Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/UPJ2Tma9WnbWpQX3BwCPQTgMqOw.roa
File: UPJ2Tma9WnbWpQX3BwCPQTgMqOw.roa (raw, json)
Hash identifier: smJfKjPK5B1r9m+akv/cXyxxcUu5iExt5ojwjygj6Zg=
Subject key identifier: 50:F2:76:4E:66:BD:5A:76:D6:A5:05:F7:07:00:8F:41:38:0C:A8:EC
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 0AAE8D52
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/UPJ2Tma9WnbWpQX3BwCPQTgMqOw.roa
Signing time: Sat 01 Jan 2022 05:57:40 +0000
ROA not before: Sat 01 Jan 2022 05:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 131.211.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179211602 (0xaae8d52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Jan 1 05:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50f2764e66bd5a76d6a505f707008f41380ca8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:db:03:8d:e9:d1:17:10:20:a9:e4:97:6b:
86:3c:3f:d2:91:0a:0a:17:f0:92:c1:dd:84:fd:86:
0c:51:7b:5e:d2:ea:48:3f:e8:d8:0f:53:08:63:d3:
40:18:22:e1:7e:43:64:d2:ec:14:25:1b:12:fa:5f:
79:68:d1:38:1b:ae:ae:35:b6:1c:0e:82:4f:70:d3:
13:c4:5b:d2:2e:42:d2:11:dc:55:e6:e3:8f:3a:02:
60:2f:e7:58:e1:50:0d:96:85:a9:37:7f:8b:46:e5:
33:f7:08:66:7e:f9:04:69:f7:af:b6:8e:f5:36:22:
8b:f2:a3:d4:d3:2f:7b:02:8a:f8:8e:b7:b0:de:cf:
fe:1f:36:72:fd:e5:25:45:60:22:4c:9e:2b:a3:fe:
e0:58:62:79:83:e5:fe:60:18:09:72:0f:c8:ac:83:
8a:3e:ab:67:1f:b0:c0:88:9e:2a:9d:7d:70:98:aa:
21:9b:4c:48:89:52:3e:a3:f5:6d:85:45:fa:7e:22:
9f:c9:59:83:0f:76:3c:ac:7e:81:5b:12:00:e8:ea:
a9:1c:e1:82:22:67:40:a7:0d:e9:e7:fe:4a:b2:46:
c8:a7:4a:68:d4:43:b1:4f:55:bc:ec:7a:99:9e:9f:
b9:8e:e7:6a:17:24:ac:ad:76:18:54:6c:0a:ee:9c:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:76:4E:66:BD:5A:76:D6:A5:05:F7:07:00:8F:41:38:0C:A8:EC
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/UPJ2Tma9WnbWpQX3BwCPQTgMqOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.211.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:63:74:d8:a0:57:86:40:06:c2:ba:6b:c4:97:08:24:e3:d0:
d5:4b:9f:c2:3d:e8:5d:82:fc:7b:c5:39:d8:75:c3:63:1b:a2:
88:c9:aa:2d:22:15:fc:40:ab:52:8b:51:c7:07:ca:b5:98:13:
96:89:57:5a:b0:16:67:e7:7b:2d:2c:ce:75:a3:af:e0:82:f0:
c2:89:e6:79:3b:78:d1:9b:23:7c:35:70:0b:f2:2e:6d:0d:7a:
85:c1:ad:a8:34:07:c8:1a:44:43:39:ef:27:45:72:64:99:dd:
07:5e:d4:99:e0:59:66:85:30:2b:9d:ba:fd:0e:a7:6c:79:cd:
d2:8a:3d:5a:27:05:f9:21:35:4a:0d:3d:6e:65:8b:de:90:8f:
76:82:f4:c9:6c:43:5e:0a:8a:be:c9:e0:42:ba:5c:41:cc:4f:
2a:cc:d2:e6:0f:b1:4e:72:54:fb:ed:8d:39:1b:c6:bf:0b:d6:
ea:e5:e9:91:c2:1b:4a:53:7b:f9:53:f1:95:56:8a:af:1f:c6:
e3:b5:a8:95:f0:34:db:75:fb:3a:7a:e7:37:e5:31:5a:70:75:
12:10:e7:06:c6:d9:3e:59:23:e6:f7:d1:ab:ac:9d:e6:04:93:
55:a8:8b:c6:2a:91:75:00:96:5c:d1:64:73:a2:d8:ee:6f:97:
d1:bb:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:42 2025 by rpki-client