Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uJhMbpFNrNVSA_V-6SRJofqH8LU.roa
File: uJhMbpFNrNVSA_V-6SRJofqH8LU.roa (raw, json)
Hash identifier: SM/qFBMelcxsE5s8BUsoz3LtVm/hMInQdEthghgv3qY=
Subject key identifier: B8:98:4C:6E:91:4D:AC:D5:52:03:F5:7E:E9:24:49:A1:FA:87:F0:B5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2768883E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uJhMbpFNrNVSA_V-6SRJofqH8LU.roa
Signing time: Sat 01 Jan 2022 16:07:56 +0000
ROA not before: Sat 01 Jan 2022 16:07:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 92.38.42.0/24 maxlen: 24
92.38.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661162046 (0x2768883e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8984c6e914dacd55203f57ee92449a1fa87f0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:29:69:a0:44:b8:c2:20:f2:80:47:9b:7e:
54:65:58:a5:1f:6f:d2:45:96:5f:c3:31:aa:1d:3e:
d1:8d:51:3b:30:74:83:72:7d:99:23:44:e7:ae:c2:
05:69:2c:7d:cc:31:22:fe:48:d2:17:26:d5:05:a5:
c8:43:09:4a:c6:ce:32:67:81:da:64:b1:e7:d2:fd:
a3:5f:6f:9a:93:b7:30:b8:d6:7e:83:63:7a:94:f0:
2b:d5:1f:fd:12:a7:71:2e:ab:ff:9f:03:04:f0:42:
ad:a3:34:2c:b2:df:de:e4:86:48:b1:93:97:bf:3d:
eb:ac:a1:09:11:0a:c0:c4:01:70:68:90:1d:50:4b:
9f:58:db:34:eb:34:18:40:f4:31:53:d2:6e:8b:2b:
7c:30:23:5c:5f:ad:9b:4b:d4:93:7a:2b:b4:7d:1a:
69:33:00:23:ef:c9:71:93:92:6b:77:c1:6f:ef:8e:
1c:45:0c:93:b9:d8:ab:37:b8:17:da:cd:a8:44:9d:
84:89:3c:a9:f2:87:3f:78:a2:19:ab:70:c8:40:8c:
05:10:d7:94:95:b8:80:88:ff:6b:6f:d4:e4:a4:dc:
a1:a5:f5:c0:fb:1e:cd:a2:52:8f:a5:59:84:f1:42:
93:83:bc:7d:97:43:2b:c8:ce:1f:2a:40:63:b3:8a:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:4C:6E:91:4D:AC:D5:52:03:F5:7E:E9:24:49:A1:FA:87:F0:B5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uJhMbpFNrNVSA_V-6SRJofqH8LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.42.0/24
92.38.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:c3:5c:28:4d:79:41:84:0f:61:d6:47:63:2a:a5:b6:b6:17:
18:32:94:63:bc:3d:8a:60:21:71:e7:08:a0:34:5b:f5:15:36:
c2:75:74:48:93:93:b7:03:b6:5c:a8:03:e7:db:ed:80:57:bb:
e1:aa:e2:b9:dd:94:d6:14:70:a0:a8:72:6e:cc:2d:58:b1:65:
dc:fa:ff:c9:33:45:97:70:6c:fa:ff:45:5a:b6:01:46:df:01:
34:d8:45:f7:4b:a7:a6:51:0a:3e:32:ef:27:99:f9:d4:e4:50:
9c:6e:8c:86:04:7d:89:cb:60:f3:a0:2a:35:70:e3:f2:01:97:
cd:b4:9d:5f:5f:5a:b0:dd:a2:aa:d4:01:f8:2f:c9:9e:6f:1f:
b8:72:1a:af:40:1a:a4:25:b3:b8:51:34:61:cc:d3:8f:5c:0e:
f5:71:99:f5:d7:79:0e:fd:33:9e:67:7c:24:41:77:b4:8a:e5:
1d:bb:e7:0d:00:3b:d0:59:a9:8b:3f:34:4d:8f:86:28:64:c5:
04:c7:90:25:09:b1:18:31:96:36:21:39:8d:ff:7e:5a:dc:3a:
11:d3:82:7b:06:fb:5c:29:ac:b6:07:05:21:32:63:a2:b2:84:
f3:75:ee:67:50:49:e4:dc:bf:e5:2f:d3:a9:85:47:e0:90:c6:
47:b3:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:17 2025 by rpki-client