:8a:4e:c2:fa:66:33:54:1a:
48:86:d4:a2:6b:09:d8:e2:73:e5:c1:30:c9:ed:c5:
ba:70:b8:2e:28:9e:9c:22:b6:60:a6:23:6f:31:26:
36:87:b6:0d:8d:40:d2:81:c6:7a:f3:f1:82:d7:97:
3f:3c:29:b6:cd:0b:ce:09:8d:ac:8f:6d:32:9e:f5:
52:49:f9:68:a3:f8:2a:47:d3:ea:af:b4:13:cd:40:
61:9e:c0:53:02:18:5c:d0:3b:cb:6b:c2:7e:e2:e2:
34:e6:d1:ae:93:e1:eb:28:b2:04:e2:73:9e:dd:2e:
dc:5a:1a:07:bc:8d:f3:dc:4e:d4:1e:43:00:2a:6d:
8c:f8:39:a3:b4:11:5b:59:98:03:ab:6c:66:46:89:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E2:C6:1C:EC:39:77:CD:E6:AE:CB:68:C2:39:E0:AF:60:67:4E:3C
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/ueLGHOw5d83mrstowjngr2BnTjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5a00:2e::/48
Signature Algorithm: sha256WithRSAEncryption
8d:94:7f:8f:2c:c2:f4:d8:17:9d:17:ae:c2:4a:65:ad:48:09:
9a:d9:21:22:e4:8a:90:e4:ca:75:61:cf:14:00:66:1f:8c:10:
a2:2c:91:1f:33:ef:67:60:3c:f1:e3:7e:b6:f7:47:4b:15:1e:
b0:d1:67:bb:95:9b:f9:b1:9b:29:f2:86:0e:9e:dd:57:e5:9a:
c4:21:91:02:d2:39:37:96:1f:ab:a6:c5:66:8d:d4:69:b7:38:
ca:74:b2:72:80:33:09:16:20:2e:5d:71:a4:29:7d:e0:36:64:
23:7c:38:54:5b:a5:da:cb:02:0a:26:fa:9d:64:20:c1:a8:93:
de:a8:96:b4:31:ec:a4:fc:ab:86:d2:2e:71:f3:a8:95:d0:47:
52:0f:36:61:04:eb:6a:bb:c9:86:9d:28:23:0a:ad:71:cc:4d:
09:0b:18:67:4c:61:07:68:d1:8d:c9:18:3e:73:d5:ee:4c:6d:
d6:cb:b7:89:aa:44:23:53:4d:67:62:a2:bc:13:11:2a:70:39:
d9:25:40:f6:f8:68:68:97:53:52:b1:f7:57:a7:e7:3d:74:a2:
60:dc:0e:92:22:ea:30:f4:5a:fa:6e:38:9a:dd:29:44:50:ab:
7c:89:ec:0d:52:46:79:40:7c:84:eb:af:50:77:54:a2:f0:63:
ac:43:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:33:41 2025 by rpki-client