Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/UqbiSoz7jihAdMeFUQtPSxC4vJU.roa
File: UqbiSoz7jihAdMeFUQtPSxC4vJU.roa (raw, json)
Hash identifier: 39SH/2JsmeCWyHvPclG4GHS+Bv7nxiUeW4JScvKV4sY=
Subject key identifier: 52:A6:E2:4A:8C:FB:8E:28:40:74:C7:85:51:0B:4F:4B:10:B8:BC:95
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 0403AF2B
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/UqbiSoz7jihAdMeFUQtPSxC4vJU.roa
Signing time: Sat 01 Jan 2022 08:01:28 +0000
ROA not before: Sat 01 Jan 2022 08:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204544
IP address blocks: 185.53.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67350315 (0x403af2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Jan 1 08:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52a6e24a8cfb8e284074c785510b4f4b10b8bc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:71:8f:22:23:1b:6b:57:2c:fc:3d:ff:9e:
07:b7:e0:1c:59:6c:08:12:bb:db:c4:23:88:a6:27:
f8:80:ee:c4:2e:52:a5:6d:f4:8b:63:12:45:09:c9:
17:9d:95:8c:54:9f:33:04:51:6e:1a:a1:b4:f8:97:
4e:03:48:e5:de:ae:29:3c:6e:c9:e5:fa:1b:88:37:
10:f2:fc:de:a0:6e:5e:00:25:a3:c8:1c:d1:bf:c7:
b5:11:48:7b:f7:4f:04:26:c8:76:78:5f:46:a4:56:
3b:59:69:98:4e:40:3e:aa:93:9c:dc:e0:da:26:88:
9a:3f:29:6e:5c:29:bc:70:3f:62:89:47:fa:02:f5:
60:1a:b4:3b:3a:be:b2:2e:cd:7c:12:1b:b7:53:e0:
17:ad:47:e1:9f:bf:b8:f5:cb:87:3e:b6:bb:bd:d6:
0f:eb:f0:78:94:44:81:f1:49:fd:90:23:48:39:4e:
9a:77:04:bf:30:29:da:b7:00:20:24:33:0b:6f:23:
d9:58:c1:e6:4f:7e:76:45:8a:54:2c:c2:9c:8e:a6:
ee:fd:71:cf:c3:1b:2e:03:47:48:b6:e4:bd:77:c8:
63:0d:68:e9:a0:a4:9d:57:ab:da:bf:02:ff:c7:87:
ba:70:c4:ec:23:a1:1b:6b:77:44:92:6d:ad:da:cd:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A6:E2:4A:8C:FB:8E:28:40:74:C7:85:51:0B:4F:4B:10:B8:BC:95
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/UqbiSoz7jihAdMeFUQtPSxC4vJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.140.0/22
Signature Algorithm: sha256WithRSAEncryption
07:a3:f6:75:6e:47:f8:e4:5d:51:18:77:0f:da:d8:00:f0:57:
1b:5e:7f:96:d6:4f:93:4d:f9:7e:dd:b3:0b:cb:e5:5c:cb:9f:
1b:3d:db:8a:58:29:a2:bd:b5:42:2c:b3:79:71:a6:ae:a1:aa:
96:34:19:ae:93:05:3a:6f:52:22:ca:e8:30:a5:aa:13:91:69:
d8:8e:f0:ec:aa:a8:59:53:15:1d:6a:8c:14:ef:f8:4d:4b:c8:
cd:53:7b:2d:d3:51:96:24:dd:92:7d:c8:aa:0b:24:ef:30:80:
db:13:3b:1d:1b:9e:90:0c:b8:0f:70:eb:2c:7e:09:96:31:f9:
f2:b4:36:09:ca:85:35:9f:13:03:46:60:1c:a1:2b:63:3d:2c:
8d:ba:c3:34:fa:96:7b:6c:db:5f:92:e6:b4:5e:62:aa:4c:33:
a1:a3:4f:f9:28:5b:5e:75:5d:fc:eb:28:42:3d:88:53:9e:fc:
3b:9f:38:e8:80:a6:0e:8f:c9:21:3c:eb:d7:b9:5f:dd:7b:52:
8d:cc:c3:24:11:b8:69:e1:6f:6f:32:17:b6:c2:66:bb:79:40:
47:01:23:89:9d:6e:37:9e:12:b7:25:21:eb:58:28:89:e4:c2:
0c:30:72:bc:10:e7:d2:6b:f3:72:5c:60:48:08:a3:96:85:5b:
23:31:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:31 2025 by rpki-client