Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ugI3ADnQQATL3JROjSU9M46LCzc.roa
File: ugI3ADnQQATL3JROjSU9M46LCzc.roa (raw, json)
Hash identifier: LQDGinVoFA7fCPZTAHKr+4xQw9zq6a9DuolrzdqlF3o=
Subject key identifier: BA:02:37:00:39:D0:40:04:CB:DC:94:4E:8D:25:3D:33:8E:8B:0B:37
Certificate issuer: /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial: 0188D91D0D52E00010F341C374DE99B5EEE2
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ugI3ADnQQATL3JROjSU9M46LCzc.roa
Signing time: Tue 20 Jun 2023 14:02:19 +0000
ROA not before: Tue 20 Jun 2023 14:02:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50643
IP address blocks: 195.191.200.0/23 maxlen: 24
2001:678:b4c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:1d:0d:52:e0:00:10:f3:41:c3:74:de:99:b5:ee:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Validity
Not Before: Jun 20 14:02:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba02370039d04004cbdc944e8d253d338e8b0b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:30:c1:43:44:db:bc:a8:37:d2:df:8c:d1:
20:8a:52:3c:9d:84:d5:4a:58:36:81:d9:74:3a:49:
78:f3:66:98:78:c5:8b:12:e5:9b:77:85:d8:57:b4:
4d:66:81:60:e6:ff:af:07:51:9b:a8:05:c7:54:ef:
bb:12:97:6e:2e:e0:32:c2:81:fc:fa:b0:29:98:09:
db:87:f9:17:76:6a:a4:50:d0:51:3f:e7:40:11:ad:
38:80:0d:69:c9:7d:89:06:54:e9:25:65:fe:32:19:
42:51:b4:f8:dd:7e:e6:c3:4f:2b:40:0b:b9:2f:0e:
2f:b9:be:8c:9f:99:17:73:0e:40:aa:a3:39:9a:80:
28:6d:77:e0:fb:da:99:99:36:c2:29:82:e7:83:6a:
30:dd:af:5b:48:51:30:4c:34:72:a0:f1:85:18:d3:
45:15:41:ce:55:bd:b5:72:d6:e4:67:d9:c1:b5:1d:
ff:dc:f6:1c:ac:2b:63:d7:5b:b7:94:ae:c5:5c:41:
ba:2d:66:1c:1a:24:03:da:30:c8:02:4c:85:7b:54:
57:9e:f6:d8:61:e8:bc:19:9e:05:8c:8a:74:08:fa:
f2:90:65:ee:a6:8c:49:ed:b2:54:09:21:91:65:8c:
5d:cf:0b:1d:c7:71:19:66:01:4c:0f:b3:27:7c:58:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:02:37:00:39:D0:40:04:CB:DC:94:4E:8D:25:3D:33:8E:8B:0B:37
X509v3 Authority Key Identifier:
keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ugI3ADnQQATL3JROjSU9M46LCzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.200.0/23
IPv6:
2001:678:b4c::/48
Signature Algorithm: sha256WithRSAEncryption
4c:1b:f1:4d:b0:e4:1e:98:6e:ad:42:89:7f:79:ad:d8:7b:62:
86:ed:23:33:04:12:67:57:b6:94:8b:40:e6:c7:21:af:2c:33:
63:40:15:69:8f:71:05:69:13:4f:20:c6:27:d7:00:fa:af:18:
b4:d8:83:e5:cc:9a:ef:5b:d9:3b:6b:ef:e4:32:91:13:79:70:
4c:ba:e4:2d:16:b8:e1:06:10:d7:e3:42:8e:94:56:99:2e:df:
b6:d6:58:18:06:d1:39:59:8b:46:6f:e2:28:19:6c:64:0a:e9:
be:f6:b0:56:3e:93:d8:90:5f:2c:0b:e3:07:8c:93:0c:70:70:
9d:c8:3a:0c:c5:bf:eb:2f:be:64:01:df:19:17:6b:b5:48:c5:
a8:c4:84:3e:c0:02:c2:bb:e3:53:60:27:bc:43:2f:7f:24:aa:
70:2f:1a:db:dc:26:65:4c:8e:99:6e:8f:e4:46:6a:88:56:06:
92:32:64:bc:3d:1b:c4:27:03:f2:bc:5c:4d:81:d0:b8:ee:d9:
43:74:16:36:eb:44:40:00:46:3e:68:ee:4b:9b:43:d7:80:6e:
33:7d:72:3f:c6:04:fd:6e:1b:6f:9d:e9:ce:81:2e:88:c9:cc:
5d:2b:fb:f7:d8:96:72:00:83:90:ee:4a:4b:48:e0:ee:bb:86:
d9:93:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:31 2025 by rpki-client