Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/UPIoaFguShbnkUQSwI-6n7CQPtg.roa
File: UPIoaFguShbnkUQSwI-6n7CQPtg.roa (raw, json)
Hash identifier: zIEFWllaA5E75NvL4q37WBIstGY/PEJZfic3/Gc10i4=
Subject key identifier: 50:F2:28:68:58:2E:4A:16:E7:91:44:12:C0:8F:BA:9F:B0:90:3E:D8
Certificate issuer: /CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Certificate serial: 0185728C9FC89FC3B5DA40BFA298DA80B669
Authority key identifier: 0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/UPIoaFguShbnkUQSwI-6n7CQPtg.roa
Signing time: Mon 02 Jan 2023 12:54:56 +0000
ROA not before: Mon 02 Jan 2023 12:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34121
IP address blocks: 91.201.184.0/24 maxlen: 24
91.201.185.0/24 maxlen: 24
91.201.186.0/24 maxlen: 24
91.201.184.0/22 maxlen: 22
91.201.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:9f:c8:9f:c3:b5:da:40:bf:a2:98:da:80:b6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d12e0c7774191a55c3d1931fbf20004335fd21c
Validity
Not Before: Jan 2 12:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50f22868582e4a16e7914412c08fba9fb0903ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:02:56:da:11:be:3b:61:61:97:fb:3c:2d:
cf:3b:f2:e4:69:38:b6:13:c0:f0:f4:60:f8:e0:5b:
62:f3:33:c5:9a:85:a2:74:08:64:e1:6e:0a:72:14:
d8:f6:ee:be:d1:16:99:80:6c:68:af:5f:ee:76:c2:
4a:d9:af:0f:07:94:a5:92:a2:34:ae:59:7e:27:95:
02:54:8c:f1:79:32:a9:75:fa:9c:11:9a:91:3f:84:
5f:24:dd:0d:1c:b0:50:d5:9f:5b:bf:78:d6:8c:78:
78:bc:43:99:b2:f4:5a:86:fb:12:f7:49:80:31:8f:
c6:1f:33:b9:16:51:3b:37:64:6b:86:4a:b5:5d:18:
88:57:5a:cf:b4:b0:87:4d:33:84:6d:78:f7:06:2f:
7d:08:de:0f:fe:f0:fd:89:fb:0b:b7:60:59:22:4b:
ff:c1:38:5e:0b:7e:48:2b:b4:0e:66:43:38:7f:5d:
57:e1:f0:c0:3d:d2:9e:0a:fd:73:be:1b:a3:ac:10:
0e:69:5e:23:d3:1c:78:1b:ad:26:61:86:89:b8:00:
89:d9:7d:44:91:4c:4c:ba:e3:5b:b0:6e:74:cb:af:
ed:36:dd:c5:66:84:f9:d7:b1:8e:5e:8f:4f:3e:2b:
a1:c0:3e:f8:d2:f7:a9:36:f6:61:f7:e8:93:48:ea:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:28:68:58:2E:4A:16:E7:91:44:12:C0:8F:BA:9F:B0:90:3E:D8
X509v3 Authority Key Identifier:
keyid:0D:12:E0:C7:77:41:91:A5:5C:3D:19:31:FB:F2:00:04:33:5F:D2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRLgx3dBkaVcPRkx-_IABDNf0hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/UPIoaFguShbnkUQSwI-6n7CQPtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/92b548-fdba-4cd4-8361-3cd952ba005d/1/DRLgx3dBkaVcPRkx-_IABDNf0hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.184.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:51:fd:47:85:8c:e4:69:b8:a6:5b:5f:74:a8:6c:ee:aa:32:
3e:8e:3c:40:d8:41:d7:4f:84:77:72:fd:29:77:1c:4f:63:02:
45:ce:d0:b9:39:fe:9e:2e:e1:be:7f:a0:50:1b:d7:16:1a:6c:
dd:88:cf:9b:1f:d6:f9:19:a0:de:40:22:b5:76:69:7c:4e:fc:
d7:98:36:7d:14:e3:24:c7:47:70:93:b7:8d:19:83:27:07:dc:
80:d1:43:e4:31:56:05:df:f5:34:07:d2:13:48:63:a8:05:68:
ee:11:db:ce:c1:66:ac:10:13:32:66:87:32:24:ee:23:75:e0:
f6:ab:e2:61:ef:94:a0:76:bd:78:3c:75:88:6b:0c:45:e0:9c:
54:7e:0f:c7:d4:5c:9c:9e:6b:7e:0b:f6:19:77:b3:44:29:09:
16:2c:f6:24:76:ec:45:1d:80:0f:c1:c8:e4:00:e5:a7:e1:0d:
a8:3e:db:91:c9:53:df:a0:7d:83:12:37:5c:1e:ad:f0:a6:60:
80:b2:d2:76:4f:1b:5f:88:1e:04:68:b5:6e:e0:cd:49:f4:cd:
1b:e5:22:40:6b:96:59:8a:0c:0e:07:07:ec:9d:fd:cc:b1:c6:
67:67:6b:16:b4:08:10:07:31:66:4a:5c:8a:66:dc:36:67:f0:
f0:32:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:02 2025 by rpki-client