Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/Uuu9nS4-BI5pcZlAZ1HksdR15X0.roa
File: Uuu9nS4-BI5pcZlAZ1HksdR15X0.roa (raw, json)
Hash identifier: JRTeKCjiRNWVFVLDh1C9K6fX4lWtj9gze+I+8hgaSyM=
Subject key identifier: 52:EB:BD:9D:2E:3E:04:8E:69:71:99:40:67:51:E4:B1:D4:75:E5:7D
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 373AEC78
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/Uuu9nS4-BI5pcZlAZ1HksdR15X0.roa
Signing time: Wed 29 Jun 2022 14:19:53 +0000
ROA not before: Wed 29 Jun 2022 14:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198013
IP address blocks: 94.185.123.0/24 maxlen: 24
94.185.97.0/24 maxlen: 24
94.185.96.0/19 maxlen: 19
94.185.98.0/24 maxlen: 24
94.185.104.0/22 maxlen: 22
94.185.103.0/24 maxlen: 24
94.185.102.0/24 maxlen: 24
94.185.101.0/24 maxlen: 24
94.185.100.0/24 maxlen: 24
94.185.99.0/24 maxlen: 24
94.185.110.0/24 maxlen: 24
94.185.109.0/24 maxlen: 24
94.185.108.0/24 maxlen: 24
94.185.112.0/24 maxlen: 24
94.185.113.0/24 maxlen: 24
2a03:4580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926608504 (0x373aec78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Jun 29 14:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52ebbd9d2e3e048e697199406751e4b1d475e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:16:4d:b4:11:a1:09:69:6d:c2:96:b3:8f:
51:d7:01:86:13:bb:d5:30:1b:af:f0:5f:10:e4:f5:
7b:77:97:77:90:57:fe:88:63:16:52:6f:dc:cd:fd:
f2:00:8c:43:a7:57:ab:d0:b2:23:7f:47:44:e6:24:
04:37:ca:b6:1e:ea:0a:78:2a:af:5a:cb:99:05:1d:
9a:30:8a:b1:78:a3:e0:9a:75:89:05:a7:fe:b6:79:
67:69:0d:0b:39:6b:cb:d2:a7:b0:a3:9c:9a:12:d3:
c5:a4:7c:91:f6:04:6c:e5:0f:7c:62:26:24:24:f2:
06:11:49:06:d6:45:9c:eb:f6:5e:9e:e1:49:3e:58:
a3:cc:e1:c8:45:69:77:52:dc:7c:df:90:2c:99:59:
98:17:06:e1:c2:56:33:ef:90:24:60:d9:a6:91:81:
ff:f1:8b:06:02:8d:b5:b3:6c:f0:ba:9c:c9:ed:8c:
37:3f:6f:72:2e:56:f3:94:37:b6:4b:2a:b6:e6:7e:
70:5d:cb:e0:60:8e:c5:db:af:ab:0d:7b:42:67:6d:
55:90:47:fe:dc:52:08:f6:11:2e:16:bb:b1:b3:ff:
a6:43:d6:59:1f:9d:bf:d9:a0:c6:5a:bd:bd:8d:e1:
7e:16:43:59:55:d4:29:c9:72:d7:52:c6:a1:6b:d6:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:BD:9D:2E:3E:04:8E:69:71:99:40:67:51:E4:B1:D4:75:E5:7D
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/Uuu9nS4-BI5pcZlAZ1HksdR15X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.96.0/19
IPv6:
2a03:4580::/32
Signature Algorithm: sha256WithRSAEncryption
59:5e:24:33:91:11:fb:2f:bb:dd:54:de:7e:76:8e:85:f8:35:
c8:a9:dd:79:14:9b:01:a0:8c:b6:09:3c:e6:33:7d:1f:b0:41:
3a:5c:1c:6c:f9:03:a9:62:d3:60:61:bf:f1:90:5b:a9:5f:b9:
c8:4e:ef:2e:6e:12:fc:db:4f:d5:b0:de:1f:2d:d8:33:5a:5d:
59:a1:eb:80:8c:0f:da:c3:e0:53:d6:4b:3d:56:61:66:6f:f9:
27:9c:c2:1b:77:06:ed:9b:21:40:69:a4:d7:f1:8b:12:e6:40:
60:cc:4b:54:36:84:9b:ff:25:18:7d:de:91:69:d4:f4:89:26:
7b:23:ec:91:9f:7c:00:7a:4b:a5:d8:88:98:62:a4:b6:1e:a0:
d1:25:82:ce:e2:2b:31:87:20:27:bb:09:9a:14:60:fe:9d:1a:
73:33:da:a3:5d:1a:9f:03:d1:9f:05:31:35:46:1d:57:40:e7:
38:71:82:63:24:98:4a:56:65:e8:16:bc:d7:13:97:7e:83:b8:
cb:a0:41:4e:a8:46:c1:c6:05:03:61:fc:f7:e4:60:21:ca:34:
08:d3:c2:dd:ef:d7:a6:8d:3d:e4:36:0f:ea:5d:bb:29:93:b8:
13:11:5a:e8:92:03:6b:2d:3f:7a:ec:be:31:d0:e4:93:70:2a:
d7:ac:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:31 2025 by rpki-client