Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/UQYDPJVEs82FAAq41wtkdsOl2WM.roa
File: UQYDPJVEs82FAAq41wtkdsOl2WM.roa (raw, json)
Hash identifier: u2SNWKesCo+EyeURSYfVPVYUINhkzBXD/RnvpraH1mQ=
Subject key identifier: 51:06:03:3C:95:44:B3:CD:85:00:0A:B8:D7:0B:64:76:C3:A5:D9:63
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 018572CCCAC263DE8C50982A7819D9A58A04
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/UQYDPJVEs82FAAq41wtkdsOl2WM.roa
Signing time: Mon 02 Jan 2023 14:05:01 +0000
ROA not before: Mon 02 Jan 2023 14:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51088
IP address blocks: 185.63.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:ca:c2:63:de:8c:50:98:2a:78:19:d9:a5:8a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Jan 2 14:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5106033c9544b3cd85000ab8d70b6476c3a5d963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:7f:38:1e:71:e4:7d:f5:3f:a2:37:af:7f:
3a:f7:4d:51:e2:d9:6f:ce:cd:ca:00:3b:a5:61:a9:
5c:f5:6a:cd:c8:ac:6a:6b:b8:e7:9a:82:76:c0:1c:
38:5f:08:e6:58:d0:e9:13:8f:7a:a1:f1:f0:97:d8:
97:84:66:e7:41:8d:d8:e1:27:9e:71:be:3d:39:bd:
75:f2:4f:98:2b:7e:73:9c:e3:84:e6:12:d1:39:23:
bb:1c:c3:65:8e:eb:6c:e3:24:e8:b1:a2:aa:69:f0:
c8:e9:7e:39:7b:c1:16:4a:d2:22:7e:a3:db:8a:3f:
bf:e9:5d:cf:2f:21:e3:a2:b2:d9:a5:3c:4d:23:be:
cb:86:f2:87:81:96:a5:1d:17:ca:b1:87:14:5e:1c:
76:1e:b2:e2:2d:8c:f2:db:a4:46:e8:03:45:e8:40:
59:30:50:5d:ba:f3:d4:86:99:7c:6e:8d:11:68:e2:
68:a3:c3:91:33:2a:04:8e:4d:20:cf:30:af:c1:fd:
ae:c5:0f:02:6b:90:5f:a8:38:7f:4a:16:d1:44:23:
9b:c8:e6:c7:90:e3:6a:b0:b7:d7:42:06:13:5c:81:
54:3c:e9:fe:88:62:b8:0e:eb:77:1e:12:07:d7:d1:
94:1e:ce:e7:0f:3c:1a:dd:c5:73:0d:6a:1d:f7:0c:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:03:3C:95:44:B3:CD:85:00:0A:B8:D7:0B:64:76:C3:A5:D9:63
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/UQYDPJVEs82FAAq41wtkdsOl2WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.244.0/22
Signature Algorithm: sha256WithRSAEncryption
52:3e:7a:fe:26:c6:86:e5:54:0a:81:00:93:48:57:40:d8:69:
4d:29:95:73:2b:9d:3c:6e:dc:e2:31:a4:c5:de:9f:d8:f2:a6:
29:9a:25:f3:a1:9d:84:c1:98:1e:d5:45:0d:0d:04:bb:ec:fd:
97:50:10:c6:30:a5:e9:af:7b:39:6b:b7:d1:92:65:19:09:8e:
72:bd:30:d9:94:8d:e3:11:1e:7c:ef:7a:37:1d:f6:cc:aa:c2:
20:c5:f0:b7:f4:f4:30:b1:af:a0:da:eb:08:48:65:4f:d8:b1:
cc:f3:a4:c5:2a:c7:12:75:77:3d:2d:b2:8e:2a:d6:c1:00:a4:
a5:04:e0:2e:e1:c1:48:56:dd:72:f0:f2:d9:20:13:52:3c:3d:
7c:6c:c2:14:fb:66:e1:89:08:3b:70:55:67:97:25:c3:54:6e:
86:a5:53:1e:b1:d1:63:cf:c5:cf:0c:af:60:33:50:8d:1f:e6:
86:21:5c:ae:88:42:8b:6f:d4:93:aa:00:c7:37:b8:de:68:91:
f8:69:38:74:9b:56:38:bb:fd:85:a8:cf:2b:4e:82:60:0a:ac:
a5:0d:16:1f:0b:7a:6f:6a:86:a0:67:ca:6c:c7:e2:e8:2a:af:
72:d1:a4:7f:9d:bf:f7:4b:8f:bd:86:8e:62:37:53:0b:cd:7e:
a0:43:76:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:16 2025 by rpki-client