Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/UEApb0ZxKqskCY7qEd6y7tu6thU.roa
File: UEApb0ZxKqskCY7qEd6y7tu6thU.roa (raw, json)
Hash identifier: XyORFtgJ1Kw7Sbhiru2jeQfb1VHcgxgDMOv0yGbpwxU=
Subject key identifier: 50:40:29:6F:46:71:2A:AB:24:09:8E:EA:11:DE:B2:EE:DB:BA:B6:15
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0188306C276496877FB2932C9AD75ED1F068
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/UEApb0ZxKqskCY7qEd6y7tu6thU.roa
Signing time: Thu 18 May 2023 19:52:54 +0000
ROA not before: Thu 18 May 2023 19:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 91.147.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:6c:27:64:96:87:7f:b2:93:2c:9a:d7:5e:d1:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: May 18 19:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5040296f46712aab24098eea11deb2eedbbab615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:19:d4:33:b9:eb:a1:32:d6:f6:d4:24:f4:
1e:d3:db:ae:71:a5:fa:0a:f4:9b:e6:2c:12:64:c7:
a1:be:35:49:0e:2f:05:96:1b:f4:dc:e9:38:43:a8:
de:ad:34:f4:20:db:86:bf:f5:03:9a:37:b9:16:1f:
a6:b1:f3:b8:6c:c7:88:23:37:49:b2:39:98:1e:c7:
46:04:55:d4:79:14:f7:31:ec:81:5e:fe:ec:61:c3:
10:2b:61:ec:c7:56:01:b7:46:f0:69:c2:17:1e:39:
f6:84:af:6a:1a:e3:38:35:e2:08:d5:80:85:89:4e:
af:29:52:3b:05:3b:0e:af:5e:42:ce:fb:14:4b:0a:
15:a1:ca:64:4c:07:40:22:e7:db:e0:c2:f6:bd:d3:
bd:1c:8d:67:4a:d9:3c:cf:45:23:57:17:d1:df:ee:
18:96:1b:d3:51:4a:b2:8b:b4:71:f6:e3:0f:77:c8:
ef:71:33:e8:11:43:06:58:a2:63:ab:74:b7:e2:25:
5e:97:3f:de:b9:8a:f7:c3:61:58:3b:ac:e6:9b:02:
e6:5a:d1:1b:66:5e:ae:9c:e7:d5:d0:27:44:c6:53:
99:e7:c3:6d:d3:ac:46:f4:92:ac:4c:65:0c:10:37:
fc:ef:08:05:66:66:95:70:07:00:92:4d:8b:1d:c8:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:40:29:6F:46:71:2A:AB:24:09:8E:EA:11:DE:B2:EE:DB:BA:B6:15
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/UEApb0ZxKqskCY7qEd6y7tu6thU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:dd:1b:50:7a:c4:12:5d:88:37:4e:f6:09:a5:11:ef:de:62:
ab:4d:17:36:63:80:a7:33:0e:95:02:3a:06:e7:31:32:f0:8a:
20:f1:09:49:a8:da:b6:da:74:56:89:ea:ad:e3:d2:65:72:0e:
80:3f:00:cb:38:8f:f6:b4:08:b6:4d:9b:67:d5:37:56:e2:08:
76:d4:e2:b3:1a:42:9d:c9:cd:c1:72:76:8e:e4:ad:07:3a:75:
35:c2:5d:3b:d0:12:21:08:c3:13:f9:80:13:74:de:3a:58:4e:
a7:ea:ce:70:14:95:b7:14:1f:b9:02:8f:dc:de:03:52:af:8c:
b9:f7:4c:79:14:11:57:5f:ea:47:54:3e:c3:5c:9c:9d:0f:ee:
94:e9:fa:f5:91:17:bb:5e:3d:ec:6e:bd:84:cf:13:12:6a:90:
fb:67:e0:bb:e7:64:42:4c:29:ac:ab:03:4d:5d:81:f5:41:e9:
c0:51:d3:59:2f:61:0d:d8:1c:c5:c8:f5:3c:98:ce:83:7e:16:
5c:be:67:62:3b:c0:26:16:92:08:8c:d8:82:08:b2:01:1f:6e:
05:97:70:a0:b7:41:6c:c9:57:36:eb:73:ad:e6:21:cf:4b:be:
d8:9f:98:3b:c2:d7:d6:ce:27:d8:97:8c:25:03:42:d3:93:c7:
cc:66:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:41 2025 by rpki-client