Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/UhsxElDeHwRg1engDH_0HWkdIcA.roa
File: UhsxElDeHwRg1engDH_0HWkdIcA.roa (raw, json)
Hash identifier: 6Mqh7iPHCUhA9b4ce4z3YfDXSY7TehpidbuOHISWFIk=
Subject key identifier: 52:1B:31:12:50:DE:1F:04:60:D5:E9:E0:0C:7F:F4:1D:69:1D:21:C0
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42A55402C24033C50E99D244943902
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/UhsxElDeHwRg1engDH_0HWkdIcA.roa
Signing time: Sun 01 Jan 2023 21:35:16 +0000
ROA not before: Sun 01 Jan 2023 21:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 94.131.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a5:54:02:c2:40:33:c5:0e:99:d2:44:94:39:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=521b311250de1f0460d5e9e00c7ff41d691d21c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:36:a1:ae:15:ef:83:e5:45:13:e1:b1:31:
be:bb:97:c0:ca:6b:f5:00:48:cd:f7:4f:e5:a3:62:
3a:2c:9c:cf:c2:62:24:b1:e2:e9:80:45:33:3d:25:
39:7f:5d:98:5f:fa:4c:6b:9d:b5:7a:93:68:a9:96:
d6:93:ba:92:ad:fc:9a:84:c3:10:2c:7f:09:72:c8:
74:c9:cd:b4:62:c8:13:8c:24:50:f6:1b:e6:fe:1e:
d8:46:23:aa:e9:f2:85:2c:18:ac:06:37:fa:3d:88:
a2:0e:69:c2:12:19:af:3c:ec:22:57:44:8a:4d:f6:
b0:90:56:20:c5:6f:de:5a:69:3d:01:9b:6c:56:38:
a8:09:ec:57:88:bd:8b:8c:39:ce:eb:99:f6:f2:80:
b3:fb:1d:88:2b:42:12:87:ce:6e:c1:ec:f3:9b:44:
a5:07:ac:32:0c:e2:80:fa:73:19:02:43:1f:d0:c8:
1c:26:82:f8:46:89:68:d0:db:df:dc:70:0a:82:f0:
46:be:f6:35:80:80:56:b5:46:4f:a8:bf:17:82:7e:
bb:ec:2a:55:a3:f2:49:38:6a:7a:bf:1e:6c:81:ac:
4f:3b:df:66:96:d8:e3:cc:4e:0f:72:63:f6:d4:fe:
aa:e6:1a:fa:12:26:7e:96:05:d8:39:58:4c:49:29:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:31:12:50:DE:1F:04:60:D5:E9:E0:0C:7F:F4:1D:69:1D:21:C0
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/UhsxElDeHwRg1engDH_0HWkdIcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:1b:69:11:42:8a:da:c5:0a:43:73:1f:10:7f:37:b9:32:2a:
58:6a:f3:e8:f8:12:e2:fb:f0:38:15:35:c8:a4:38:95:59:06:
f5:66:29:86:70:ec:98:78:e2:a0:e4:60:19:36:78:af:de:af:
03:30:47:47:5b:f2:5c:dc:07:1f:3c:2d:f9:42:00:34:65:63:
b8:80:ba:aa:32:a9:f4:a5:f8:68:4d:1a:c6:7b:c4:0e:f4:b6:
40:4d:c5:74:70:29:b8:29:6a:55:18:be:db:f4:0d:4f:b2:53:
de:6c:c4:f8:55:51:2a:27:d1:6e:f5:31:d6:57:bd:98:93:6b:
8a:fd:54:10:73:71:7a:b4:e8:e7:58:e0:8d:36:67:97:ed:3b:
aa:16:bc:ec:32:79:48:cb:28:e6:43:c3:7b:db:ce:4f:3a:be:
7c:08:da:54:39:27:63:09:a1:ed:7c:36:c3:17:54:b1:1e:63:
e6:c1:08:f6:39:50:63:38:f5:0e:f9:76:ba:93:f6:bc:77:07:
b2:ac:6e:01:75:2d:a7:a5:41:ac:1b:67:c6:20:a9:b9:1c:dd:
23:2d:76:1a:da:45:83:fb:f4:67:1d:37:bd:97:da:5e:4f:e2:
41:66:18:cc:46:92:9f:e2:1b:c8:69:5e:76:87:53:6b:5c:89:
75:44:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:08 2025 by rpki-client