Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/Uf_NH7URh7mkZVpMWSLGttnyxyw.roa
File: Uf_NH7URh7mkZVpMWSLGttnyxyw.roa (raw, json)
Hash identifier: +s6mRkXiNYYkT/tnOwdWrSx8YpuIvmZiJpHBnxqWYZQ=
Subject key identifier: 51:FF:CD:1F:B5:11:87:B9:A4:65:5A:4C:59:22:C6:B6:D9:F2:C7:2C
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 01856F5DE101C7286B1AEB878135399FEFED
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/Uf_NH7URh7mkZVpMWSLGttnyxyw.roa
Signing time: Sun 01 Jan 2023 22:05:01 +0000
ROA not before: Sun 01 Jan 2023 22:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 193.187.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e1:01:c7:28:6b:1a:eb:87:81:35:39:9f:ef:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Jan 1 22:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51ffcd1fb51187b9a4655a4c5922c6b6d9f2c72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:92:d8:02:0a:4a:ca:af:37:17:f7:fa:50:
6d:17:a3:59:3b:a4:e9:25:02:e0:da:f9:3f:0c:1d:
47:df:db:38:2f:71:77:77:b5:c5:ef:e0:64:18:bc:
1a:8e:5b:f6:36:4d:e7:30:ca:0c:c5:27:65:24:2f:
fd:4f:3e:bd:be:22:28:e9:21:d5:fa:77:d0:1f:e1:
9e:32:e8:d9:a1:0d:57:68:0b:6c:f0:32:1a:29:c8:
38:5f:07:a7:ad:6d:8a:26:20:60:62:d2:70:82:e6:
90:c6:e4:c3:e2:e0:9c:84:ae:77:c7:1d:fa:17:0f:
1b:91:6b:73:55:05:60:a3:77:e6:10:f4:17:c3:d3:
76:0c:41:78:d5:9d:4e:18:c8:cf:78:d7:ed:cf:c2:
a1:87:b6:46:d1:ab:a0:ec:eb:e5:de:b4:81:7c:a8:
c1:a9:2d:2f:32:28:e4:57:de:a2:68:0b:71:9e:29:
46:ad:db:3d:8c:aa:97:83:b7:67:bb:ef:4d:73:55:
c5:d2:f7:f1:7e:b8:53:52:5d:11:3e:c3:64:47:c2:
b4:23:83:fa:77:d2:95:3e:ea:1f:33:f9:bf:1d:27:
70:2b:31:31:28:64:ea:c7:0d:56:07:d9:65:44:7d:
0d:49:6e:79:12:3f:77:82:89:6c:70:80:ed:fa:b0:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:CD:1F:B5:11:87:B9:A4:65:5A:4C:59:22:C6:B6:D9:F2:C7:2C
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/Uf_NH7URh7mkZVpMWSLGttnyxyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.248.0/22
Signature Algorithm: sha256WithRSAEncryption
82:29:ef:0d:ce:66:16:8b:56:26:7b:dc:32:32:8c:bf:aa:e1:
9e:ab:86:2a:22:12:f5:2e:5b:d1:55:a7:8b:d4:b4:36:43:e7:
fe:29:1b:1c:34:aa:99:a5:54:ba:af:61:dd:01:6f:6b:23:98:
63:fe:91:a4:8d:cc:da:12:a6:b7:83:ce:89:2e:2c:3b:d2:26:
aa:45:12:8b:f5:58:09:f0:9d:12:68:26:fd:9b:05:37:54:40:
f9:ff:7b:bf:6c:55:51:e3:cc:ce:b9:e3:8c:2e:6a:9e:79:c4:
94:14:b8:7c:df:dc:84:7e:7d:0a:29:09:5d:7f:54:6b:a2:1d:
2f:ff:b7:3e:1c:1c:e1:6d:da:da:d0:5d:48:9d:34:ad:23:e9:
f6:0c:05:77:84:5c:99:24:92:ae:26:b7:62:de:79:ba:56:aa:
e3:21:07:d2:8f:0b:e4:e9:14:04:ac:19:4c:9a:28:e9:8f:14:
76:83:a1:d6:79:91:cf:4f:98:83:16:4e:58:81:bb:96:40:f7:
d6:73:f7:37:14:9c:2f:fd:8a:50:c7:1d:32:de:45:1d:75:89:
3f:c7:f0:f9:c3:4b:19:d9:85:e9:a2:db:41:16:8a:86:7d:c3:
11:5e:db:37:99:37:69:d0:43:b5:71:e2:13:dd:60:38:8a:17:
6a:7d:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:07 2025 by rpki-client