Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/UktzYpKL0CY2PQaHPlJgUcHgSzY.roa
File: UktzYpKL0CY2PQaHPlJgUcHgSzY.roa (raw, json)
Hash identifier: 6rT6GA+fTeo5xOKszx49vePKeEy3clitCUUW3A1BLgI=
Subject key identifier: 52:4B:73:62:92:8B:D0:26:36:3D:06:87:3E:52:60:51:C1:E0:4B:36
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 0185702702F822007893C0A751B0FBFF5305
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/UktzYpKL0CY2PQaHPlJgUcHgSzY.roa
Signing time: Mon 02 Jan 2023 01:44:42 +0000
ROA not before: Mon 02 Jan 2023 01:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199346
IP address blocks: 185.12.158.0/23 maxlen: 24
81.24.248.0/21 maxlen: 24
2a03:2240::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:27:02:f8:22:00:78:93:c0:a7:51:b0:fb:ff:53:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Jan 2 01:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=524b7362928bd026363d06873e526051c1e04b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:46:ba:4c:18:c8:43:f1:46:b1:02:f1:cd:
a6:a0:3d:52:4d:22:75:ee:e7:66:bf:1a:46:5f:a7:
bd:ab:07:03:a8:99:1a:fc:07:e0:12:aa:85:6b:dc:
8f:14:cc:fe:ed:51:71:77:42:ff:94:7b:46:c8:69:
06:3a:2c:f6:e6:74:7b:ce:9f:2e:6a:1a:31:d7:84:
94:93:84:cb:b1:10:20:76:c8:66:d1:87:b0:f2:fa:
1e:ec:62:57:3c:21:b0:e0:80:fa:3c:47:70:e3:35:
5c:27:69:35:6b:30:a0:58:35:2f:d2:84:b0:17:90:
ba:66:57:95:b6:f5:30:6d:56:73:60:0c:e5:9f:5c:
04:f0:61:a7:ff:4a:fa:30:bb:30:f6:29:a0:31:78:
06:54:a9:ac:49:37:91:e3:a4:93:23:08:7f:a5:34:
0a:df:03:77:99:19:93:eb:47:65:a5:40:34:f8:67:
9a:b5:33:b1:b1:af:74:13:1a:8b:25:51:17:3a:84:
8d:fd:dd:64:0e:17:79:20:a8:04:76:bb:59:e7:38:
a6:6e:98:df:c8:4e:78:51:7e:99:18:01:39:1c:e0:
ff:40:e9:7f:23:a6:93:65:8f:65:8e:60:f9:6a:7c:
98:67:1e:77:d2:19:15:71:05:1b:b1:4e:62:fa:ca:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:73:62:92:8B:D0:26:36:3D:06:87:3E:52:60:51:C1:E0:4B:36
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/UktzYpKL0CY2PQaHPlJgUcHgSzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.248.0/21
185.12.158.0/23
IPv6:
2a03:2240::/32
Signature Algorithm: sha256WithRSAEncryption
53:ac:d4:5c:f3:8e:9c:91:4a:ae:23:7b:07:87:bd:79:15:d6:
d6:e8:70:32:63:8f:6a:a4:89:0d:66:69:99:f1:ec:38:6f:1e:
8f:fe:37:7c:88:c7:66:4c:cf:7b:2b:d9:54:e6:c1:d4:95:17:
0f:5b:aa:53:c5:a8:75:ae:c0:db:6e:37:3e:d4:b9:9e:40:d5:
80:7a:21:ee:74:d1:ba:71:1f:27:98:b9:1e:fe:d6:3f:06:cd:
66:7e:95:78:f9:c2:c6:59:fc:86:ba:1a:1f:13:a4:6f:4a:78:
61:9d:c5:2d:05:d3:16:22:53:ba:f7:5e:74:8b:1f:4f:06:f3:
6d:80:c7:0f:66:03:3a:92:f1:d7:ba:3a:81:1c:dc:09:87:62:
39:e6:5e:6f:49:33:41:fe:ee:e5:9f:42:6f:d9:de:da:f8:32:
40:55:4f:7b:9f:4a:04:29:40:80:dd:09:cb:4d:de:07:7b:8f:
7c:5b:7c:44:eb:c7:99:ca:6b:c9:0a:bd:2a:31:2d:97:d6:68:
12:7b:e8:00:ec:4d:f2:71:4a:30:54:68:e0:76:0c:af:20:89:
c3:6e:c3:97:58:0c:f5:30:e3:d6:89:a9:43:90:1b:59:c8:91:
06:a4:8d:a7:74:24:72:5a:67:00:39:d1:93:77:26:fb:2f:ec:
8f:0d:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:58 2025 by rpki-client