Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/UHVnbXIvgGTmEhzfJo0j_LqgcVM.roa
File: UHVnbXIvgGTmEhzfJo0j_LqgcVM.roa (raw, json)
Hash identifier: I3wPXUkD7SCKxETZTXuJVtJVMOHSSysrfVG22rN29Wo=
Subject key identifier: 50:75:67:6D:72:2F:80:64:E6:12:1C:DF:26:8D:23:FC:BA:A0:71:53
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 043AA9F7
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/UHVnbXIvgGTmEhzfJo0j_LqgcVM.roa
Signing time: Sat 01 Jan 2022 14:57:28 +0000
ROA not before: Sat 01 Jan 2022 14:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34554
IP address blocks: 185.196.128.0/22 maxlen: 22
80.75.112.0/20 maxlen: 20
2a01:6a8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70953463 (0x43aa9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Jan 1 14:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5075676d722f8064e6121cdf268d23fcbaa07153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:9d:5b:f1:1c:14:5c:44:0c:fa:86:b3:4f:
2b:ee:36:55:ef:e2:d4:cd:4b:26:79:a7:93:fc:01:
bb:22:11:71:12:47:f0:05:73:db:84:86:25:b4:46:
5a:3d:5c:bd:0b:a9:e9:b6:11:87:27:b6:16:a8:9b:
08:31:aa:a4:9b:34:be:91:7d:bc:00:78:cd:18:65:
ed:17:2a:34:2c:aa:43:d5:fd:13:42:ca:1a:be:e9:
07:48:95:cd:37:b6:44:1a:3a:a1:90:c8:8c:4a:d2:
2e:96:03:13:e4:ab:93:4a:30:e8:05:05:95:08:63:
95:ee:fb:1d:7f:68:b8:61:f2:4a:3f:2f:9a:f5:d7:
ef:6e:cc:cd:61:de:64:b0:9d:9a:a8:99:70:9d:c1:
de:59:76:e5:e0:3e:8d:5e:aa:94:48:7a:e9:65:0d:
c1:7f:dc:71:1e:a0:1d:6e:e6:03:0b:45:e2:ac:b0:
7c:12:b6:5f:71:91:dc:c1:c6:28:69:66:e6:fe:b6:
bc:2e:4b:1b:91:88:bf:e7:fe:45:ef:6f:7e:18:1c:
fd:e3:03:60:c2:db:b3:63:c8:5f:29:23:23:74:96:
c3:37:bc:42:fb:82:cf:ec:58:36:84:ff:a7:1a:50:
5b:34:3a:f1:91:08:6d:78:fb:79:e3:8e:a1:57:93:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:67:6D:72:2F:80:64:E6:12:1C:DF:26:8D:23:FC:BA:A0:71:53
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/UHVnbXIvgGTmEhzfJo0j_LqgcVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.112.0/20
185.196.128.0/22
IPv6:
2a01:6a8::/32
Signature Algorithm: sha256WithRSAEncryption
ba:be:b1:83:bb:08:fb:df:4a:1f:8f:70:41:f9:57:2e:10:ed:
cb:96:c5:eb:c6:89:01:87:d6:34:8c:fd:e6:a0:07:45:e3:66:
b1:73:93:70:fe:e2:2b:0c:5c:c7:87:c1:f2:e7:b7:88:ff:db:
32:c9:09:49:ba:4b:c4:eb:8a:4d:b9:46:81:36:0e:2c:06:0b:
75:93:4a:98:ac:2e:7b:89:a1:3a:68:d6:af:6f:bc:b4:56:00:
e0:7d:74:15:d0:69:1b:14:1b:8a:84:bc:d4:1e:2c:90:8b:19:
be:78:d7:d0:82:60:bb:c7:d4:61:9e:c5:26:d5:f5:d5:70:4b:
04:a5:2e:7b:b7:9e:6d:6b:fd:5f:23:82:80:51:5c:29:94:20:
92:6d:18:0a:0b:2b:ba:7c:56:86:86:25:f2:9e:7e:9f:63:41:
57:1b:a7:6d:74:97:8a:26:a2:e8:30:ea:81:00:22:77:3b:23:
b5:ce:f0:77:70:7b:fa:c7:41:1a:8a:ba:07:88:b8:94:7f:24:
70:3f:84:57:42:6d:1e:54:d4:e4:77:0d:d9:17:d1:09:a7:91:
08:48:5c:53:f9:82:08:69:04:37:e2:87:e2:13:b6:ba:77:e3:
f8:f0:7d:0e:31:e2:d9:1c:81:a7:b2:c9:76:09:d9:0a:89:29:
0d:f6:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:42 2025 by rpki-client