Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/UvWxPAY9fo-83fqk346C9zms3lQ.roa
File: UvWxPAY9fo-83fqk346C9zms3lQ.roa (raw, json)
Hash identifier: ikHxX+TkcVW9TnvoN9WYck1gZjLbwQbwZdJPdahlI9g=
Subject key identifier: 52:F5:B1:3C:06:3D:7E:8F:BC:DD:FA:A4:DF:8E:82:F7:39:AC:DE:54
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 36D9D065
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/UvWxPAY9fo-83fqk346C9zms3lQ.roa
Signing time: Mon 21 Feb 2022 11:48:27 +0000
ROA not before: Mon 21 Feb 2022 11:48:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21050
IP address blocks: 94.187.163.0/24 maxlen: 24
94.187.161.0/24 maxlen: 24
94.187.162.0/24 maxlen: 24
94.187.160.0/24 maxlen: 24
94.187.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920244325 (0x36d9d065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Feb 21 11:48:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52f5b13c063d7e8fbcddfaa4df8e82f739acde54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:0e:46:0e:b2:dc:fc:2c:07:66:84:a4:d6:
58:86:85:29:d2:40:64:fc:ed:47:a2:f4:2c:dc:5e:
5c:99:b2:67:34:41:1c:e9:ae:4c:42:93:64:93:98:
8c:26:b8:52:42:8e:d7:bf:ed:ab:8c:c4:58:1d:95:
bf:ae:93:ae:29:bc:b2:5b:54:8f:5e:4c:0b:b8:20:
28:a9:59:8c:da:cb:e1:d6:0e:0e:56:b8:2c:d3:43:
9d:7e:c3:f1:68:65:97:57:72:fe:16:0d:63:27:9c:
88:32:4a:39:ed:96:e5:e6:f5:9b:e4:0b:ab:18:f9:
0e:12:ca:e3:13:7a:7b:33:b7:36:7d:c4:e8:19:15:
3b:15:7c:03:5e:e4:cb:12:cd:0b:f7:2b:b5:16:6e:
d1:45:a9:71:8d:22:13:fc:1d:2d:cc:7f:b9:71:b2:
7d:ff:48:ec:be:b2:e9:94:1a:2b:8a:f0:ee:c8:1c:
d4:a4:61:33:5b:bc:f2:3b:00:67:0e:08:d1:3e:5c:
37:b3:42:a6:f7:37:29:78:c4:69:12:2e:a5:4e:d8:
0b:73:09:b6:9d:05:d5:db:eb:f3:e8:f0:f4:42:95:
9e:1b:a5:c9:2f:83:01:dc:e0:3f:f3:f8:22:9f:15:
cc:fd:26:83:71:c5:80:eb:cf:d2:de:02:53:83:b8:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:B1:3C:06:3D:7E:8F:BC:DD:FA:A4:DF:8E:82:F7:39:AC:DE:54
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/UvWxPAY9fo-83fqk346C9zms3lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.187.160.0-94.187.164.255
Signature Algorithm: sha256WithRSAEncryption
5a:18:71:4f:3f:b4:78:16:e9:11:af:6a:ed:bb:a2:cd:ff:fa:
d0:59:34:09:cb:f2:ee:76:f2:eb:67:b5:ba:83:9a:67:0b:55:
c5:8b:34:dd:4b:fd:45:8d:11:11:32:1c:c6:1e:d3:66:e7:de:
6b:b5:4d:79:b9:03:1f:e5:0f:f3:2c:73:16:bc:64:00:be:0d:
d8:7d:83:20:4a:b2:73:c4:96:b2:7d:be:f7:2b:72:b6:ba:f5:
68:9e:ef:42:0c:19:15:08:7f:46:e1:f9:d4:c2:27:b1:3c:85:
8f:30:b7:b5:90:3b:f5:a3:e2:4d:6b:c6:56:46:3b:dd:cb:df:
5f:5e:30:32:20:2c:59:31:69:0c:b1:34:e1:f7:be:a8:ec:12:
1f:dc:c2:b9:bc:65:6a:a7:f8:79:d3:53:70:5f:c3:24:ad:ff:
1b:39:d7:97:17:ef:32:73:0c:d8:1d:51:73:83:8d:a2:ab:e6:
eb:da:64:1f:34:af:50:f9:4e:86:af:1d:04:bb:db:ab:3d:e8:
8e:6b:83:de:f4:eb:9b:2c:8f:8b:bf:3c:5b:b5:47:8f:72:a0:
d0:87:28:37:64:1c:37:2f:bd:5e:71:c1:40:35:6b:a9:62:06:
3b:e8:3c:2d:80:39:b2:00:a1:60:90:23:f5:1d:18:da:1c:68:
70:37:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:29 2025 by rpki-client