Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/UhXZ_bVmsghW548aiNoOs6e5qEM.roa
File: UhXZ_bVmsghW548aiNoOs6e5qEM.roa (raw, json)
Hash identifier: KOGvZcUNur4TFuKH0x5jcnXQ6MZvrRwKbmK7aqszX2Y=
Subject key identifier: 52:15:D9:FD:B5:66:B2:08:56:E7:8F:1A:88:DA:0E:B3:A7:B9:A8:43
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 097263F5
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/UhXZ_bVmsghW548aiNoOs6e5qEM.roa
Signing time: Wed 26 Jan 2022 07:55:47 +0000
ROA not before: Wed 26 Jan 2022 07:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43019
IP address blocks: 77.75.91.0/24 maxlen: 24
77.75.89.0/24 maxlen: 24
77.75.90.0/24 maxlen: 24
77.75.88.0/24 maxlen: 24
77.75.94.0/24 maxlen: 24
77.75.95.0/24 maxlen: 24
77.75.93.0/24 maxlen: 24
77.75.92.0/24 maxlen: 24
185.206.203.0/24 maxlen: 24
185.206.201.0/24 maxlen: 24
185.206.202.0/24 maxlen: 24
185.206.200.0/24 maxlen: 24
2a0b:3f80:0:204::/64 maxlen: 64
2a0b:3f87:fc1b::/48 maxlen: 48
2a0b:3f87::/32 maxlen: 32
2a0b:3f87:fc20::/48 maxlen: 48
2a0b:3f87:fc19::/48 maxlen: 48
2a0b:3f80:0:203::/64 maxlen: 64
2a0b:3f80:3::/126 maxlen: 126
2a0b:3f80:2::/126 maxlen: 126
2a0b:3f80::/29 maxlen: 29
2a0b:3f87:fc1a::/48 maxlen: 48
2a0b:3f80:0:201::/64 maxlen: 64
2a0b:3f80:0:202::/64 maxlen: 64
2a0b:3f87:fc18::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158491637 (0x97263f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jan 26 07:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5215d9fdb566b20856e78f1a88da0eb3a7b9a843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3a:b8:fc:c9:9a:6e:44:a0:c8:d3:02:2c:95:
5e:6e:50:6d:48:02:93:40:61:bb:28:9c:a0:86:be:
c8:db:d7:3a:fd:10:ff:0b:31:4c:df:6d:79:14:f9:
ca:33:07:9c:9d:cf:ce:81:b6:75:be:7a:1f:bf:82:
49:26:39:11:a6:8d:bb:a9:5b:43:54:da:4b:6c:88:
44:81:47:21:8e:68:7c:fd:4d:d0:ee:4f:f0:c9:2e:
b9:f4:75:ce:7f:83:32:b4:b8:30:0c:7b:37:21:39:
b8:1d:dd:3f:dd:d4:eb:e0:a4:97:c2:38:6c:72:fa:
d6:70:cf:97:d5:9b:1e:54:a0:53:69:50:75:f4:3c:
8a:d1:b1:97:8c:9a:a2:f2:cc:8f:87:f9:bf:5c:6e:
75:c8:81:b6:e0:f5:21:3c:57:ed:47:b3:e0:2e:eb:
dc:c4:87:4a:e3:ab:40:12:73:d2:b5:08:9e:1f:b9:
59:76:e6:87:97:ad:dc:0c:68:28:23:b3:5c:55:60:
2b:41:51:29:69:fb:96:bb:2c:68:00:74:e2:99:81:
1d:2e:8b:10:c5:40:5f:14:72:fd:92:da:00:a2:2c:
6e:8e:9c:e6:ee:52:5b:dc:f3:09:00:1a:0c:b2:31:
38:44:3d:db:c5:0c:31:49:4f:21:28:66:d4:de:97:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:15:D9:FD:B5:66:B2:08:56:E7:8F:1A:88:DA:0E:B3:A7:B9:A8:43
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/UhXZ_bVmsghW548aiNoOs6e5qEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.88.0/21
185.206.200.0/22
IPv6:
2a0b:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
87:ca:6c:24:a4:00:04:9f:83:82:86:f0:79:6d:8f:04:09:32:
d3:b7:29:0e:cd:ed:5f:e3:7e:0e:ae:d6:ba:00:18:5d:3f:9a:
83:c0:34:2d:3d:1f:08:10:5f:16:31:2a:b3:5a:33:e7:63:6e:
1a:ca:6a:06:e6:df:05:97:5a:14:62:93:29:dc:51:e5:e6:89:
1d:cb:e0:75:73:2b:09:45:bd:0b:f0:5e:d2:a0:8e:0d:be:6e:
e5:43:f0:f6:a1:9f:81:29:da:c4:24:4a:da:d2:be:a6:4d:25:
a2:78:4a:e8:cd:03:30:4a:c6:0f:7d:65:45:3f:94:46:3b:21:
5c:47:da:6f:3b:96:f2:71:77:f9:44:3e:62:8a:24:93:51:77:
88:d0:8d:64:c3:ff:99:62:4f:fc:6c:59:38:1e:76:86:dc:ca:
ee:ce:d5:4b:8b:fd:c8:c2:91:24:7c:ac:73:10:57:95:a0:34:
7d:0a:40:31:ec:e2:74:a7:54:23:4e:b9:26:5e:66:14:4c:48:
af:fc:cb:d1:df:55:16:54:17:f1:8c:ca:d6:2c:83:87:9a:a8:
4d:88:e5:d9:6a:d0:ba:17:c6:c0:c6:d4:b2:71:0e:e9:a5:a7:
45:ee:c7:9f:ae:32:fa:30:4f:6f:55:eb:eb:7b:91:31:66:fe:
21:60:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:22 2025 by rpki-client