Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/UwMdl6-yFjy14vuD1VuUouSAYb8.roa
File: UwMdl6-yFjy14vuD1VuUouSAYb8.roa (raw, json)
Hash identifier: 6bU/MZqwmqEP2VIuWKZZKCWqKY1q+tW6iA50csmu/Xg=
Subject key identifier: 53:03:1D:97:AF:B2:16:3C:B5:E2:FB:83:D5:5B:94:A2:E4:80:61:BF
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01856D8AD8253DF96C60AFFA31D4872CE8CD
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/UwMdl6-yFjy14vuD1VuUouSAYb8.roa
Signing time: Sun 01 Jan 2023 13:34:53 +0000
ROA not before: Sun 01 Jan 2023 13:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9384
IP address blocks: 37.128.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:d8:25:3d:f9:6c:60:af:fa:31:d4:87:2c:e8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 13:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53031d97afb2163cb5e2fb83d55b94a2e48061bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:c7:f1:79:3b:3d:e8:13:2a:eb:5e:57:b7:
8f:be:73:f0:54:e1:bd:36:e6:23:cc:eb:30:39:f8:
da:fb:ab:db:97:95:b1:94:a8:18:ee:af:c4:b4:d7:
fb:1b:70:e4:7c:a6:ff:c5:e1:42:cc:50:63:b7:fd:
a8:9c:08:a6:12:f9:fa:70:f6:35:ed:4f:5e:f4:41:
57:74:3f:b1:36:b4:e5:67:de:1f:45:e4:8a:d2:65:
8f:69:3b:11:12:09:e9:0f:01:64:8a:9b:89:ac:10:
63:41:ce:f6:b1:b2:cb:d8:89:a1:0f:fa:94:cf:65:
18:bc:d2:4e:50:91:07:b9:4b:6d:53:95:05:83:90:
f2:fe:a4:9f:27:b4:a3:d7:90:6c:1e:7c:84:f9:e6:
b1:e2:9d:39:54:26:bd:59:28:54:0b:c3:aa:15:d3:
1c:20:83:81:45:7b:29:2c:a6:21:71:e0:d5:15:85:
d9:ea:d7:9c:b6:bb:00:8e:34:6a:f3:38:ba:d3:85:
13:2e:73:34:6e:7e:28:80:9d:18:42:a5:8d:f0:2e:
54:7a:18:06:f8:a4:91:3c:f0:82:f9:96:c4:51:7f:
38:b7:d5:e7:b3:0f:93:eb:f0:19:ce:8a:d3:bf:99:
3c:52:dd:3c:78:55:c6:76:3b:44:4b:cf:c0:22:03:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:03:1D:97:AF:B2:16:3C:B5:E2:FB:83:D5:5B:94:A2:E4:80:61:BF
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/UwMdl6-yFjy14vuD1VuUouSAYb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.240.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:06:e5:6c:ac:00:c4:bb:ae:c8:63:12:f0:c4:5c:ac:77:64:
c4:f5:2c:5c:67:d2:63:ab:95:98:3d:ec:62:e3:4c:98:cd:7c:
77:ad:6f:98:f0:6a:c3:17:3b:26:c0:44:c3:71:99:d1:70:93:
ad:97:af:fd:a0:e9:68:da:d1:54:64:f9:ca:c3:15:da:37:c0:
56:db:9f:5f:1d:ab:38:7c:76:33:c1:17:59:a7:ab:a3:5e:9b:
a0:e9:1e:a3:68:91:d1:55:63:cd:1c:da:82:69:e3:6f:ff:12:
fd:0a:b8:b9:48:10:03:ff:2a:1a:2b:b5:c9:a7:c6:6e:c3:87:
18:0d:69:3c:9e:75:17:43:da:e3:c6:f3:ac:22:cf:ca:a6:83:
0b:da:59:dc:58:4b:72:de:d9:8a:49:01:6f:7b:e3:ad:5b:97:
b7:f9:54:76:65:0b:f2:e7:a9:c1:21:87:e1:86:a9:78:bc:3a:
f9:d7:5f:d1:6c:ad:89:7b:51:01:48:bb:8d:00:04:0a:cb:71:
78:d8:20:c4:cb:c9:36:f0:54:cd:99:f9:cd:db:04:12:63:27:
8f:70:2a:49:eb:da:af:95:51:37:b9:f8:bc:7a:e2:3c:a3:35:
91:cd:6b:a5:5c:61:a7:4b:9a:b4:5a:00:b5:52:5e:43:ea:37:
3f:a4:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:02 2025 by rpki-client