Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/UfD-0Zo08-YANq6wSPIX25osRpg.roa
File: UfD-0Zo08-YANq6wSPIX25osRpg.roa (raw, json)
Hash identifier: kynBNNz9D2vJhsbd6aZmkZLtpaWnbrM/26AxIn4FpZw=
Subject key identifier: 51:F0:FE:D1:9A:34:F3:E6:00:36:AE:B0:48:F2:17:DB:9A:2C:46:98
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 0187B793602B6C4DCF5E80C7EB09594299AC
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/UfD-0Zo08-YANq6wSPIX25osRpg.roa
Signing time: Tue 25 Apr 2023 08:41:41 +0000
ROA not before: Tue 25 Apr 2023 08:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41354
IP address blocks: 185.127.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:93:60:2b:6c:4d:cf:5e:80:c7:eb:09:59:42:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Apr 25 08:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51f0fed19a34f3e60036aeb048f217db9a2c4698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:fe:79:ed:f5:04:81:d0:54:42:1e:e1:cf:
4b:d8:56:73:55:7b:97:cb:5a:71:0f:93:ba:1e:a6:
6b:9a:b4:62:ba:45:0a:ea:e4:dc:66:15:e5:1a:05:
51:fd:c9:9d:b8:b2:6a:8f:02:6d:65:52:7b:22:f7:
9a:9a:b9:32:cd:35:54:78:d4:0e:47:5f:87:48:68:
c3:e9:30:2d:85:ec:61:e4:e0:0b:9b:70:26:f7:37:
4e:03:4b:33:b8:48:ed:6b:f7:ca:72:9a:04:32:17:
ba:5d:87:9f:ab:a2:ae:5b:6f:40:70:4d:82:bc:93:
45:0c:ed:6a:6e:24:92:09:46:dd:5f:38:07:e0:8a:
52:61:1a:9b:fd:f1:81:9f:84:a1:4b:25:7d:7e:fe:
92:5c:7a:8e:90:dd:43:2a:83:30:1a:41:0b:df:6d:
7b:3b:8c:08:55:e6:6d:c8:19:e2:3b:44:be:25:30:
a5:7d:52:92:96:5e:c9:a1:38:c1:ad:b9:19:a8:3c:
cb:8a:a1:68:66:f5:18:22:22:97:65:94:93:f8:43:
c2:e4:6a:7e:0d:73:7a:05:ab:88:89:79:f6:6a:f0:
82:3d:91:a1:c5:c9:b8:18:ef:b7:d0:06:50:88:c8:
36:4f:d5:3a:f6:4c:76:05:8d:7f:3d:c0:dd:2c:62:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:FE:D1:9A:34:F3:E6:00:36:AE:B0:48:F2:17:DB:9A:2C:46:98
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/UfD-0Zo08-YANq6wSPIX25osRpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.192.0/22
Signature Algorithm: sha256WithRSAEncryption
78:27:94:fe:96:80:0f:d3:1d:b7:e7:2a:43:bf:b5:28:07:56:
98:14:fb:0d:77:60:9e:a6:82:7c:0b:39:dd:92:4b:8f:54:85:
e2:be:47:f0:2f:7d:f3:30:09:a8:54:a0:a3:1b:98:1b:96:92:
6a:10:da:28:0c:f6:1e:e2:aa:5f:7c:f0:16:65:18:dd:48:3e:
9e:e0:85:9f:0d:ad:88:76:62:3f:d9:84:dd:0b:66:ee:26:af:
df:29:9e:97:ff:5a:8b:b8:79:b3:3a:3a:cc:42:dd:73:83:7e:
36:00:8f:e7:64:96:c4:e3:66:ea:31:dd:8e:04:cc:a6:d3:a9:
45:16:a9:ea:b5:d9:99:df:e9:9b:85:c9:f5:69:51:b8:e8:a6:
c5:f3:ef:a8:8e:59:43:c0:7f:33:2f:d7:e0:93:99:5d:e1:70:
a9:e9:74:c6:96:4b:23:6c:18:d8:cc:a1:10:bd:7a:d4:09:39:
85:35:5e:49:02:9e:42:b9:c8:3d:89:2a:16:36:4e:12:aa:d1:
2a:39:c7:2c:08:5c:0a:a4:92:f1:54:58:fe:2c:de:04:b7:fa:
81:73:40:38:2e:cc:18:c0:f5:84:8a:8b:42:ec:0a:e0:39:14:
32:d5:17:a8:4d:72:84:66:15:35:61:36:5e:91:4c:b9:87:0c:
8b:12:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:32 2025 by rpki-client