Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/UhaJ2GpdpE4dScTIGyIZyiKEjFI.roa
File: UhaJ2GpdpE4dScTIGyIZyiKEjFI.roa (raw, json)
Hash identifier: Lyo/rqleZsSUJaC3M6hM6M7filc715dLpFeGbtRIMM0=
Subject key identifier: 52:16:89:D8:6A:5D:A4:4E:1D:49:C4:C8:1B:22:19:CA:22:84:8C:52
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 05F81911
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/UhaJ2GpdpE4dScTIGyIZyiKEjFI.roa
Signing time: Sat 01 Jan 2022 13:55:30 +0000
ROA not before: Sat 01 Jan 2022 13:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50926
IP address blocks: 217.130.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100145425 (0x5f81911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 13:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=521689d86a5da44e1d49c4c81b2219ca22848c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:a9:ec:de:b0:fa:d9:51:c8:58:98:d5:07:
92:75:6e:d4:52:03:51:f2:33:41:da:23:e1:d3:ba:
07:3a:7d:b7:da:18:d5:e0:c2:56:b4:f8:f8:37:22:
03:4e:ec:3b:80:58:b9:13:7a:68:1a:7d:d6:fa:5c:
e3:6b:fc:8e:a0:26:53:65:69:f6:96:dc:b1:e9:0b:
49:ff:29:bc:df:fb:b0:3a:3f:dd:a4:cd:3c:d6:72:
5e:43:62:99:47:af:c0:56:38:4b:2c:04:99:8c:4c:
8f:26:2c:db:92:7d:55:b2:3b:62:0f:2e:76:8b:bb:
0b:e3:f7:87:8d:fe:a3:42:27:b0:75:f8:45:e3:db:
5f:cd:1f:0e:fd:46:a7:37:36:da:dd:d5:17:a3:c6:
ed:51:d8:09:62:0c:fb:53:ba:10:68:ea:a8:ae:36:
47:c8:62:a2:65:21:a8:c8:18:31:46:75:af:87:3d:
eb:55:63:16:90:7f:cd:04:a0:5c:34:88:98:62:d0:
23:3f:90:04:eb:5d:f4:f6:55:49:44:36:c3:7c:75:
8a:3f:63:92:c8:39:2d:87:08:15:53:d6:14:2d:8e:
9c:7e:0a:ed:8d:b3:60:bf:4e:59:97:4b:b7:d8:43:
9c:86:d9:bf:24:80:dd:e7:44:45:70:5c:23:4a:c0:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:16:89:D8:6A:5D:A4:4E:1D:49:C4:C8:1B:22:19:CA:22:84:8C:52
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/UhaJ2GpdpE4dScTIGyIZyiKEjFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.130.244.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:67:24:ce:ae:79:63:5d:a2:3d:61:4a:e1:64:6e:46:9d:13:
6a:e5:74:c4:25:3b:0c:a6:c0:41:b1:aa:83:5c:89:a2:8b:c5:
26:a9:6d:ee:a7:96:f5:d1:08:1e:36:51:79:a9:3e:62:8f:44:
a5:49:7a:be:62:dd:41:90:0a:3e:68:67:18:78:25:64:63:f4:
6b:38:72:fb:7e:c2:fe:b7:fe:fb:ea:2a:4c:cc:37:58:e7:f3:
80:f3:e8:3a:6d:7f:5f:c4:57:be:c8:47:84:17:d2:07:07:5d:
7c:8a:c6:be:2b:6e:15:59:8a:f1:30:05:7c:7a:c0:d7:f1:a2:
a5:eb:e2:7e:8a:56:05:5a:3f:6c:f4:f8:5a:7e:23:4f:ca:3e:
b7:8c:c1:20:bb:bf:2a:a2:85:db:e2:32:7e:6e:44:10:68:37:
da:38:ea:f7:b8:b4:fe:8a:e9:69:4a:81:55:0e:48:27:ca:24:
f8:b9:a5:e8:7e:6a:24:00:f2:8e:4b:90:9d:05:c0:b7:2a:d3:
87:25:21:c9:34:46:92:b8:0f:a4:cf:76:85:2c:ef:a1:b4:ec:
47:32:cb:fd:79:f3:7e:a0:12:2e:5a:48:6e:7a:20:ec:75:8c:
fa:98:99:95:52:66:c0:c2:88:d0:05:bf:3c:e9:a5:68:81:9e:
88:c1:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:23 2025 by rpki-client