Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UzacaWoDPxGuAvu_37-eVQnxBVo.roa
File: UzacaWoDPxGuAvu_37-eVQnxBVo.roa (raw, json)
Hash identifier: UtZSB7eExQuDYLdA6cAcM1Rk1hYdvJ242BJZ/ybxf0M=
Subject key identifier: 53:36:9C:69:6A:03:3F:11:AE:02:FB:BF:DF:BF:9E:55:09:F1:05:5A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27C661EF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UzacaWoDPxGuAvu_37-eVQnxBVo.roa
Signing time: Sat 01 Jan 2022 16:08:50 +0000
ROA not before: Sat 01 Jan 2022 16:08:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52114
IP address blocks: 93.171.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667312623 (0x27c661ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53369c696a033f11ae02fbbfdfbf9e5509f1055a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:71:c2:73:b5:25:cb:1c:b0:d0:ed:d3:a9:
2e:f3:6c:e8:50:0d:0c:31:ef:6a:79:9a:c5:ca:d9:
95:5a:b2:7c:09:fe:db:54:ef:47:77:ff:a4:6a:f2:
ef:9a:99:19:0d:37:4b:97:5b:4e:60:68:e0:c7:21:
08:50:88:d4:e3:62:ac:31:2d:67:dc:2f:0a:0a:9e:
9d:95:6b:bc:7b:be:8a:ff:47:d6:05:4c:21:e4:3e:
31:ee:a5:df:91:67:59:27:cb:21:cb:40:d1:f3:05:
57:e8:39:ff:d9:a7:31:e2:2d:f7:e0:c2:46:e4:20:
e4:93:54:2a:48:86:79:b1:5d:98:b3:88:6e:7a:65:
22:c7:a1:02:58:f9:cd:e7:ca:2f:b0:7c:ae:6d:29:
f5:f7:29:13:c3:f4:5e:ac:ba:ae:e5:ab:59:a6:47:
b4:d4:2f:22:5e:e7:d3:3f:bd:ed:4e:eb:57:64:19:
c5:13:28:6c:5c:44:ea:d4:d3:75:69:bb:b7:dc:f1:
70:94:a1:eb:63:55:8c:43:aa:0c:f2:cb:13:72:ae:
ae:da:c4:ff:c7:a3:da:85:ef:9c:9f:79:38:25:bf:
34:bb:c1:01:d8:5f:57:1c:d5:78:42:8e:9a:ef:46:
69:17:ff:2f:55:16:cb:c8:89:51:10:7b:cb:bf:e0:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:9C:69:6A:03:3F:11:AE:02:FB:BF:DF:BF:9E:55:09:F1:05:5A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UzacaWoDPxGuAvu_37-eVQnxBVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.176.0/24
Signature Algorithm: sha256WithRSAEncryption
09:56:68:57:a0:e7:39:d3:69:63:5c:3f:27:92:f3:a5:4f:73:
94:23:02:d8:23:87:26:9b:f7:78:e7:f1:a1:9e:fb:52:e0:5b:
6f:d7:01:6f:f6:20:2d:4c:58:65:c4:5e:97:3d:c7:99:98:f9:
6b:65:aa:8d:97:b3:cb:aa:04:34:f5:97:82:28:ff:8c:49:e9:
34:23:56:bb:32:e8:4f:fa:5d:5a:90:cc:5a:44:56:15:c5:f1:
8d:8e:ab:6c:ef:b0:6e:05:69:42:2a:96:b2:0c:b3:60:5f:db:
d9:ee:42:59:9c:e6:25:db:ff:4e:8f:e5:80:05:25:8c:51:ea:
e3:23:20:c3:24:8d:3f:7e:8b:9f:32:b6:57:20:45:72:2c:c0:
97:ce:c1:55:39:7f:87:2e:93:00:d8:a2:9b:2e:58:f4:76:cd:
83:81:84:32:7f:17:86:0a:30:5d:c5:3f:6c:27:ca:f2:14:94:
a0:04:ae:6a:26:fb:50:89:f1:06:e2:44:b9:c9:ad:2e:d9:50:
e0:97:9b:fa:0e:dc:3e:71:61:c2:9c:ca:77:e4:33:01:93:b4:
46:2f:31:cd:b6:0f:c1:38:1d:21:1e:a1:ce:c4:77:49:97:2b:
26:45:fb:44:12:36:f4:e8:29:e6:e1:f5:e2:f4:08:de:77:74:
b3:16:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:35 2025 by rpki-client