Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/ueAOQFJ3RnvNeyLgOYMatDe1qKo.roa
File: ueAOQFJ3RnvNeyLgOYMatDe1qKo.roa (raw, json)
Hash identifier: 8YmoQ/4ZF59/l2Gb++QeI3dNdaERxoR8DdtgnqQN3MY=
Subject key identifier: B9:E0:0E:40:52:77:46:7B:CD:7B:22:E0:39:83:1A:B4:37:B5:A8:AA
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 01857139E229421F997F5577422DF43C80F9
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/ueAOQFJ3RnvNeyLgOYMatDe1qKo.roa
Signing time: Mon 02 Jan 2023 06:44:56 +0000
ROA not before: Mon 02 Jan 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205565
IP address blocks: 185.213.244.0/22 maxlen: 22
2a0b:90c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e2:29:42:1f:99:7f:55:77:42:2d:f4:3c:80:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Jan 2 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9e00e405277467bcd7b22e039831ab437b5a8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:34:97:07:2d:67:e6:96:e5:46:71:47:7e:
9c:8c:05:ce:1c:ef:ff:d7:c8:d4:7f:0d:c8:a0:07:
46:67:ca:ea:eb:be:2e:18:15:d1:bd:01:24:5e:b3:
3a:d5:bb:d6:1d:e8:9f:09:67:d9:ce:e3:b2:57:a4:
fe:9a:9f:be:b2:87:d0:5f:a4:d0:66:2a:a8:cb:17:
2f:4b:d0:71:ab:72:a9:40:48:9b:36:a2:ce:d0:31:
a4:12:48:9b:ef:69:6b:7f:52:eb:19:e0:77:74:4e:
36:4b:e6:9b:28:13:f8:f1:74:57:4b:53:a3:59:78:
c6:46:5e:59:e3:b1:f2:71:2f:5c:20:f2:a7:d4:8d:
83:74:b9:2c:2e:e0:79:09:b6:b2:fd:c7:42:b0:ca:
74:e8:ab:3a:90:54:82:9b:55:8b:15:b3:b3:e9:31:
09:e3:62:e0:e5:16:2e:6e:7b:a9:14:63:f1:2b:4b:
34:1a:a2:b9:59:54:cb:d9:aa:a6:27:65:0b:43:82:
09:f4:3f:d4:b8:66:5f:cd:fb:66:90:b0:a8:7c:9b:
ac:c6:a1:ff:63:33:0a:92:be:32:cd:a1:52:7c:9c:
b3:e7:69:ee:72:bb:dc:32:fa:36:04:41:97:c0:ba:
b8:52:1b:b5:83:e0:22:d2:aa:84:20:d5:95:66:aa:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E0:0E:40:52:77:46:7B:CD:7B:22:E0:39:83:1A:B4:37:B5:A8:AA
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/ueAOQFJ3RnvNeyLgOYMatDe1qKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.244.0/22
IPv6:
2a0b:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:6c:6a:b2:2f:72:08:80:77:9e:b6:7a:3a:f7:65:75:e7:7b:
2b:b7:f9:8f:74:b4:84:1b:f3:b6:dd:91:30:ff:a0:0e:59:59:
d6:14:f2:34:f3:da:d7:2e:7f:95:67:b1:11:c9:5f:58:91:8a:
a5:78:bc:82:38:66:6a:1b:c7:3a:40:53:9b:5a:d4:b7:81:0d:
0e:69:fd:47:9e:70:6f:e9:fa:3f:12:d3:2b:01:ed:2f:3f:18:
bc:61:0c:cf:d1:3e:3f:12:ea:33:8d:fb:e1:cd:34:69:ae:d9:
8c:69:b3:bd:0f:96:c1:c1:86:85:65:0c:17:1e:ad:73:bd:12:
92:0a:ad:8b:2c:23:2e:b0:25:82:e9:54:ed:91:62:f0:42:2d:
37:08:f1:85:61:76:cb:8d:49:2a:d3:39:06:db:9b:72:d9:4d:
74:9e:54:e7:5a:68:4d:71:c9:a0:97:81:22:7c:62:84:2f:33:
25:0c:cd:db:c6:cf:1f:44:6b:66:e1:a2:a2:dd:65:13:78:90:
df:b2:51:e7:0d:a5:0c:91:2e:63:3c:66:e4:17:ee:9d:7d:ca:
f8:75:1d:27:92:bf:f1:15:4c:4c:59:0c:c1:18:ae:fe:17:de:
2e:7e:01:0a:94:3a:1a:a6:69:85:a5:c0:c9:c4:07:7c:fc:f9:
84:83:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:06 2025 by rpki-client