Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/UW2St_GrJESHVSsJJUpPS_lfYK0.roa
File: UW2St_GrJESHVSsJJUpPS_lfYK0.roa (raw, json)
Hash identifier: cu1Whzq/2GVuiIW64VRlM9hz7alIOdoY58QwxyJ2F3c=
Subject key identifier: 51:6D:92:B7:F1:AB:24:44:87:55:2B:09:25:4A:4F:4B:F9:5F:60:AD
Certificate issuer: /CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
Certificate serial: 018442B37FC3291FEE8A8D1F63A298D2BA2D
Authority key identifier: 33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/UW2St_GrJESHVSsJJUpPS_lfYK0.roa
Signing time: Fri 04 Nov 2022 12:52:50 +0000
ROA not before: Fri 04 Nov 2022 12:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56655
IP address blocks: 91.196.6.0/24 maxlen: 24
2a12:64c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:42:b3:7f:c3:29:1f:ee:8a:8d:1f:63:a2:98:d2:ba:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335d831afcc9d74ccf3ee40a0eb68f99085b98dd
Validity
Not Before: Nov 4 12:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=516d92b7f1ab244487552b09254a4f4bf95f60ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:13:48:9e:09:51:80:f6:3d:1e:50:30:93:8b:
ef:3f:bf:c3:6d:71:fb:da:1f:6b:e9:c0:c3:f5:f4:
83:88:03:e2:ea:dc:3b:de:5a:8f:77:cd:c5:d6:e6:
a5:38:e9:19:d0:14:03:6f:4f:4a:1b:4a:81:14:41:
b8:dd:b7:d4:af:ad:4b:d7:b8:80:bc:d3:06:31:41:
08:db:20:bf:54:83:b8:69:4a:86:11:1d:f4:51:b6:
0d:04:85:71:b5:fa:75:61:5a:82:bf:ab:22:65:4d:
a8:38:eb:f9:ba:39:05:e4:59:3e:75:d8:49:50:72:
7b:65:99:fd:01:4c:e5:2a:5a:9b:c7:e5:39:8b:ce:
ed:f7:7b:b7:99:ae:28:5f:09:31:e9:1e:b3:47:80:
ba:ba:80:31:ab:15:ba:9e:6d:01:2c:34:34:86:d4:
a1:38:11:10:60:d8:46:e4:db:8d:12:7f:d5:0c:c7:
e1:95:cd:69:74:1a:e1:28:b3:5f:2c:48:9a:f4:e0:
9b:07:83:7d:ff:53:8f:58:3e:24:1e:26:79:5e:55:
be:07:ae:73:aa:fe:77:f9:ea:47:2f:17:c3:c0:98:
16:d9:f9:6f:c0:69:f8:c3:5e:04:47:d1:70:6b:1c:
22:a3:1d:1b:51:76:01:83:9e:26:7c:1f:be:91:56:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:92:B7:F1:AB:24:44:87:55:2B:09:25:4A:4F:4B:F9:5F:60:AD
X509v3 Authority Key Identifier:
keyid:33:5D:83:1A:FC:C9:D7:4C:CF:3E:E4:0A:0E:B6:8F:99:08:5B:98:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M12DGvzJ10zPPuQKDraPmQhbmN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/UW2St_GrJESHVSsJJUpPS_lfYK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/59d987-fa5d-406f-9c6a-1d6076e0e290/1/M12DGvzJ10zPPuQKDraPmQhbmN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.6.0/24
IPv6:
2a12:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:fc:ad:0a:26:53:49:8b:82:58:44:31:d4:39:7f:e0:94:d3:
8e:f2:8a:e9:21:20:c3:79:8f:b1:66:21:6e:5c:e9:af:9c:ee:
97:30:45:ea:f1:0a:db:ec:a5:50:24:ea:03:ed:6b:26:59:43:
8b:58:47:42:c4:df:b6:19:57:86:e7:85:48:32:5b:fb:1a:92:
93:d8:0d:2e:27:cf:fd:4f:cb:66:d6:1d:86:16:ff:58:dc:ee:
70:e8:bd:89:2a:11:87:97:95:36:3b:4f:20:43:0d:66:c7:54:
ff:a1:9a:da:cd:38:f3:42:6a:ae:f7:cc:f8:b1:a8:f4:5d:b6:
fa:0d:6b:7b:b4:78:30:15:4c:64:71:83:d3:a7:65:c2:f1:39:
6b:d7:4d:aa:54:eb:f7:0f:e3:f3:1d:da:e8:23:c0:b8:5b:68:
49:b9:aa:bc:10:04:c8:e4:7b:0b:aa:23:f0:b5:dd:97:d2:f8:
3b:8a:95:78:3f:bb:07:1c:2c:1b:5e:e3:37:f0:48:07:24:d5:
1a:ae:4b:4d:af:f8:94:8c:5b:36:b4:8b:e8:04:10:e8:85:94:
f9:33:f9:f1:c3:d0:db:af:a1:82:7f:cd:be:11:35:0f:77:75:
41:f1:bc:b0:2b:ff:ca:b0:11:66:17:80:06:42:4e:54:72:e4:
4e:c5:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:25 2025 by rpki-client