Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UHT_XfAxKd-lf-ubU_lyds1Poa0.roa
File: UHT_XfAxKd-lf-ubU_lyds1Poa0.roa (raw, json)
Hash identifier: 7Iry7MAztVB4tGfq6RfLcV1N6/catMYR4YhvBFGDhrA=
Subject key identifier: 50:74:FF:5D:F0:31:29:DF:A5:7F:EB:9B:53:F9:72:76:CD:4F:A1:AD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957B07350E14D35CAB76AEDD07715F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UHT_XfAxKd-lf-ubU_lyds1Poa0.roa
Signing time: Mon 02 Jan 2023 03:45:22 +0000
ROA not before: Mon 02 Jan 2023 03:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61979
IP address blocks: 92.38.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:7b:07:35:0e:14:d3:5c:ab:76:ae:dd:07:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5074ff5df03129dfa57feb9b53f97276cd4fa1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:c6:fb:e0:a1:8f:83:52:92:7a:40:92:c1:
65:a3:37:79:0b:87:02:38:b0:3f:79:dd:29:f6:70:
5a:71:43:78:69:c1:f8:e5:40:6e:dd:5d:86:87:47:
c9:be:09:c1:e2:dd:48:15:9f:d0:8f:3f:b1:48:4f:
d8:e9:cc:fa:a3:46:93:17:04:83:fc:a9:a4:17:b3:
65:2d:5f:6e:1b:b5:8c:22:55:99:6d:d4:58:0f:66:
eb:b8:05:ec:46:6f:56:b4:43:d5:1d:6d:7b:04:92:
22:d6:49:fc:14:e7:38:f5:89:2d:9d:85:d1:d2:83:
f6:2c:0b:17:71:b0:37:eb:0d:6a:6b:ca:3f:c4:18:
80:0e:fd:d9:a3:c1:c4:9f:a1:69:8b:1c:b2:38:ef:
0e:23:74:b3:d9:a6:39:9c:5f:4d:2f:fe:59:89:2f:
21:98:eb:50:12:c5:a6:31:4a:8b:8c:0f:7a:d3:13:
82:73:82:51:b3:57:51:7e:e8:b1:e0:b0:a2:2d:e1:
89:10:38:75:90:06:61:5f:ee:b6:0b:4e:15:97:fb:
0b:e5:e8:5d:03:33:66:f1:e1:fc:a5:02:74:19:c4:
ab:0a:57:cb:55:d3:d0:cf:c1:f3:dd:bd:ca:c7:1e:
54:9a:08:58:1d:7b:fd:f5:4b:42:52:6a:1d:b6:da:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:FF:5D:F0:31:29:DF:A5:7F:EB:9B:53:F9:72:76:CD:4F:A1:AD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UHT_XfAxKd-lf-ubU_lyds1Poa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:37:cc:10:26:e5:32:da:c5:f7:8b:51:18:24:f0:48:0d:0b:
0b:7e:52:33:7b:3f:c5:22:0e:a7:80:1d:5e:32:2e:49:9c:a6:
da:a9:a6:1e:ff:56:86:e5:db:94:72:8d:fb:1e:db:c8:ed:85:
5a:bd:21:02:9d:3a:8a:b0:09:e1:ee:3d:65:65:a7:0a:ed:79:
f9:cf:3c:81:60:f8:4f:f2:d8:cc:7e:55:01:d3:e6:38:99:ea:
c0:95:6d:bf:b2:7b:0d:36:ea:9b:67:28:72:2c:72:8e:36:bb:
28:84:44:c9:e6:d2:17:91:02:76:00:e8:8d:c6:c5:dc:58:45:
ea:c1:2f:c1:d0:92:b0:53:33:38:26:d9:35:c2:71:7a:d0:66:
42:d3:65:c7:e0:f7:88:99:6e:30:3a:eb:4d:82:e0:1d:bd:ce:
99:be:0a:68:fa:e2:48:7b:24:a4:1b:3e:2d:b6:25:5f:79:07:
a3:d4:1f:dd:75:28:18:3b:25:ec:79:04:7c:0c:be:9b:a1:2a:
0e:ab:ac:15:09:55:76:77:ea:a5:ec:f8:84:0c:15:03:a3:fd:
55:45:30:cd:66:aa:f6:ba:a6:98:08:37:39:0a:5d:f5:b9:bc:
39:f2:0c:ea:e3:15:35:01:da:b8:69:4f:28:35:fb:ac:de:0d:
3b:37:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:43 2025 by rpki-client