Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/UIsvw52jvG97rYYYUmlYobefN5U.roa
File: UIsvw52jvG97rYYYUmlYobefN5U.roa (raw, json)
Hash identifier: +nZZmR86Vg7xS6BffLYtpkK+80A5+q41Wn2msj49G50=
Subject key identifier: 50:8B:2F:C3:9D:A3:BC:6F:7B:AD:86:18:52:69:58:A1:B7:9F:37:95
Certificate issuer: /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial: 04FAF57C
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/UIsvw52jvG97rYYYUmlYobefN5U.roa
Signing time: Mon 27 Jun 2022 12:09:01 +0000
ROA not before: Mon 27 Jun 2022 12:09:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201471
IP address blocks: 176.223.248.0/23 maxlen: 24
84.40.0.0/20 maxlen: 24
84.40.32.0/21 maxlen: 24
2001:67c:4dc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83555708 (0x4faf57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
Validity
Not Before: Jun 27 12:09:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=508b2fc39da3bc6f7bad8618526958a1b79f3795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:a2:d5:84:ac:ea:df:f6:39:fa:b9:48:f9:
9c:3e:9f:e5:87:92:fd:ce:d8:03:e1:ae:43:f8:89:
b0:c8:ce:77:e4:7f:c1:72:12:cd:3f:f0:a2:60:55:
c9:4b:86:bc:4e:69:08:f5:f9:fe:a7:16:1d:51:41:
c6:34:af:01:85:aa:34:ac:aa:5a:99:69:b5:1b:83:
bb:e3:a6:53:99:58:4e:46:65:e9:48:87:b3:cb:7a:
39:71:69:65:4f:62:e7:af:7a:6a:c0:1e:fc:01:20:
9c:3b:37:a2:a6:c7:72:d5:9b:23:6a:d4:50:52:d1:
46:22:22:4c:02:b2:80:7d:12:19:ae:96:fb:e9:5c:
16:e3:ae:f1:46:3c:72:d1:d7:8c:01:0f:ad:3b:3d:
b8:b0:6a:27:27:55:15:f3:14:49:8a:58:68:7e:b9:
36:9b:58:70:e5:a8:1b:da:0a:d2:94:41:6b:5f:7a:
d9:74:b1:63:c2:54:3c:c1:95:44:11:39:b6:5e:e7:
44:c1:1b:dc:ab:d0:ee:a2:4b:c7:13:98:d1:59:6e:
ae:f6:5a:00:13:3f:17:31:2a:d8:69:25:fd:38:2d:
83:45:3f:03:a9:5f:b1:bb:22:80:c0:39:16:f6:ff:
1f:69:07:65:0f:00:9a:4a:ec:47:e8:77:c8:0d:56:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8B:2F:C3:9D:A3:BC:6F:7B:AD:86:18:52:69:58:A1:B7:9F:37:95
X509v3 Authority Key Identifier:
keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/UIsvw52jvG97rYYYUmlYobefN5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.0.0/20
84.40.32.0/21
176.223.248.0/23
IPv6:
2001:67c:4dc::/48
Signature Algorithm: sha256WithRSAEncryption
69:94:4f:dd:78:8f:f8:ee:10:b8:8b:1a:6a:e5:be:16:51:1f:
bd:84:44:99:ae:3a:67:1d:4d:de:5f:27:d5:04:61:2c:5b:cd:
32:79:66:df:48:64:40:fc:c5:9b:24:42:bb:3e:48:4b:cb:0d:
61:e1:92:52:9a:f8:cd:85:66:ee:5a:22:d4:b0:96:7e:de:89:
96:9f:80:0a:c2:4f:58:cf:21:a7:3a:8f:9a:09:f5:7f:89:61:
5d:46:9c:fa:7f:b9:39:d6:5d:ad:f1:dc:15:f3:88:5d:10:fb:
f5:f1:ac:45:cf:0c:19:3d:65:10:1e:8b:6c:53:ef:cb:b9:fc:
98:63:91:06:8a:5c:8a:9d:1f:fd:dc:12:5f:c7:f0:3a:75:43:
19:b7:4b:aa:b5:93:c3:08:0d:de:33:7b:bb:fa:49:3c:69:04:
15:0b:3d:1c:51:80:b0:06:cb:c5:c7:91:b2:df:96:8e:99:d5:
e7:c0:d5:d2:9d:c6:40:5a:c9:8e:91:8c:21:1c:fe:7d:bf:ff:
d5:ba:29:56:74:1b:7b:6a:73:8c:9a:e9:48:80:67:b9:dd:47:
99:44:f9:da:a1:a2:43:1a:79:1c:f1:82:06:a1:0e:db:8a:be:
0a:8d:17:54:ba:7b:a4:99:da:49:39:eb:42:be:f5:83:5c:1b:
fc:82:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:34 2025 by rpki-client