Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/UyX4XfPau4SgRLCTZOU2DCMHCds.roa
File: UyX4XfPau4SgRLCTZOU2DCMHCds.roa (raw, json)
Hash identifier: FkUXcwZCV2EwVXZJGNetxjeZNvuY3aRnYzdMeTLQ3ZY=
Subject key identifier: 53:25:F8:5D:F3:DA:BB:84:A0:44:B0:93:64:E5:36:0C:23:07:09:DB
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 04DE7C60
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/UyX4XfPau4SgRLCTZOU2DCMHCds.roa
Signing time: Tue 12 Apr 2022 08:17:01 +0000
ROA not before: Tue 12 Apr 2022 08:17:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206248
IP address blocks: 212.113.99.0/24 maxlen: 24
212.113.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81689696 (0x4de7c60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Apr 12 08:17:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5325f85df3dabb84a044b09364e5360c230709db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:9d:13:72:44:bb:cd:08:52:58:c6:30:38:
f8:ac:09:55:d8:d4:a1:4f:75:47:d8:fa:8f:a7:88:
64:bd:bb:f1:96:ff:e5:e7:2c:40:7e:05:15:2d:d1:
23:bc:b4:de:cd:a0:2a:ea:8e:a6:b2:4b:83:86:c2:
dc:a8:b4:94:40:4c:66:75:e4:1a:13:3a:59:f9:1c:
87:90:cf:ce:94:e9:d5:9a:fa:64:31:6e:81:06:1c:
6c:0d:20:40:84:ea:6c:a6:b5:10:0f:bf:26:37:c4:
a5:11:47:68:25:30:84:38:bd:aa:45:cd:cc:d2:07:
46:fc:54:d4:54:84:b9:56:29:be:19:e3:93:41:a2:
54:44:26:2c:28:e2:33:1b:3d:a3:cf:c1:e2:5e:25:
9a:d3:db:01:ba:8e:c4:44:3d:a3:bc:83:9e:66:ee:
7a:16:8a:9c:e3:2c:f0:bd:62:f8:d6:7c:9c:d8:ae:
4b:c5:c7:3c:50:ba:34:bb:11:ea:a0:c4:68:13:17:
ff:c0:02:3b:d2:53:6b:fa:29:e7:6a:75:8f:ee:cc:
d2:75:8a:b2:00:76:ed:89:85:ca:9a:e9:30:24:06:
7e:ab:2d:c6:e2:d4:70:9e:72:40:1c:b5:36:b9:f4:
ae:1a:f4:1c:b0:c1:27:b9:26:03:cf:26:4d:7f:5c:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:25:F8:5D:F3:DA:BB:84:A0:44:B0:93:64:E5:36:0C:23:07:09:DB
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/UyX4XfPau4SgRLCTZOU2DCMHCds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.99.0/24
212.113.109.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2e:ec:32:71:82:4e:a3:28:ba:70:33:e8:28:8b:d9:66:92:
5f:97:30:3d:0c:d3:67:4d:e4:e2:35:4a:1f:e2:f8:b7:4e:37:
c4:91:eb:b3:d3:7e:48:9b:88:c1:e6:59:93:bf:8d:7e:54:71:
4c:b9:2c:f3:99:fd:a1:66:89:26:44:c0:50:a0:bf:e3:88:80:
88:aa:f7:d3:5b:8a:bc:f9:97:a1:7e:f7:d4:48:cf:ce:f4:ff:
a2:2f:c4:9c:b4:46:1e:ca:01:c7:6a:65:c4:ff:da:bb:1f:a9:
cb:41:bb:10:da:40:54:3b:90:97:8b:2d:dc:be:5c:8a:d8:64:
3e:76:30:6b:e1:2c:3e:60:8d:fd:99:05:b3:b0:18:e1:cf:72:
61:bc:b5:98:7e:0f:c1:c2:cf:9f:10:8e:fb:c2:04:df:d0:40:
c9:bf:de:0a:5b:3b:7d:04:e2:ba:57:86:dd:ee:f3:de:ff:19:
e4:9f:55:b6:b0:8c:4b:dd:ec:db:40:73:bf:e7:14:58:69:2a:
1b:07:ab:f6:76:d9:f7:87:f8:2d:d4:0a:e3:4d:95:15:83:fe:
90:5a:72:ac:47:b7:6b:4c:94:d6:2a:bc:4e:83:8d:d6:cb:f7:
0b:52:22:d1:58:c3:3c:fa:51:5c:77:9c:a0:0c:c3:dd:60:76:
1f:41:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:35 2025 by rpki-client